$ rpki-client -vvf rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft File: 3028A8BB1ECF7550222580449D4FA78158DBF42A.mft (raw, json) Hash identifier: efoI6sG4se0TB5uaJF+TAWM4uUTdcoKVkPf3UqkWVco= Subject key identifier: ED:F8:00:E8:37:5A:F3:61:1D:CD:A6:64:58:D0:1F:35:8E:5D:EB:10 Authority key identifier: 30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A Certificate issuer: /CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Certificate serial: 7F41D1546DF502766FD7DA618C23CF8FDBAEAE9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 14:50:25 +0000 Manifest this update: Sun 02 Aug 2026 14:45:25 +0000 Manifest next update: Mon 03 Aug 2026 17:33:25 +0000 Files and hashes: 1: 3028A8BB1ECF7550222580449D4FA78158DBF42A.crl (hash: D7ViEbHlNW9Yv0FhbWWpiRGN+yzFf/FMrmfZTWNr18Q=) 2: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: EAY48hYNH/6TUE1xmrb2C7cSV9ZpqN9x7POku5Es1R0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:41:d1:54:6d:f5:02:76:6f:d7:da:61:8c:23:cf:8f:db:ae:ae:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Validity Not Before: Aug 2 14:45:25 2026 GMT Not After : Aug 3 17:33:25 2026 GMT Subject: CN=EDF800E8375AF3611DCDA66458D01F358E5DEB10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:f3:72:69:48:f0:34:e6:66:bb:03:4f:15: f6:2e:a0:e0:c0:75:c7:65:1b:8c:e0:2d:b4:15:a8: e5:7d:13:b3:18:c4:3c:28:34:3b:aa:16:64:2e:aa: 28:24:9a:54:8f:68:51:ef:72:f7:e5:8d:81:ad:0f: 2e:38:94:fe:40:d1:8c:9a:79:9d:22:00:75:a0:a6: 0b:89:5a:3a:90:85:41:6b:1f:c5:c3:02:a6:9f:f6: 51:2d:8d:d7:ed:3a:d2:de:5d:af:dc:b4:c2:bf:a4: 1c:24:07:0b:5d:2e:33:45:9f:c9:0a:1f:8a:8e:74: d1:96:56:87:6a:6d:19:84:81:1b:a4:6d:4e:23:58: 50:81:9a:22:83:cb:7c:23:f4:10:4e:29:b0:c1:99: 66:e5:75:f9:b6:d9:64:d0:86:98:83:9f:49:d4:49: b6:36:20:b2:33:08:83:5e:c1:fe:14:f5:93:09:64: bd:ed:9c:f5:a1:a8:eb:26:88:df:02:15:35:bc:f2: 9b:96:16:41:4d:c8:df:c5:8a:42:47:ee:2d:2e:95: 7e:24:a7:88:8c:2d:75:55:c2:df:0d:b5:6a:92:06: 1b:48:5b:65:3e:b3:6c:76:04:fc:33:d8:df:d4:db: eb:ac:e5:35:45:a7:07:20:f2:8f:7f:76:16:53:79: 85:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F8:00:E8:37:5A:F3:61:1D:CD:A6:64:58:D0:1F:35:8E:5D:EB:10 X509v3 Authority Key Identifier: keyid:30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b1:25:d9:0c:0e:3b:d9:11:a2:f0:d6:e1:ca:0d:86:b1:f3: c9:4d:98:6d:cf:bd:e4:02:21:ce:e3:a8:98:0a:a5:09:13:b2: b2:1d:39:c5:9e:b5:cb:09:3c:15:2a:ea:65:f6:ba:70:c0:40: 23:83:71:2d:4b:8e:e9:aa:62:bf:2e:14:db:02:b9:07:2f:ef: e9:9b:29:ac:7a:a5:e5:6f:f9:e9:7b:4f:5f:d0:00:5c:b0:93: 03:d3:0d:9a:32:c5:53:20:25:b6:64:f2:4e:5d:43:03:05:b7: 4e:e6:55:2e:f5:b2:8c:ab:8f:8a:33:79:c1:9e:03:63:4d:bf: b3:a7:9e:90:ae:d6:68:9a:a4:90:d1:8c:7d:f8:47:68:d6:de: 14:aa:da:41:33:ea:64:7d:b7:1b:1e:e8:f9:6b:47:ed:da:16: 72:f6:0f:2b:b2:54:6d:2e:51:49:b1:f2:0a:e1:9d:8b:96:ba: 11:2b:4d:85:e0:cf:07:88:82:89:a7:1b:a6:22:31:2b:05:fc: 9f:f4:90:79:3d:44:1b:0a:7b:52:6b:04:c7:e9:55:51:97:6a: 0a:9f:e8:fd:ca:b1:63:5c:90:aa:f5:b4:23:9f:d9:bb:fd:b6: 29:41:06:0b:9a:3c:f5:08:31:f7:11:93:ef:25:bd:d1:cf:35: 98:6b:fa:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0HRVG31AnZv19phjCPPj9uurp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1 OERCRjQyQTAeFw0yNjA4MDIxNDQ1MjVaFw0yNjA4MDMxNzMzMjVaMDMxMTAvBgNV BAMTKEVERjgwMEU4Mzc1QUYzNjExRENEQTY2NDU4RDAxRjM1OEU1REVCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaPNyaUjwNOZmuwNPFfYuoODA dcdlG4zgLbQVqOV9E7MYxDwoNDuqFmQuqigkmlSPaFHvcvfljYGtDy44lP5A0Yya eZ0iAHWgpguJWjqQhUFrH8XDAqaf9lEtjdftOtLeXa/ctMK/pBwkBwtdLjNFn8kK H4qOdNGWVodqbRmEgRukbU4jWFCBmiKDy3wj9BBOKbDBmWbldfm22WTQhpiDn0nU SbY2ILIzCINewf4U9ZMJZL3tnPWhqOsmiN8CFTW88puWFkFNyN/FikJH7i0ulX4k p4iMLXVVwt8NtWqSBhtIW2U+s2x2BPwz2N/U2+us5TVFpwcg8o9/dhZTeYXNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7fgA6Dda82EdzaZkWNAfNY5d6xAwHwYDVR0j BBgwFoAUMCioux7PdVAiJYBEnU+ngVjb9CowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmZGQ2ZjktYjc5OS00YTk2LTllMmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIx RUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1OERCRjQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDI4QThCQjFFQ0Y3NTUwMjIyNTgwNDQ5RDRGQTc4MTU4REJG NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3 ODE1OERCRjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGxJdkMDjvZEaLw1uHKDYax88lNmG3PveQC Ic7jqJgKpQkTsrIdOcWetcsJPBUq6mX2unDAQCODcS1LjumqYr8uFNsCuQcv7+mb Kax6peVv+el7T1/QAFywkwPTDZoyxVMgJbZk8k5dQwMFt07mVS71soyrj4ozecGe A2NNv7OnnpCu1miapJDRjH34R2jW3hSq2kEz6mR9txse6PlrR+3aFnL2DyuyVG0u UUmx8grhnYuWuhErTYXgzweIgomnG6YiMSsF/J/0kHk9RBsKe1JrBMfpVVGXagqf 6P3KsWNckKr1tCOf2bv9tilBBguaPPUIMfcRk+8lvdHPNZhr+sE= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:43 2026 by rpki-client