$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft File: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft (raw, json) Hash identifier: Otbh44LB/IFmnC+BTadrOszO7/SkjDDGT8R/775PsiE= Subject key identifier: 9B:0B:82:FD:19:F3:C2:08:6E:33:5E:9C:10:37:ED:A8:64:4F:E9:0C Authority key identifier: 28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 Certificate issuer: /CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Certificate serial: 7FB971A83ACDA1D44B94146202F56097FB946963 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:03:38 +0000 Manifest this update: Wed 16 Sep 2026 23:58:38 +0000 Manifest next update: Fri 18 Sep 2026 00:46:38 +0000 Files and hashes: 1: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl (hash: AoqR2asdHHbzVbh8oRueW+LtveIS0GcFwkfb+4HnjsU=) 2: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: IYkMg6+qZ/xVvXBkVi5WzC87htsBExZ9GFp2XLTOPIo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b9:71:a8:3a:cd:a1:d4:4b:94:14:62:02:f5:60:97:fb:94:69:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Validity Not Before: Sep 16 23:58:38 2026 GMT Not After : Sep 18 00:46:38 2026 GMT Subject: CN=9B0B82FD19F3C2086E335E9C1037EDA8644FE90C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:12:b1:aa:a0:19:df:3c:72:5f:20:11:39:04: e0:1b:1c:26:83:99:9c:db:80:bb:03:ad:99:b6:e4: 4f:7c:a4:2a:61:f1:c8:39:63:c2:3b:d3:4d:d1:51: 75:a1:6c:11:f3:64:a3:cf:ce:0b:33:14:eb:b0:87: 8b:ae:8b:3f:a3:2c:15:4c:63:d6:f5:6a:36:4a:12: 57:cf:12:a0:30:69:2d:21:4e:3d:68:c5:24:fc:f9: 8b:ca:f0:5b:ec:8a:be:83:d4:54:da:c8:17:9f:f5: 26:d1:88:01:81:e6:c5:95:b5:65:13:ae:36:11:84: b8:d1:48:3e:80:c1:e7:72:a7:b2:a1:6d:f3:7a:b3: 7d:3d:e7:85:e7:e5:b0:84:ac:43:c2:cf:5b:d5:bc: a9:92:30:b9:06:94:86:d5:9a:b6:de:7c:0b:6b:82: ad:11:bd:2a:14:36:06:90:f2:1d:e3:02:3d:b7:f0: 10:96:8e:74:4e:be:7a:4f:35:fd:51:72:21:9d:b7: 93:5d:1c:89:2b:2f:d6:8a:2b:2b:72:4a:6b:49:f3: e1:bb:6f:9c:64:9f:fb:56:5a:ce:a3:37:c7:58:37: ea:c4:1d:da:99:8a:65:be:fa:8f:9c:84:0e:fa:24: 27:bc:d8:cd:86:93:bc:78:da:ca:08:04:3c:44:d4: 64:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0B:82:FD:19:F3:C2:08:6E:33:5E:9C:10:37:ED:A8:64:4F:E9:0C X509v3 Authority Key Identifier: keyid:28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:50:8e:91:4c:e8:53:4e:0d:3d:87:ce:81:8f:34:ff:22:01: 58:c7:f5:80:e0:b9:0d:71:73:68:d2:0b:3d:62:6b:66:78:09: e9:53:c6:95:71:25:99:aa:63:90:9e:4e:41:9e:a3:68:ce:88: d8:02:1a:a6:44:1c:dd:d2:cd:4c:b2:44:ac:3c:78:d7:ae:28: 94:57:52:66:61:6e:c4:e2:0a:48:9d:ad:d5:20:83:71:b8:d0: 6f:f3:17:60:28:1b:77:20:f1:85:13:55:d4:50:4d:8e:7d:44: c6:74:72:59:04:a7:ca:82:eb:6e:7f:39:8f:c5:31:10:51:11: 1a:f4:23:d7:5d:e6:c1:d3:f6:d5:06:77:3a:4e:74:4d:42:52: bc:34:a6:97:b4:31:c6:89:96:fd:b3:fd:ef:88:75:60:5e:16: 75:67:6e:64:35:7f:b7:e3:2b:eb:f9:37:ab:a8:0b:4b:29:e5: c8:00:b8:2a:d5:fa:32:45:0c:36:ee:39:be:38:21:6c:42:92: 66:2d:35:bf:02:2e:b8:1f:85:65:30:e9:ae:e6:2f:14:0c:f1: 79:e7:6e:53:39:54:ad:37:e3:f8:97:bc:b0:22:dd:1d:ff:5c: ac:a1:94:0e:55:99:a4:e2:f1:87:ba:0a:23:50:8e:d5:20:af: 0d:4e:ff:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7lxqDrNodRLlBRiAvVgl/uUaWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBE M0FDRUJEODAeFw0yNjA5MTYyMzU4MzhaFw0yNjA5MTgwMDQ2MzhaMDMxMTAvBgNV BAMTKDlCMEI4MkZEMTlGM0MyMDg2RTMzNUU5QzEwMzdFREE4NjQ0RkU5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkErGqoBnfPHJfIBE5BOAbHCaD mZzbgLsDrZm25E98pCph8cg5Y8I7003RUXWhbBHzZKPPzgszFOuwh4uuiz+jLBVM Y9b1ajZKElfPEqAwaS0hTj1oxST8+YvK8Fvsir6D1FTayBef9SbRiAGB5sWVtWUT rjYRhLjRSD6Awedyp7KhbfN6s30954Xn5bCErEPCz1vVvKmSMLkGlIbVmrbefAtr gq0RvSoUNgaQ8h3jAj238BCWjnROvnpPNf1RciGdt5NdHIkrL9aKKytySmtJ8+G7 b5xkn/tWWs6jN8dYN+rEHdqZimW++o+chA76JCe82M2Gk7x42soIBDxE1GSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmwuC/RnzwghuM16cEDftqGRP6QwwHwYDVR0j BBgwFoAUKPxHOwN5kOGxKyKpuvsZANOs69gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk4OGMwZjItMjgwMC00OGRhLWE4M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0Iw Mzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBEM0FDRUJEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOEZDNDczQjAzNzk5MEUxQjEyQjIyQTlCQUZCMTkwMEQzQUNF QkQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5 MDBEM0FDRUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJQjpFM6FNODT2HzoGPNP8iAVjH9YDguQ1x c2jSCz1ia2Z4CelTxpVxJZmqY5CeTkGeo2jOiNgCGqZEHN3SzUyyRKw8eNeuKJRX UmZhbsTiCkidrdUgg3G40G/zF2AoG3cg8YUTVdRQTY59RMZ0clkEp8qC625/OY/F MRBRERr0I9dd5sHT9tUGdzpOdE1CUrw0ppe0McaJlv2z/e+IdWBeFnVnbmQ1f7fj K+v5N6uoC0sp5cgAuCrV+jJFDDbuOb44IWxCkmYtNb8CLrgfhWUw6a7mLxQM8Xnn blM5VK034/iXvLAi3R3/XKyhlA5VmaTi8Ye6CiNQjtUgrw1O/0U= -----END CERTIFICATE-----Generated at Thu Sep 17 14:29:55 2026 by rpki-client