$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft File: 28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft (raw, json) Hash identifier: goK8oEQ3h/aDOI6qTqJjHLl8JZRGWXWlQS6l+uwi9tk= Subject key identifier: 59:48:27:31:14:CB:DD:A0:E3:3C:BF:81:9D:A2:EB:B2:69:FE:07:79 Authority key identifier: 28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA Certificate issuer: /CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Certificate serial: 17BD6817102B9448BF9D38D61C932F4DAF24E628 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:20:23 +0000 Manifest this update: Wed 16 Sep 2026 21:15:23 +0000 Manifest next update: Fri 18 Sep 2026 00:20:23 +0000 Files and hashes: 1: 28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl (hash: NNeXesoceelYza7gJtPFTxAXQQ8AtWr2RtmNCcLjDJE=) 2: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: SdAYaKbLY7S/5p5HGrJ4jkCgcURLrEIiXWTRP7lNFqs=) 3: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: A6nVc+CU4v4uaObx3pcTTBPbO/2k+l19C2GraBAa5qQ=) 4: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: IW57GOIpsV3XMacGHlka+0CSQgtIywURoK2nG7nWa7w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:bd:68:17:10:2b:94:48:bf:9d:38:d6:1c:93:2f:4d:af:24:e6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Validity Not Before: Sep 16 21:15:23 2026 GMT Not After : Sep 18 00:20:23 2026 GMT Subject: CN=5948273114CBDDA0E33CBF819DA2EBB269FE0779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:c1:05:7d:be:58:33:43:65:80:84:39:88: 8f:b5:e1:0a:a7:96:20:24:32:40:ac:bf:b3:a5:78: 67:7e:6f:92:d2:3d:bb:ed:f6:1b:6a:12:b7:65:88: e3:90:e6:c4:f5:bb:39:94:b0:c6:37:6b:2d:41:97: 8f:a2:a7:ad:f3:15:d7:97:6f:b5:9f:78:fb:34:e0: 84:73:d1:fd:bd:b1:25:c5:e4:00:36:f1:b0:4d:7d: 1a:7b:7e:d4:1e:3b:39:4f:e2:8e:c3:4c:9e:de:45: 49:63:f7:de:10:b4:06:af:b1:bb:1d:aa:68:bc:5b: ed:3b:a0:ab:86:87:63:19:db:96:ef:97:b6:4c:10: 46:bf:91:99:6f:3b:c4:47:68:c5:3b:28:f3:e8:5d: 6c:90:c2:31:bd:0b:8d:74:69:9c:c2:79:ea:1d:1d: 48:cf:9d:4c:e1:6e:e1:71:87:c1:06:50:1e:1d:ef: f9:f5:88:b5:c3:8e:b6:32:d1:87:75:ca:eb:6d:08: c5:5d:5f:cb:15:3c:8d:45:0a:d8:74:0b:60:3c:9b: 09:ac:47:a8:1a:00:0e:6a:ae:c0:82:ce:58:62:93: 97:ec:f6:c8:10:16:4a:c5:2e:ba:5e:df:8b:5f:76: 32:1f:93:ef:c7:e7:f9:32:28:97:7e:4f:ff:1a:59: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:48:27:31:14:CB:DD:A0:E3:3C:BF:81:9D:A2:EB:B2:69:FE:07:79 X509v3 Authority Key Identifier: keyid:28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:93:eb:e4:c1:11:e3:3d:7e:15:82:55:49:88:44:c0:2d:9b: 