$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.mft File: B28E2055919DC6491CBE15480ABD67D66E672F45.mft (raw, json) Hash identifier: e1sgjhT/z0cM9z/JHLghV4rn9T09j8QAbacSCKqCS9A= Subject key identifier: 92:ED:BB:4B:DA:28:CD:F1:2D:65:E0:FC:BC:2D:51:21:1A:4E:63:F0 Authority key identifier: B2:8E:20:55:91:9D:C6:49:1C:BE:15:48:0A:BD:67:D6:6E:67:2F:45 Certificate issuer: /CN=B28E2055919DC6491CBE15480ABD67D66E672F45 Certificate serial: 64C78F3F8896339F13378E9C87E50DFDAD1072B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.mft Manifest number: 18 Signing time: Tue 20 Oct 2026 11:44:02 +0000 Manifest this update: Tue 20 Oct 2026 11:39:02 +0000 Manifest next update: Wed 21 Oct 2026 14:34:02 +0000 Files and hashes: 1: 3130332e3230332e3233322e302f32342d3234203d3e20313531363030.roa (hash: 359rkfgNfx4V4hTwp7iUNXWUoA246Siku87oN38U+EE=) 2: 3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa (hash: 9hNKKHOX5nZS01hYRXDjqScWbYWs1NA1/xINDpYkBoU=) 3: B28E2055919DC6491CBE15480ABD67D66E672F45.crl (hash: g7yt3qLnEGalBCZ4s9HUa/hBP0sJcN+yBHbOd5MyG1w=) 4: 323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa (hash: ZIG19GtUImOIMgkhkzHVqhQKpT31kT1KFCjOplZhGFs=) 5: 3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa (hash: KHtVXWtlCbbhxsDHGtD1PEIjpcpKfmg4Svhc1ZAfVdk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.crl rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 09:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c7:8f:3f:88:96:33:9f:13:37:8e:9c:87:e5:0d:fd:ad:10:72:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B28E2055919DC6491CBE15480ABD67D66E672F45 Validity Not Before: Oct 20 11:39:02 2026 GMT Not After : Oct 21 14:34:02 2026 GMT Subject: CN=92EDBB4BDA28CDF12D65E0FCBC2D51211A4E63F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:da:10:3d:62:2c:25:a4:e9:72:07:09:0d: 5b:ec:47:82:33:b0:6d:70:48:f8:c3:46:92:2d:1e: ea:bc:03:fd:a7:c3:01:a6:d7:f7:29:4e:d3:a8:2f: 6c:49:a8:6d:96:e0:a0:84:86:c5:7d:30:79:10:66: 7b:4e:5e:06:3c:02:65:ad:bf:d6:7b:99:3a:99:44: cd:66:eb:a6:2f:c8:7b:bc:8c:fb:c3:ee:c8:8b:f1: c1:26:39:10:05:d3:9f:a3:35:4c:36:53:df:97:cd: 76:26:44:67:26:ab:4d:5c:25:c2:15:14:bf:8d:72: d9:fa:d8:65:06:59:d6:0d:2e:bb:d8:77:c0:5a:14: e5:45:a2:50:de:ca:7c:69:25:24:39:9b:e6:d8:05: 9a:a6:25:22:91:30:26:05:83:91:37:65:93:00:45: 76:00:d1:7c:39:5d:4d:b0:0a:d3:26:1c:96:f6:68: 53:a5:e3:fb:1c:e8:70:5c:99:45:5f:fc:98:9e:2d: c5:43:20:0f:b1:0c:eb:21:0c:c0:e0:24:3c:cc:79: 3f:00:32:21:a7:c4:c6:9a:ee:f2:4e:ae:b7:e1:1d: e0:63:75:92:61:45:2a:eb:cf:48:5d:15:57:06:fb: 9c:bf:71:65:e5:d0:be:e2:fe:80:53:97:2b:d6:74: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:ED:BB:4B:DA:28:CD:F1:2D:65:E0:FC:BC:2D:51:21:1A:4E:63:F0 