$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft File: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft (raw, json) Hash identifier: 9m+zkHF5HolnxXVbwViUg+zDf038AklYRO/ZVa18HBU= Subject key identifier: 3A:15:3E:A1:99:68:DC:86:4C:1D:8A:6B:3E:24:B2:DD:1B:D8:D5:51 Authority key identifier: 02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 Certificate issuer: /CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Certificate serial: 20E9A7ACB90666EBC5D773C91A61E56C96B7C7E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 09:24:05 +0000 Manifest this update: Sun 02 Aug 2026 09:19:05 +0000 Manifest next update: Mon 03 Aug 2026 11:50:05 +0000 Files and hashes: 1: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: OZMHHHmslz7MYh9R9Ib0RjlOxsJyDimPwwAqaL88/ng=) 2: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl (hash: vndoi5NU+yjBvEOar4I0VAH+GPIUVIzUVUJliUl/lF8=) 3: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: N8zhnsK8z7VxJNfcfyiLUZPoMiisc/2RHnWBqlz/4MI=) 4: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: OyG3mFe6SrJhcLOwFyBCeuQpeyeUH09cXSgAgqZj+fA=) 5: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: GtQhQt5lC+popSxKBpEXClSBs/pxIHaZp5GFBcVq7Ds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e9:a7:ac:b9:06:66:eb:c5:d7:73:c9:1a:61:e5:6c:96:b7:c7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Validity Not Before: Aug 2 09:19:05 2026 GMT Not After : Aug 3 11:50:05 2026 GMT Subject: CN=3A153EA19968DC864C1D8A6B3E24B2DD1BD8D551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:8b:55:c0:a9:a1:35:39:ea:07:f4:9b:4e: 0e:1f:10:8f:c0:c6:56:22:e4:a3:d4:fc:01:42:c1: da:89:dc:0a:da:5e:54:97:fe:6b:e8:0b:7c:af:d8: 84:3a:be:83:f0:5f:84:47:e6:de:c7:93:8b:f7:14: d9:d5:35:ee:76:46:07:0e:da:c2:69:fb:0c:0e:9b: 9d:8f:ee:3c:4e:00:97:e1:1c:55:a3:53:b8:47:d6: cd:41:80:a1:df:51:ba:c4:a1:d6:90:b8:46:82:57: 7f:2e:ba:30:a4:9e:5d:ec:cb:10:7d:05:ea:40:29: 0f:92:ff:31:c4:2a:24:81:00:b0:dd:97:8f:fd:77: 33:1e:ac:6c:1f:26:92:34:8a:89:b9:3b:8f:0d:3e: 2d:32:78:c3:b0:2b:8b:6e:1b:e7:58:54:b3:0c:68: 9f:e2:eb:18:56:d4:de:26:1f:fc:dc:d0:b8:b7:b0: 6b:52:49:9b:06:8e:b7:d5:37:c9:a1:e7:5c:20:e8: e6:51:fc:96:36:c1:98:e4:76:38:e0:a8:cb:e1:2d: b8:c9:f2:d5:75:f9:dd:64:66:0f:e9:92:85:36:65: e2:8d:d9:96:c6:b3:2f:75:bd:29:b3:b1:57:a4:14: b3:b5:ca:c9:35:d3:fa:ca:4c:b2:c2:c2:f2:70:50: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:15:3E:A1:99:68:DC:86:4C:1D:8A:6B:3E:24:B2:DD:1B:D8:D5:51 X509v3 Authority