$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft File: 3028A8BB1ECF7550222580449D4FA78158DBF42A.mft (raw, json) Hash identifier: T/Va5ygi3/+MgMGGEtXcJzIRjkAsse+8qQSD6n5dL2c= Subject key identifier: B0:31:1A:A7:85:D5:A7:F1:2D:34:9C:FD:21:56:C4:B5:12:79:FE:28 Authority key identifier: 30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A Certificate issuer: /CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Certificate serial: 4218AEC9625F165F2842E3262741FC72134FF867 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:03:39 +0000 Manifest this update: Wed 16 Sep 2026 23:58:39 +0000 Manifest next update: Fri 18 Sep 2026 02:14:39 +0000 Files and hashes: 1: 3028A8BB1ECF7550222580449D4FA78158DBF42A.crl (hash: /37G0StX+Pa43p2KEk6aretQpGtKs3WbPGhHpZjR3us=) 2: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: EAY48hYNH/6TUE1xmrb2C7cSV9ZpqN9x7POku5Es1R0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:18:ae:c9:62:5f:16:5f:28:42:e3:26:27:41:fc:72:13:4f:f8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Validity Not Before: Sep 16 23:58:39 2026 GMT Not After : Sep 18 02:14:39 2026 GMT Subject: CN=B0311AA785D5A7F12D349CFD2156C4B51279FE28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:eb:e3:9a:d4:cf:0b:28:b1:65:31:65:c7:33: 24:63:33:34:ec:6e:8a:ce:94:d7:b6:f5:b5:55:de: b8:f1:2d:dd:71:25:a8:41:3b:3e:e9:14:36:49:12: 15:2a:ef:79:f5:9e:e7:ec:8c:2d:79:b7:7b:5a:56: 4d:b1:25:e1:25:23:41:2c:38:0c:6e:96:5b:c2:bb: 3c:1e:e8:91:18:1b:49:6f:35:ca:93:ac:15:8a:f1: c2:63:de:cc:72:f0:a5:53:39:84:94:fc:af:2f:6e: 5f:30:72:aa:78:be:c8:85:25:04:c2:72:bd:c9:bd: 43:02:f0:e9:af:c3:53:46:6e:ec:b5:8e:ac:b7:91: 44:fd:93:ef:85:ce:a3:62:0c:31:e8:d9:05:c3:65: dd:2c:2c:40:99:55:69:3c:a0:30:bd:24:8f:26:99: ba:25:31:eb:1c:64:0e:bd:0e:ed:6b:36:3d:24:a6: 21:e3:00:ca:58:0b:be:df:dc:ea:9a:52:24:ab:25: f4:4e:11:4a:09:ef:70:10:c5:22:22:35:df:1f:63: 57:ff:81:c5:c0:3e:43:67:9d:62:35:7c:9f:7b:ae: e6:31:f3:3d:f7:e7:8c:34:c3:40:06:d7:a3:c1:b0: 40:bb:82:4c:fa:12:84:78:20:16:d2:ad:e7:2c:f0: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:31:1A:A7:85:D5:A7:F1:2D:34:9C:FD:21:56:C4:B5:12:79:FE:28 X509v3 Authority Key Identifier: keyid:30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:95:3d:9d:a5:06:01:a5:a1:ca:d0:99:58:7e:cd:1e:42:26: fa:e7:a1:d1:e4:22:0d:f6:de:b1:1c:e5:ef:ca:ba:56:1f:9c: e6:7c:8b:86:0d:5f:65:98:15:2b:57:0b:bf:44:a1:1b:22:e0: 53:f8:14:80:86:38:19:15:9a:06:0e:96:19:19:1c:52:ae:f2: 9c:f4:92:e9:de:33:7f:0e:71:a8:67:03:b4:00:d2:20:ae:c5: 49:da:28:39:15:40:9a:80:0d:c3:d4:d0:89:c4:2c:e4:39:94: a3:55:6a:9b:4b:f2:6f:10:45:4d:5a:59:8f:ff:cb:f7:7e:75: a6:4a:34:2d:02:d2:5b:bc:3e:62:1b:36:4b:62:91:67:11:73: c7:99:4c:fd:cb:5f:57:21:07:af:7d:68:ba:1d:2e:fc:d7:ac: de:3e:12:43:22:a3:b9:7e:67:24:64:e5:e9:e7:36:63:af:71: 86:79:e0:0a:8a:e8:5c:5e:b3:f8:6c:74:6f:0f:d0:30:a6:60: 88:26:ee:01:54:da:98:4b:92:3d:6e:48:e8:48:9e:10:2d:54: 7d:cb:f6:3b:c2:76:38:6e:34:1b:8c:f5:04:9d:2c:e5:19:da: c1:6b:88:c3:fe:84:d9:e8:5c:9b:9b:89:4a:1c:6e:e3:3a:01: 22:6e:68:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhiuyWJfFl8oQuMmJ0H8chNP+GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1 OERCRjQyQTAeFw0yNjA5MTYyMzU4MzlaFw0yNjA5MTgwMjE0MzlaMDMxMTAvBgNV BAMTKEIwMzExQUE3ODVENUE3RjEyRDM0OUNGRDIxNTZDNEI1MTI3OUZFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX6+Oa1M8LKLFlMWXHMyRjMzTs borOlNe29bVV3rjxLd1xJahBOz7pFDZJEhUq73n1nufsjC15t3taVk2xJeElI0Es OAxullvCuzwe6JEYG0lvNcqTrBWK8cJj3sxy8KVTOYSU/K8vbl8wcqp4vsiFJQTC cr3JvUMC8Omvw1NGbuy1jqy3kUT9k++FzqNiDDHo2QXDZd0sLECZVWk8oDC9JI8m mbolMescZA69Du1rNj0kpiHjAMpYC77f3OqaUiSrJfROEUoJ73AQxSIiNd8fY1f/ gcXAPkNnnWI1fJ97ruYx8z3354w0w0AG16PBsEC7gkz6EoR4IBbSrecs8G8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsDEap4XVp/EtNJz9IVbEtRJ5/igwHwYDVR0j BBgwFoAUMCioux7PdVAiJYBEnU+ngVjb9CowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmZGQ2ZjktYjc5OS00YTk2LTllMmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIx RUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1OERCRjQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDI4QThCQjFFQ0Y3NTUwMjIyNTgwNDQ5RDRGQTc4MTU4REJG NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3 ODE1OERCRjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6VPZ2lBgGlocrQmVh+zR5CJvrnodHkIg32 3rEc5e/KulYfnOZ8i4YNX2WYFStXC79EoRsi4FP4FICGOBkVmgYOlhkZHFKu8pz0 kuneM38OcahnA7QA0iCuxUnaKDkVQJqADcPU0InELOQ5lKNVaptL8m8QRU1aWY// y/d+daZKNC0C0lu8PmIbNktikWcRc8eZTP3LX1chB699aLodLvzXrN4+EkMio7l+ ZyRk5ennNmOvcYZ54AqK6Fxes/hsdG8P0DCmYIgm7gFU2phLkj1uSOhInhAtVH3L 9jvCdjhuNBuM9QSdLOUZ2sFriMP+hNnoXJubiUocbuM6ASJuaGk= -----END CERTIFICATE-----Generated at Thu Sep 17 15:49:16 2026 by rpki-client