$ rpki-client -vvf rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft File: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft (raw, json) Hash identifier: Odj2k5oQmlLlV1xiMdazuAHb+lSw9EIU3gLEqEV3gm0= Subject key identifier: 49:41:2D:B1:74:75:36:C3:E7:81:3B:98:C9:A6:FD:60:29:C2:65:04 Authority key identifier: 02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 Certificate issuer: /CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Certificate serial: 7560962B9D0F72E06EA09BD36D1A8E73921FBA4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 21:31:52 +0000 Manifest this update: Fri 19 Jun 2026 21:26:52 +0000 Manifest next update: Sat 20 Jun 2026 22:27:52 +0000 Files and hashes: 1: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl (hash: MDFnirjpwQjZp0IoqoID8dgNDWvF6Ie9msZeRdszIzw=) 2: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: BUSB0kLsC7pjKXi5bhLXUPIzYoFZsUEccBkiDUzp6D8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:60:96:2b:9d:0f:72:e0:6e:a0:9b:d3:6d:1a:8e:73:92:1f:ba:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Validity Not Before: Jun 19 21:26:52 2026 GMT Not After : Jun 20 22:27:52 2026 GMT Subject: CN=49412DB1747536C3E7813B98C9A6FD6029C26504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:91:df:13:78:ed:74:84:1c:4b:f6:a9:0b:f8: 98:bc:8b:99:5c:f5:7b:ee:10:b1:3d:37:0a:3e:62: fc:77:e6:f5:b7:00:d2:91:de:df:81:2e:d9:21:23: 03:8b:ce:b1:4a:ab:73:0d:ab:f5:4b:a8:90:3f:2e: 78:2f:98:d5:c2:df:bd:e6:93:41:8c:b6:23:3e:c4: 13:ad:24:13:0c:ec:5d:43:df:98:44:c5:11:68:f4: 7b:a7:0c:78:08:30:dd:b0:00:b0:3a:81:62:0a:9c: 1b:57:25:e6:53:26:52:d7:05:97:27:d2:c0:17:b0: 7c:3d:ce:a6:c1:1b:92:7f:9b:bc:ce:9d:7d:03:ec: 35:d0:85:0f:af:14:44:1e:fd:9c:25:a9:3c:dc:59: 1d:28:ca:d8:63:4e:c9:77:d5:bb:a8:97:d3:c4:38: d2:f4:cb:f3:1d:d8:aa:75:c0:5d:07:68:7e:e6:70: 62:65:9c:96:a3:90:5e:a3:fa:c9:6f:a8:e3:fc:1a: 14:e0:9a:48:54:06:56:17:6a:f4:e1:ad:c4:a6:73: 48:95:ed:0b:91:54:2b:7b:81:ec:52:42:93:53:a1: 6f:7c:30:b8:97:bb:6e:04:e4:ad:23:2f:f7:2c:09: b7:d8:f7:46:31:d1:10:c9:62:47:42:35:1f:d4:b8: 80:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:41:2D:B1:74:75:36:C3:E7:81:3B:98:C9:A6:FD:60:29:C2:65:04 X509v3 Authority Key Identifier: keyid:02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:03:34:27:b3:15:15:fc:43:48:2d:f5:8a:2d:a7:0b:b2:09: 72:df:01:93:d0:fb:87:41:66:a8:d6:b9:73:ed:eb:de:f1:04: f9:bd:22:51:17:e4:3f:3b:ce:f8:85:ef:83:8d:c2:a2:f4:10: 2c:23:71:f7:98:e1:f8:3e:77:b4:81:07:e8:99:e2:33:ec:60: ef:15:16:04:15:e8:a1:fd:e5:fd:2a:d9:18:e9:95:2b:54:e3: 11:01:0a:ae:6a:7b:bb:ae:0a:c0:70:28:69:5c:b4:8f:35:bc: 67:b6:5b:4c:45:4b:a4:00:bd:6f:e8:a3:bb:3a:69:14:d8:4d: 4b:40:15:36:71:fa:ac:b5:83:8d:de:0d:33:51:39:6e:1f:af: 32:d3:32:01:1f:9b:1f:a3:4a:30:4f:22:ef:7a:bc:6f:9e:47: 47:5c:f5:de:1a:9e:7d:c2:13:8e:08:ab:6f:3e:ee:e2:38:d3: ea:a5:78:40:7c:e5:28:96:59:03:9b:0d:39:2e:b6:80:4b:01: 3d:e3:75:bd:62:99:9f:67:63:32:1f:08:c9:f9:ac:a6:a1:c1: 8b:ed:9a:ce:79:65:d2:36:b8:57:e3:4b:fd:7a:85:0e:f0:18: 16:1f:21:89:3a:9c:17:e7:e9:3b:bc:99:97:88:13:37:58:50: 4f:63:e5:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdWCWK50PcuBuoJvTbRqOc5IfukwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlD MjQ0MkFEOTAeFw0yNjA2MTkyMTI2NTJaFw0yNjA2MjAyMjI3NTJaMDMxMTAvBgNV BAMTKDQ5NDEyREIxNzQ3NTM2QzNFNzgxM0I5OEM5QTZGRDYwMjlDMjY1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNkd8TeO10hBxL9qkL+Ji8i5lc 9XvuELE9Nwo+Yvx35vW3ANKR3t+BLtkhIwOLzrFKq3MNq/VLqJA/LngvmNXC373m k0GMtiM+xBOtJBMM7F1D35hExRFo9HunDHgIMN2wALA6gWIKnBtXJeZTJlLXBZcn 0sAXsHw9zqbBG5J/m7zOnX0D7DXQhQ+vFEQe/ZwlqTzcWR0oythjTsl31buol9PE ONL0y/Md2Kp1wF0HaH7mcGJlnJajkF6j+slvqOP8GhTgmkhUBlYXavThrcSmc0iV 7QuRVCt7gexSQpNToW98MLiXu24E5K0jL/csCbfY90Yx0RDJYkdCNR/UuIANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSUEtsXR1NsPngTuYyab9YCnCZQQwHwYDVR0j BBgwFoAUAotyiY4Lq880cMfonsbh+cJEKtkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg1Y2JkOTUtNTc0Zi00MDViLThiZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4 RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlDMjQ0MkFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCNzI4OThFMEJBQkNGMzQ3MEM3RTg5RUM2RTFGOUMyNDQy QUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUx RjlDMjQ0MkFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwDNCezFRX8Q0gt9YotpwuyCXLfAZPQ+4dB ZqjWuXPt697xBPm9IlEX5D87zviF74ONwqL0ECwjcfeY4fg+d7SBB+iZ4jPsYO8V FgQV6KH95f0q2RjplStU4xEBCq5qe7uuCsBwKGlctI81vGe2W0xFS6QAvW/oo7s6 aRTYTUtAFTZx+qy1g43eDTNROW4frzLTMgEfmx+jSjBPIu96vG+eR0dc9d4ann3C E44Iq28+7uI40+qleEB85SiWWQObDTkutoBLAT3jdb1imZ9nYzIfCMn5rKahwYvt ms55ZdI2uFfjS/16hQ7wGBYfIYk6nBfn6Tu8mZeIEzdYUE9j5SY= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:16 2026 by rpki-client