Key Identifier: keyid:02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:4d:04:dd:99:74:dd:54:5c:56:c0:ed:98:a7:bb:1f:dd:e8: 09:6f:cb:f0:0f:4f:2f:0f:ca:c7:f4:08:3d:80:43:7f:5f:6f: 26:dc:9c:f7:da:3c:28:14:9b:d6:26:1a:f0:85:07:46:51:e4: 1b:91:bd:3f:9c:4b:5f:31:8f:ec:f2:d3:fb:4a:00:9e:cd:02: 95:1d:3d:5c:ed:c2:13:a3:47:51:02:f0:ba:e4:32:9d:74:3e: 1d:59:da:b8:91:2b:bf:81:42:31:d4:18:84:df:8d:ba:6d:86: ab:7b:d2:b6:6a:b0:b4:c9:0a:34:da:43:b6:84:3e:83:d4:f2: 6e:d3:40:18:99:e2:95:a3:96:6d:af:d7:c9:c0:4f:a7:47:cd: c9:29:6f:a0:06:ca:f3:3e:61:82:dc:f7:7e:c0:21:e6:07:60: 87:18:55:75:62:52:f6:c3:f6:34:31:30:d1:16:72:da:98:ed: c6:fb:ea:31:cf:42:54:fa:77:79:23:d0:75:70:41:7f:56:2c: a9:80:e7:7f:93:88:08:af:bc:f0:74:31:9b:c1:bf:1f:d9:28: b0:12:cf:ca:05:34:0a:17:d7:02:68:19:e9:38:bc:b4:c7:c3: 7d:62:85:83:6c:cc:af:30:10:42:0e:a5:c8:71:37:e3:9a:a1: c8:4c:37:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOmnrLkGZuvF13PJGmHlbJa3x+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNBMDdD MjE4QTVBNjAeFw0yNjA4MDIwOTE5MDVaFw0yNjA4MDMxMTUwMDVaMDMxMTAvBgNV BAMTKDNBMTUzRUExOTk2OERDODY0QzFEOEE2QjNFMjRCMkREMUJEOEQ1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvEYtVwKmhNTnqB/SbTg4fEI/A xlYi5KPU/AFCwdqJ3AraXlSX/mvoC3yv2IQ6voPwX4RH5t7Hk4v3FNnVNe52RgcO 2sJp+wwOm52P7jxOAJfhHFWjU7hH1s1BgKHfUbrEodaQuEaCV38uujCknl3syxB9 BepAKQ+S/zHEKiSBALDdl4/9dzMerGwfJpI0iom5O48NPi0yeMOwK4tuG+dYVLMM aJ/i6xhW1N4mH/zc0Li3sGtSSZsGjrfVN8mh51wg6OZR/JY2wZjkdjjgqMvhLbjJ 8tV1+d1kZg/pkoU2ZeKN2ZbGsy91vSmzsVekFLO1ysk10/rKTLLCwvJwUJaPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhU+oZlo3IZMHYprPiSy3RvY1VEwHwYDVR0j BBgwFoAUAos+olHDpZevVdTbPvQ6B8IYpaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM2YjJiZDctZDdmMS00ODE1LWE2MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1 MUMzQTU5N0FGNTVENERCM0VGNDNBMDdDMjE4QTVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCM0VBMjUxQzNBNTk3QUY1NUQ0REIzRUY0M0EwN0MyMThB NUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNB MDdDMjE4QTVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZNBN2ZdN1UXFbA7Zinux/d6Alvy/APTy8P ysf0CD2AQ39fbybcnPfaPCgUm9YmGvCFB0ZR5BuRvT+cS18xj+zy0/tKAJ7NApUd PVztwhOjR1EC8LrkMp10Ph1Z2riRK7+BQjHUGITfjbpthqt70rZqsLTJCjTaQ7aE PoPU8m7TQBiZ4pWjlm2v18nAT6dHzckpb6AGyvM+YYLc937AIeYHYIcYVXViUvbD 9jQxMNEWctqY7cb76jHPQlT6d3kj0HVwQX9WLKmA53+TiAivvPB0MZvBvx/ZKLAS z8oFNAoX1wJoGek4vLTHw31ihYNszK8wEEIOpchxN+OaochMN4Q= -----END CERTIFICATE-----Generated at Sun Aug 2 15:50:53 2026 by rpki-client