$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft File: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft (raw, json) Hash identifier: QugFh/rAWkl5u1Y0L545ErfUAnnk6l89KMdv2shgWWQ= Subject key identifier: CF:35:56:DD:A9:E2:1B:4B:67:DC:C0:47:7B:CF:8A:BC:3E:AE:8F:B8 Authority key identifier: 02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 Certificate issuer: /CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Certificate serial: 0B840A5BA3369633FF5B576BA07522F220AA1A24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft Manifest number: EB Signing time: Sun 25 Oct 2026 01:20:40 +0000 Manifest this update: Sun 25 Oct 2026 01:15:40 +0000 Manifest next update: Mon 26 Oct 2026 02:31:40 +0000 Files and hashes: 1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: BUSB0kLsC7pjKXi5bhLXUPIzYoFZsUEccBkiDUzp6D8=) 2: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl (hash: Itryipe7hCquK/dAoM7qCUJsg8U0tIE8/WmcVbYa0Ew=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:84:0a:5b:a3:36:96:33:ff:5b:57:6b:a0:75:22:f2:20:aa:1a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Validity Not Before: Oct 25 01:15:40 2026 GMT Not After : Oct 26 02:31:40 2026 GMT Subject: CN=CF3556DDA9E21B4B67DCC0477BCF8ABC3EAE8FB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e5:d9:60:0b:4d:83:8d:8a:1c:32:12:08:2a: 2e:ab:68:5e:5f:28:f8:9c:c6:e4:1e:88:e0:32:e8: 6e:6b:7f:fd:69:f8:29:e2:41:3d:c6:df:01:a9:13: 08:5f:ef:a5:43:94:27:02:e6:46:0f:d7:52:b8:07: c6:a1:ab:06:c0:25:4d:65:78:ee:79:e6:06:0a:b9: 66:d6:2e:8f:e5:3d:20:6b:c4:be:82:97:dc:c0:41: 66:cf:6a:5d:b8:43:91:4f:b6:31:cc:4f:34:f2:f3: c3:9f:94:3f:73:eb:73:28:cc:72:44:98:ca:b3:08: c5:c5:18:c0:5b:40:99:4f:97:cb:08:15:12:b8:97: 42:ba:02:2a:45:f4:eb:00:58:69:50:c4:4e:0e:3c: af:90:0a:4f:b9:90:2c:da:29:70:c9:38:d2:f8:56: d7:b6:27:4e:58:56:b9:ca:8b:fc:89:ff:e4:5a:3c: 26:be:04:86:29:f6:86:68:e2:7a:fd:29:a1:1d:91: 22:46:a4:92:95:52:ee:a1:20:e4:13:fb:41:d5:d1: 4d:59:3c:56:5a:a1:32:9f:a4:d7:07:ea:f1:0c:a8: e0:00:f6:5e:8b:a9:7f:c8:80:18:2d:14:de:b1:41: e9:92:33:5e:b6:ec:fc:4c:a8:7d:48:8d:6e:92:d2: 0f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:35:56:DD:A9:E2:1B:4B:67:DC:C0:47:7B:CF:8A:BC:3E:AE:8F:B8 X509v3 Authority Key Identifier: keyid:02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6b:0f:cc:69:fc:80:49:fb:ad:80:04:14:4c:1c:ec:e5:5d: a9:5a:06:27:60:a5:5b:7f:e4:17:c5:84:b1:00:b0:ab:05:41: 4b:ce:3d:a3:50:ae:b8:1e:16:e5:af:5b:8a:64:89:fd:23:27: d3:68:2d:79:2f:2b:4c:92:77:5e:5a:59:41:ea:46:46:b8:e1: 31:d7:3f:91:aa:24:ba:b5:02:68:5f:40:53:72:7c:c6:1e:9e: a2:74:6d:d1:ad:6a:ba:04:2d:3e:45:b7:a3:71:0e:3d:0b:8e: a9:34:81:b4:94:1c:d5:62:64:c0:16:3e:fa:ea:59:fe:9c:c1: f4:98:9f:53:c7:bf:1f:1d:a7:08:02:04:bf:d8:6d:aa:30:cb: 0a:42:bd:7c:47:1d:de:6d:0c:03:61:b0:92:81:27:b6:63:83: 84:14:47:37:f2:cb:55:be:b0:ed:7d:40:00:59:dc:97:06:d2: 1c:27:43:b7:1b:c0:40:d1:d7:8b:de:30:e3:a8:49:5c:ea:ca: 0d:b6:e3:0e:ab:72:16:ae:5c:ee:81:48:67:21:ab:79:24:19: 5e:58:e3:02:31:c6:17:2c:61:c1:94:0d:f8:da:71:27:cb:8e: ac:44:02:56:34:21:d6:f5:e6:2a:59:92:ce:fe:d5:14:4c:7a: 92:bd:11:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4QKW6M2ljP/W1droHUi8iCqGiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlD MjQ0MkFEOTAeFw0yNjEwMjUwMTE1NDBaFw0yNjEwMjYwMjMxNDBaMDMxMTAvBgNV BAMTKENGMzU1NkREQTlFMjFCNEI2N0RDQzA0NzdCQ0Y4QUJDM0VBRThGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM5dlgC02DjYocMhIIKi6raF5f KPicxuQeiOAy6G5rf/1p+CniQT3G3wGpEwhf76VDlCcC5kYP11K4B8ahqwbAJU1l eO555gYKuWbWLo/lPSBrxL6Cl9zAQWbPal24Q5FPtjHMTzTy88OflD9z63MozHJE mMqzCMXFGMBbQJlPl8sIFRK4l0K6AipF9OsAWGlQxE4OPK+QCk+5kCzaKXDJONL4 Vte2J05YVrnKi/yJ/+RaPCa+BIYp9oZo4nr9KaEdkSJGpJKVUu6hIOQT+0HV0U1Z PFZaoTKfpNcH6vEMqOAA9l6LqX/IgBgtFN6xQemSM1627PxMqH1IjW6S0g91AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzzVW3aniG0tn3MBHe8+KvD6uj7gwHwYDVR0j BBgwFoAUAotyiY4Lq880cMfonsbh+cJEKtkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg1Y2JkOTUtNTc0Zi00MDViLThiZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4 RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlDMjQ0MkFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCNzI4OThFMEJBQkNGMzQ3MEM3RTg5RUM2RTFGOUMyNDQy QUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUx RjlDMjQ0MkFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClrD8xp/IBJ+62ABBRMHOzlXalaBidgpVt/ 5BfFhLEAsKsFQUvOPaNQrrgeFuWvW4pkif0jJ9NoLXkvK0ySd15aWUHqRka44THX P5GqJLq1AmhfQFNyfMYenqJ0bdGtaroELT5Ft6NxDj0Ljqk0gbSUHNViZMAWPvrq Wf6cwfSYn1PHvx8dpwgCBL/YbaowywpCvXxHHd5tDANhsJKBJ7Zjg4QURzfyy1W+ sO19QABZ3JcG0hwnQ7cbwEDR14veMOOoSVzqyg224w6rchauXO6BSGchq3kkGV5Y 4wIxxhcsYcGUDfjacSfLjqxEAlY0Idb15ipZks7+1RRMepK9EX4= -----END CERTIFICATE-----Generated at Sun Oct 25 06:07:55 2026 by rpki-client