$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft File: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft (raw, json) Hash identifier: vXHmf6AZNEcY81pDhnbk3fBEfMnCZibSYxKP6jvv7eA= Subject key identifier: 71:07:4D:A5:FB:F2:9A:5B:5D:81:FD:25:63:56:17:FC:BA:3C:B5:D5 Authority key identifier: 02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 Certificate issuer: /CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Certificate serial: 785C301EE7F96829852DDB8968804EF25BBF201C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft Manifest number: ED Signing time: Mon 26 Oct 2026 17:06:47 +0000 Manifest this update: Mon 26 Oct 2026 17:01:47 +0000 Manifest next update: Tue 27 Oct 2026 17:11:47 +0000 Files and hashes: 1: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: Xk7Qw7wFoGRI3rjKCFAl7ffLOSrFJh23uM7+wGfmYww=) 2: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl (hash: a4hYMyLT1hAXy5rC27h5Pxu1xun4G64+nJa7eJEwcqE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5c:30:1e:e7:f9:68:29:85:2d:db:89:68:80:4e:f2:5b:bf:20:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Validity Not Before: Oct 26 17:01:47 2026 GMT Not After : Oct 27 17:11:47 2026 GMT Subject: CN=71074DA5FBF29A5B5D81FD25635617FCBA3CB5D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1a:1d:cd:6a:37:15:6d:db:40:3b:43:a9:a2: 20:f4:c0:a2:ad:f0:ae:f1:f9:f8:7d:2b:16:55:c9: ea:2e:b4:3f:77:78:3d:ae:fc:4c:41:f2:5e:8c:7f: 62:47:09:93:6c:c0:db:a2:23:9c:b5:ae:72:03:68: 42:9f:46:e1:f3:fa:36:9a:83:e0:c7:91:a0:4e:2d: 47:1b:a1:cd:c5:6e:9b:38:ef:b9:f2:e5:0b:5b:62: 2c:8c:66:e9:e9:23:43:1c:57:20:98:a8:56:9c:65: 43:58:67:a6:d7:0a:0e:df:d1:a5:12:4d:fb:01:9f: cf:01:34:86:a6:ff:17:43:3a:c9:06:91:da:a8:71: 8f:c1:08:3d:29:a9:1d:dd:e0:a8:1c:a4:02:96:9b: 39:f5:65:ba:b9:1f:f2:32:49:8d:30:33:8e:c9:d1: 3e:21:21:50:64:2e:7a:b1:83:73:51:81:7e:5b:97: 2f:cb:67:80:90:c8:c1:a7:50:83:2e:b8:3d:1f:6a: b8:6e:9a:56:83:00:39:c3:96:6b:cd:2a:7e:0a:b3: 12:45:4a:c7:b8:a8:cd:79:e4:27:2a:09:8c:93:58: d9:8c:0e:3e:3e:99:30:e8:46:09:96:46:d6:63:c2: 79:c1:bc:2b:e2:2c:c5:e3:fb:1d:e1:41:bc:7e:04: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:07:4D:A5:FB:F2:9A:5B:5D:81:FD:25:63:56:17:FC:BA:3C:B5:D5 X509v3 Authority Key Identifier: keyid:02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:0f:ef:ea:1c:8d:db:44:56:30:f8:a6:b1:55:82:2f:e1:82: d1:2a:56:d8:f5:13:b0:60:fe:7d:1f:84:c1:fd:c4:52:41:a6: a6:98:82:9c:18:23:0f:d0:97:d4:78:89:22:8c:f0:51:0a:2d: f6:92:88:56:78:dd:63:2f:ee:20:85:12:96:88:79:16:c1:13: 00:9d:0e:58:8f:60:a4:16:13:3e:19:13:0c:b4:37:24:89:0e: 72:33:1c:dc:cb:25:57:22:60:ee:06:45:d6:ab:33:f3:c1:62: 55:2c:87:85:79:18:73:c3:6a:ad:c4:96:8d:cf:dc:6f:db:92: 5f:80:a1:9b:dc:fe:d9:06:7d:0e:46:37:67:66:b9:23:8b:fa: bb:7e:40:91:19:26:35:0e:65:08:12:fb:36:bc:2b:3b:57:e5: 56:2a:02:f5:52:87:cc:fb:d6:21:93:d5:fb:5c:fb:f9:70:b9: f5:e0:3f:71:2c:f9:2a:39:e0:06:4e:25:39:b9:78:d2:fd:b1: 5e:22:24:ee:97:1a:e0:ef:c4:67:87:dd:2f:f6:3d:18:1e:70: e2:c7:bc:e4:70:d0:72:59:e7:08:25:f4:5f:d3:cd:ba:40:b0: 1c:21:fc:36:85:33:5d:d8:35:07:64:d8:11:76:23:98:3a:3c: e6:9a:75:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeFwwHuf5aCmFLduJaIBO8lu/IBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0QjczQzY4 RDBBMENCMzAeFw0yNjEwMjYxNzAxNDdaFw0yNjEwMjcxNzExNDdaMDMxMTAvBgNV BAMTKDcxMDc0REE1RkJGMjlBNUI1RDgxRkQyNTYzNTYxN0ZDQkEzQ0I1RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRGh3NajcVbdtAO0OpoiD0wKKt 8K7x+fh9KxZVyeoutD93eD2u/ExB8l6Mf2JHCZNswNuiI5y1rnIDaEKfRuHz+jaa g+DHkaBOLUcboc3Fbps477ny5QtbYiyMZunpI0McVyCYqFacZUNYZ6bXCg7f0aUS TfsBn88BNIam/xdDOskGkdqocY/BCD0pqR3d4KgcpAKWmzn1Zbq5H/IySY0wM47J 0T4hIVBkLnqxg3NRgX5bly/LZ4CQyMGnUIMuuD0farhumlaDADnDlmvNKn4KsxJF Sse4qM155CcqCYyTWNmMDj4+mTDoRgmWRtZjwnnBvCviLMXj+x3hQbx+BK4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcQdNpfvymltdgf0lY1YX/Lo8tdUwHwYDVR0j BBgwFoAUAgYo2xbf3fRCkjsJ0Etzxo0KDLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmM5MDk3MzctMTU2NC00NmNhLTkwMDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIx NkRGRERGNDQyOTIzQjA5RDA0QjczQzY4RDBBMENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjA2MjhEQjE2REZEREY0NDI5MjNCMDlEMDRCNzNDNjhEMEEw Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0Qjcz QzY4RDBBMENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4P7+ocjdtEVjD4prFVgi/hgtEqVtj1E7Bg /n0fhMH9xFJBpqaYgpwYIw/Ql9R4iSKM8FEKLfaSiFZ43WMv7iCFEpaIeRbBEwCd DliPYKQWEz4ZEwy0NySJDnIzHNzLJVciYO4GRdarM/PBYlUsh4V5GHPDaq3Elo3P 3G/bkl+AoZvc/tkGfQ5GN2dmuSOL+rt+QJEZJjUOZQgS+za8KztX5VYqAvVSh8z7 1iGT1ftc+/lwufXgP3Es+So54AZOJTm5eNL9sV4iJO6XGuDvxGeH3S/2PRgecOLH vORw0HJZ5wgl9F/TzbpAsBwh/DaFM13YNQdk2BF2I5g6POaadbA= -----END CERTIFICATE-----Generated at Tue Oct 27 04:37:02 2026 by rpki-client