6d:bb:d6:76:2a:ae:74:03:ab:4e:4d:db:88:f2:05:f4:2f:8d: 1f:79:00:7f:9f:7b:59:84:6c:6d:03:43:27:d8:e5:b6:4e:88: bb:8f:b1:cb:f5:fe:15:ae:a4:4d:09:ce:75:6a:e8:d8:d2:48: 13:fb:a5:3b:b4:bd:ce:ae:5a:da:29:77:68:c0:e4:cb:14:59: 40:76:fa:02:f5:dd:38:82:ba:91:03:7a:74:a3:15:5f:08:66: 27:af:4b:ba:e5:e8:32:4b:98:b9:5a:e4:56:64:66:01:45:e2: 7b:63:95:30:28:8d:9d:ee:af:b6:6e:9f:1d:7c:f5:89:fb:2d: e5:d7:b2:b3:ce:9e:71:84:72:35:4b:99:02:96:35:29:15:c4: 70:7e:51:bc:3f:c6:c4:5d:86:e8:c8:ba:9a:a4:94:6d:58:12: ae:10:80:4c:3b:db:2e:03:ad:ca:f3:48:6f:3c:f2:9e:de:fe: 4f:8e:5e:47:5d:8a:32:65:df:c0:13:fa:2c:5b:d2:64:43:38: 01:f3:b6:08:31:e4:da:8a:ef:86:af:24:f8:35:6b:1b:b7:9c: 1b:0e:89:35:0d:92:3e:01:cc:16:fe:b7:ca:08:4e:14:a7:4b: 72:e1:3e:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF71oFxArlEi/nTjWHJMvTa8k5igwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg4ODBFNkEzNUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2 MTlGRTBCQTAeFw0yNjA5MTYyMTE1MjNaFw0yNjA5MTgwMDIwMjNaMDMxMTAvBgNV BAMTKDU5NDgyNzMxMTRDQkREQTBFMzNDQkY4MTlEQTJFQkIyNjlGRTA3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz7MEFfb5YM0NlgIQ5iI+14Qqn liAkMkCsv7OleGd+b5LSPbvt9htqErdliOOQ5sT1uzmUsMY3ay1Bl4+ip63zFdeX b7WfePs04IRz0f29sSXF5AA28bBNfRp7ftQeOzlP4o7DTJ7eRUlj994QtAavsbsd qmi8W+07oKuGh2MZ25bvl7ZMEEa/kZlvO8RHaMU7KPPoXWyQwjG9C410aZzCeeod HUjPnUzhbuFxh8EGUB4d7/n1iLXDjrYy0Yd1yuttCMVdX8sVPI1FCth0C2A8mwms R6gaAA5qrsCCzlhik5fs9sgQFkrFLrpe34tfdjIfk+/H5/kyKJd+T/8aWYkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWUgnMRTL3aDjPL+BnaLrsmn+B3kwHwYDVR0j BBgwFoAUKIgOajW2yK7LwIMo4ML2OWGf4LowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4ODQ0MmItYzQ4ZS00YmEwLThhZDctNThlMTI2M2M2ZGM3LzAvMjg4ODBFNkEz NUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2MTlGRTBCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODg4MEU2QTM1QjZDOEFFQ0JDMDgzMjhFMEMyRjYzOTYxOUZF MEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvMjg4ODBFNkEzNUI2QzhBRUNCQzA4MzI4RTBDMkY2 Mzk2MTlGRTBCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGT6+TBEeM9fhWCVUmIRMAtm2271nYqrnQD q05N24jyBfQvjR95AH+fe1mEbG0DQyfY5bZOiLuPscv1/hWupE0JznVq6NjSSBP7 pTu0vc6uWtopd2jA5MsUWUB2+gL13TiCupEDenSjFV8IZievS7rl6DJLmLla5FZk ZgFF4ntjlTAojZ3ur7Zunx189Yn7LeXXsrPOnnGEcjVLmQKWNSkVxHB+Ubw/xsRd hujIupqklG1YEq4QgEw72y4DrcrzSG888p7e/k+OXkddijJl38AT+ixb0mRDOAHz tggx5NqK74avJPg1axu3nBsOiTUNkj4BzBb+t8oIThSnS3LhPjU= -----END CERTIFICATE-----Generated at Thu Sep 17 09:23:27 2026 by rpki-client