X509v3 Authority Key Identifier: keyid:B2:8E:20:55:91:9D:C6:49:1C:BE:15:48:0A:BD:67:D6:6E:67:2F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c3:2a:5b:3f:6a:68:f7:9c:2d:98:65:c0:e6:3e:1a:cd:c7: 23:7d:eb:f8:1f:a7:f2:68:09:72:9f:03:7c:ac:a0:32:aa:45: dd:0f:77:c7:09:25:b1:3d:cc:f2:16:6a:59:8d:df:5e:8a:cd: f6:e9:5e:5b:a6:32:dd:1a:9e:c5:8a:5f:7e:76:1b:92:95:ed: e1:11:08:53:e7:ac:c2:7e:cd:38:8e:fb:c8:f6:5c:35:ef:c1: 3a:14:1c:af:43:80:3d:f4:63:2a:7f:13:38:3f:3a:ef:1c:72: d6:e5:7a:47:8c:f5:4e:3a:75:47:c6:14:27:b0:0d:11:77:e9: 3d:a1:5f:0b:c9:5b:65:a2:5b:1f:92:26:6b:cc:cb:77:11:08: 11:c8:88:a8:06:2a:db:e7:43:f6:ac:f3:42:6d:b9:1e:2a:f7: 3f:f0:be:42:cd:e6:5b:b0:2a:ba:3b:da:e6:c6:17:dd:67:b6: c9:97:9f:7e:03:01:05:78:e8:69:26:55:e1:a0:fa:6d:57:37: fa:76:01:18:cf:5d:99:a9:1a:45:ef:43:2f:88:cf:9a:57:e2: 2b:c0:ac:f7:bf:bd:bc:89:b2:34:ba:0e:31:73:59:bf:4b:82: 0f:9b:0e:a1:f1:7a:96:d8:26:ca:7c:b3:d9:a8:0c:89:5d:5c: e2:c4:8d:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZMePP4iWM58TN46ch+UN/a0QcrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI4RTIwNTU5MTlEQzY0OTFDQkUxNTQ4MEFCRDY3RDY2 RTY3MkY0NTAeFw0yNjEwMjAxMTM5MDJaFw0yNjEwMjExNDM0MDJaMDMxMTAvBgNV BAMTKDkyRURCQjRCREEyOENERjEyRDY1RTBGQ0JDMkQ1MTIxMUE0RTYzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujNoQPWIsJaTpcgcJDVvsR4Iz sG1wSPjDRpItHuq8A/2nwwGm1/cpTtOoL2xJqG2W4KCEhsV9MHkQZntOXgY8AmWt v9Z7mTqZRM1m66YvyHu8jPvD7siL8cEmORAF05+jNUw2U9+XzXYmRGcmq01cJcIV FL+Nctn62GUGWdYNLrvYd8BaFOVFolDeynxpJSQ5m+bYBZqmJSKRMCYFg5E3ZZMA RXYA0Xw5XU2wCtMmHJb2aFOl4/sc6HBcmUVf/JieLcVDIA+xDOshDMDgJDzMeT8A MiGnxMaa7vJOrrfhHeBjdZJhRSrrz0hdFVcG+5y/cWXl0L7i/oBTlyvWdCB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUku27S9oozfEtZeD8vC1RIRpOY/AwHwYDVR0j BBgwFoAUso4gVZGdxkkcvhVICr1n1m5nL0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFkZjI1NjktZTFmNC00YzY4LTg2MTUtZTM5ZGNlNTJhYmI0LzAvQjI4RTIwNTU5 MTlEQzY0OTFDQkUxNTQ4MEFCRDY3RDY2RTY3MkY0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjhFMjA1NTkxOURDNjQ5MUNCRTE1NDgwQUJENjdENjZFNjcy RjQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFkZjI1NjktZTFmNC00YzY4LTg2 MTUtZTM5ZGNlNTJhYmI0LzAvQjI4RTIwNTU5MTlEQzY0OTFDQkUxNTQ4MEFCRDY3 RDY2RTY3MkY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3DKls/amj3nC2YZcDmPhrNxyN96/gfp/Jo CXKfA3ysoDKqRd0Pd8cJJbE9zPIWalmN316KzfbpXlumMt0ansWKX352G5KV7eER CFPnrMJ+zTiO+8j2XDXvwToUHK9DgD30Yyp/Ezg/Ou8cctblekeM9U46dUfGFCew DRF36T2hXwvJW2WiWx+SJmvMy3cRCBHIiKgGKtvnQ/as80JtuR4q9z/wvkLN5luw Kro72ubGF91ntsmXn34DAQV46GkmVeGg+m1XN/p2ARjPXZmpGkXvQy+Iz5pX4ivA rPe/vbyJsjS6DjFzWb9Lgg+bDqHxepbYJsp8s9moDIldXOLEjWQ= -----END CERTIFICATE-----Generated at Tue Oct 20 20:48:24 2026 by rpki-client