$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft File: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft (raw, json) Hash identifier: J6ZON7sFHOzSDva0DbmVHz9UD5M+UB59Q+HH4kqS5xQ= Subject key identifier: 52:67:A7:B7:C3:1A:CD:03:23:28:30:A1:5C:42:BD:20:A2:1F:77:5E Authority key identifier: 02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 Certificate issuer: /CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Certificate serial: 596459EB475034AC333631E71B74A2615B511765 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:14:57 +0000 Manifest this update: Thu 17 Sep 2026 05:09:57 +0000 Manifest next update: Fri 18 Sep 2026 07:47:57 +0000 Files and hashes: 1: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: OZMHHHmslz7MYh9R9Ib0RjlOxsJyDimPwwAqaL88/ng=) 2: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl (hash: eudPoJYD8kyn75bLMuwrwX4IjNo5OoI3EgTfNJ5k5Vo=) 3: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: N8zhnsK8z7VxJNfcfyiLUZPoMiisc/2RHnWBqlz/4MI=) 4: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: GtQhQt5lC+popSxKBpEXClSBs/pxIHaZp5GFBcVq7Ds=) 5: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: OyG3mFe6SrJhcLOwFyBCeuQpeyeUH09cXSgAgqZj+fA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:64:59:eb:47:50:34:ac:33:36:31:e7:1b:74:a2:61:5b:51:17:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Validity Not Before: Sep 17 05:09:57 2026 GMT Not After : Sep 18 07:47:57 2026 GMT Subject: CN=5267A7B7C31ACD03232830A15C42BD20A21F775E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:dc:5a:e5:9f:4f:d2:2b:87:82:50:11:93: 88:29:f6:5c:85:37:30:07:17:3d:52:61:94:c0:38: 59:ce:5b:88:25:43:a7:d6:55:87:6d:ae:85:15:e7: 87:1e:2e:45:6e:cb:f8:a7:c0:e2:82:49:7f:f9:d3: 26:4d:cb:21:00:54:ff:8d:ce:24:59:13:52:14:a7: b8:df:8b:be:9f:cc:ba:43:ff:fe:9c:5e:18:b8:c9: cc:a9:50:9e:68:8c:87:1f:8a:0a:0e:38:7f:cb:4a: 14:d1:2f:c0:9e:67:a9:fd:e5:44:bd:87:df:45:8e: 1d:fe:e3:4b:7a:ee:15:c4:de:52:b0:d1:27:8c:c0: b2:57:a5:dd:7a:86:35:d1:58:8a:fa:14:15:16:36: 71:c2:f9:eb:14:4a:9c:03:db:2e:07:4f:43:b2:9b: ef:55:f2:b7:36:30:88:a7:ae:53:32:11:c0:e4:3d: 21:71:a7:95:83:fb:90:91:69:be:03:3f:25:a3:47: 48:b3:3a:50:88:df:60:0a:4f:65:f3:31:5a:db:41: 8c:0e:cd:cd:1e:a7:3c:42:c8:ac:ac:2c:cc:46:0a: 5b:ef:9b:bc:3e:69:95:20:d9:8e:bd:e6:99:e6:3e: 2b:76:be:31:07:65:99:cc:c2:89:5c:1d:93:89:41: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:67:A7:B7:C3:1A:CD:03:23:28:30:A1:5C:42:BD:20:A2:1F:77:5E X509v3 Authority Key Identifier: keyid:02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b0:02:5b:02:ad:51:b0:58:21:65:25:57:e0:b1:ef:6d:e6: 94:75:70:0f:c8:e9:d9:ea:33:53:d5:e2:f0:8a:ec:48:c7:1c: da:14:e5:5b:14:48:0f:39:11:fc:42:89:b7:51:f2:d3:4b:cf: a4:58:4c:9f:0f:8f:cf:91:a0:da:21:e7:dd:84:37:b1:ea:c6: f2:92:fb:74:84:b9:5f:b9:6e:22:26:f7:78:50:38:b2:fd:b5: b6:9f:e0:39:57:15:b5:95:3b:cc:0b:48:93:eb:7e:ea:00:a0: 4d:fb:6d:20:0c:b8:a9:a7:17:08:87:cb:11:b3:41:24:62:99: 08:72:19:e6:3b:79:af:ea:8b:af:61:77:f5:53:20:48:63:a8: 0e:ca:77:c1:31:ab:eb:19:80:0e:23:34:4f:f6:e8:67:dc:06: 32:00:da:db:41:e1:01:2f:87:3f:f8:21:f5:26:b9:a0:81:7d: 18:6f:e5:3e:a1:66:5e:91:1d:42:02:d3:49:02:58:1d:55:41: 6f:57:38:28:a6:e4:5a:59:7f:70:b6:ef:53:c6:94:86:a9:98: 42:39:c0:d7:cf:c2:2a:17:2e:2c:14:d4:58:57:cb:9d:22:d6: d2:5a:eb:9f:63:44:95:bf:7e:87:50:cb:bc:e1:91:80:1e:eb: ce:25:04:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWWRZ60dQNKwzNjHnG3SiYVtRF2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNBMDdD MjE4QTVBNjAeFw0yNjA5MTcwNTA5NTdaFw0yNjA5MTgwNzQ3NTdaMDMxMTAvBgNV BAMTKDUyNjdBN0I3QzMxQUNEMDMyMzI4MzBBMTVDNDJCRDIwQTIxRjc3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5E9xa5Z9P0iuHglARk4gp9lyF NzAHFz1SYZTAOFnOW4glQ6fWVYdtroUV54ceLkVuy/inwOKCSX/50yZNyyEAVP+N ziRZE1IUp7jfi76fzLpD//6cXhi4ycypUJ5ojIcfigoOOH/LShTRL8CeZ6n95US9 h99Fjh3+40t67hXE3lKw0SeMwLJXpd16hjXRWIr6FBUWNnHC+esUSpwD2y4HT0Oy m+9V8rc2MIinrlMyEcDkPSFxp5WD+5CRab4DPyWjR0izOlCI32AKT2XzMVrbQYwO zc0epzxCyKysLMxGClvvm7w+aZUg2Y695pnmPit2vjEHZZnMwolcHZOJQR6DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUment8MazQMjKDChXEK9IKIfd14wHwYDVR0j BBgwFoAUAos+olHDpZevVdTbPvQ6B8IYpaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM2YjJiZDctZDdmMS00ODE1LWE2MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1 MUMzQTU5N0FGNTVENERCM0VGNDNBMDdDMjE4QTVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCM0VBMjUxQzNBNTk3QUY1NUQ0REIzRUY0M0EwN0MyMThB NUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNB MDdDMjE4QTVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOwAlsCrVGwWCFlJVfgse9t5pR1cA/I6dnq M1PV4vCK7EjHHNoU5VsUSA85EfxCibdR8tNLz6RYTJ8Pj8+RoNoh592EN7HqxvKS +3SEuV+5biIm93hQOLL9tbaf4DlXFbWVO8wLSJPrfuoAoE37bSAMuKmnFwiHyxGz QSRimQhyGeY7ea/qi69hd/VTIEhjqA7Kd8Exq+sZgA4jNE/26GfcBjIA2ttB4QEv hz/4IfUmuaCBfRhv5T6hZl6RHUIC00kCWB1VQW9XOCim5FpZf3C271PGlIapmEI5 wNfPwioXLiwU1FhXy50i1tJa659jRJW/fodQy7zhkYAe684lBK4= -----END CERTIFICATE-----Generated at Thu Sep 17 15:52:49 2026 by rpki-client