$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft File: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft (raw, json) Hash identifier: HBezpOn1qmT71D6/3ltEpFeluCizDnYo716nmdbySwo= Subject key identifier: 29:F7:B3:35:30:2D:F9:4B:6C:78:F4:64:2D:DD:91:5E:17:1D:49:07 Authority key identifier: 02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 Certificate issuer: /CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Certificate serial: 204638755B850AB474AB97B262D75A84F8A7AB21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft Manifest number: AF Signing time: Thu 10 Sep 2026 17:13:09 +0000 Manifest this update: Thu 10 Sep 2026 17:08:09 +0000 Manifest next update: Fri 11 Sep 2026 19:59:09 +0000 Files and hashes: 1: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: Xk7Qw7wFoGRI3rjKCFAl7ffLOSrFJh23uM7+wGfmYww=) 2: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl (hash: NmsLkEvjyNMCBZiO5VLPwNQr7c58qPq5Rj/+/RhUSfA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 11:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:46:38:75:5b:85:0a:b4:74:ab:97:b2:62:d7:5a:84:f8:a7:ab:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Validity Not Before: Sep 10 17:08:09 2026 GMT Not After : Sep 11 19:59:09 2026 GMT Subject: CN=29F7B335302DF94B6C78F4642DDD915E171D4907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:be:d6:5b:af:b6:65:2d:3a:84:25:ad:cc:59: 15:b5:c2:ae:54:c2:7a:5c:31:56:52:99:d3:d6:00: 41:a4:97:4e:95:8f:7b:92:43:59:38:b8:ac:55:cc: 74:1d:d2:55:55:c6:ee:61:86:59:f8:d3:5c:41:5e: f2:b9:78:ed:55:2a:c9:a5:0c:b9:65:73:68:1e:d9: be:ab:66:63:41:79:18:c9:e9:9b:8b:4d:f2:b2:86: 71:8e:90:83:d6:0a:59:b4:41:47:0e:95:bb:77:42: 48:87:62:d5:1b:0a:88:e8:df:7e:6a:cb:87:6e:49: 5d:e6:87:65:1a:0a:73:84:24:6c:f7:9c:ce:df:da: 09:5e:1d:c0:f6:f8:97:b1:12:1b:e0:8e:c8:a4:81: 24:62:93:00:5b:c6:31:a9:c8:2b:f0:20:69:4b:ff: 19:cd:ae:c6:37:6e:6a:3a:b6:7a:1d:d9:eb:53:d3: 3d:88:6b:4a:62:63:c4:34:04:78:35:d9:d0:bd:12: b1:ea:60:3b:36:bf:da:33:db:74:58:9b:6c:73:46: ed:5a:19:7f:f4:55:2e:3d:da:1e:82:1b:c5:8e:c5: 0a:42:32:79:05:48:ce:d5:78:8f:9d:99:c0:ba:0e: 5d:f5:3e:8d:9f:ea:42:fe:48:61:0f:e7:be:dd:ab: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F7:B3:35:30:2D:F9:4B:6C:78:F4:64:2D:DD:91:5E:17:1D:49:07 X509v3 Authority Key Identifier: keyid:02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f5:d8:c4:fc:a0:e0:43:9a:fe:b0:b0:b2:98:23:0a:68:07: 3f:b4:81:af:19:b6:48:72:16:13:d0:a9:f9:42:62:8f:22:51: 5d:4a:bf:24:08:53:19:f8:ef:84:15:f3:f9:e2:f1:8d:30:de: 96:c7:ff:38:ed:db:9e:86:26:18:5d:77:84:29:68:fa:05:81: c8:9b:b6:88:05:99:96:23:37:ff:b1:4e:64:5e:a3:d8:84:17: 51:44:df:99:d8:35:33:a4:b9:42:f9:6c:47:74:6f:cf:ba:89: 0e:8d:15:34:1b:e0:f6:6b:dd:5f:b0:82:55:26:3e:a4:5f:ab: 8b:78:d2:6d:35:dc:28:67:bf:e6:0e:5d:e1:92:d5:97:ae:87: 6b:8e:19:01:d8:05:41:1a:b0:5a:95:39:c4:83:0e:e8:3e:2d: 0f:7a:7d:37:d0:18:eb:f3:5a:a0:47:09:dc:47:04:91:03:21: d4:66:0c:b0:64:4f:cb:d7:37:95:38:24:cd:6e:ec:6a:f5:e2: a4:74:0a:b0:7c:7e:d3:01:24:fd:a5:d6:21:5c:4e:59:59:ab: f9:e5:51:f8:2c:9a:51:74:17:de:d4:28:e5:bb:83:c6:09:af: 66:57:ac:5c:9c:8c:d6:13:26:1c:a0:69:4b:02:99:8e:3e:31: 24:f5:59:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEY4dVuFCrR0q5eyYtdahPinqyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0QjczQzY4 RDBBMENCMzAeFw0yNjA5MTAxNzA4MDlaFw0yNjA5MTExOTU5MDlaMDMxMTAvBgNV BAMTKDI5RjdCMzM1MzAyREY5NEI2Qzc4RjQ2NDJEREQ5MTVFMTcxRDQ5MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvtZbr7ZlLTqEJa3MWRW1wq5U wnpcMVZSmdPWAEGkl06Vj3uSQ1k4uKxVzHQd0lVVxu5hhln401xBXvK5eO1VKsml DLllc2ge2b6rZmNBeRjJ6ZuLTfKyhnGOkIPWClm0QUcOlbt3QkiHYtUbCojo335q y4duSV3mh2UaCnOEJGz3nM7f2gleHcD2+JexEhvgjsikgSRikwBbxjGpyCvwIGlL /xnNrsY3bmo6tnod2etT0z2Ia0piY8Q0BHg12dC9ErHqYDs2v9oz23RYm2xzRu1a GX/0VS492h6CG8WOxQpCMnkFSM7VeI+dmcC6Dl31Po2f6kL+SGEP577dq0CdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKfezNTAt+UtsePRkLd2RXhcdSQcwHwYDVR0j BBgwFoAUAgYo2xbf3fRCkjsJ0Etzxo0KDLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmM5MDk3MzctMTU2NC00NmNhLTkwMDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIx NkRGRERGNDQyOTIzQjA5RDA0QjczQzY4RDBBMENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjA2MjhEQjE2REZEREY0NDI5MjNCMDlEMDRCNzNDNjhEMEEw Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0Qjcz QzY4RDBBMENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD712MT8oOBDmv6wsLKYIwpoBz+0ga8Ztkhy FhPQqflCYo8iUV1KvyQIUxn474QV8/ni8Y0w3pbH/zjt256GJhhdd4QpaPoFgcib togFmZYjN/+xTmReo9iEF1FE35nYNTOkuUL5bEd0b8+6iQ6NFTQb4PZr3V+wglUm PqRfq4t40m013Chnv+YOXeGS1Zeuh2uOGQHYBUEasFqVOcSDDug+LQ96fTfQGOvz WqBHCdxHBJEDIdRmDLBkT8vXN5U4JM1u7Gr14qR0CrB8ftMBJP2l1iFcTllZq/nl UfgsmlF0F97UKOW7g8YJr2ZXrFycjNYTJhygaUsCmY4+MST1WYE= -----END CERTIFICATE-----Generated at Fri Sep 11 00:22:03 2026 by rpki-client