$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft File: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft (raw, json) Hash identifier: U3eA5x/glP+PaEzun6MY7m4q0DDtMVfibVgFpNP1mio= Subject key identifier: F8:DA:E6:3E:06:67:FE:F7:DA:9D:B6:0F:77:BA:11:40:18:0F:C5:DA Authority key identifier: 28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 Certificate issuer: /CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Certificate serial: 627F9F9383A6787EA3ED976B8D57131EB29DC873 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:45:46 +0000 Manifest this update: Thu 17 Sep 2026 01:40:46 +0000 Manifest next update: Fri 18 Sep 2026 04:51:46 +0000 Files and hashes: 1: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: 3yzCp4wkI3KfVYe4A0JZd3yJ1CphXPMHC1KQXGZTn24=) 2: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: cqIEZQxU+EZc9SYrpFqE5pS8nDzAxvnkTbzbHwD4B2w=) 3: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: QbxtuI4YaAQndGClm2TbpKVghRM330ZkzNpAWirg1ig=) 4: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl (hash: DhEbn/hWk1MRnk+tedYet/Yk28VhEwdzvEX1I9no6H8=) 5: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: DX9De2RZ1fwPjXYRliJoG3vcnnWQkcrXmm5lY0DlQ8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7f:9f:93:83:a6:78:7e:a3:ed:97:6b:8d:57:13:1e:b2:9d:c8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Validity Not Before: Sep 17 01:40:46 2026 GMT Not After : Sep 18 04:51:46 2026 GMT Subject: CN=F8DAE63E0667FEF7DA9DB60F77BA1140180FC5DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:70:8b:6a:6e:30:7e:45:8d:ce:ca:1f:d3: e1:cc:a7:fe:05:20:06:74:e3:5e:20:a3:93:89:4d: 99:d1:62:ae:b1:1c:ec:6f:ca:dc:d0:80:dd:27:4d: 8c:87:77:f3:7a:3a:e8:65:d9:06:8f:ba:57:8d:16: aa:5f:cb:2d:ce:e4:75:34:da:d3:43:60:af:b1:f2: 75:73:08:ba:84:06:29:d3:a2:81:e2:22:e3:b0:54: 0a:51:a2:74:80:08:ea:a7:09:5d:78:d6:91:86:7e: 0d:fc:d7:42:20:25:90:eb:c0:21:02:9a:41:53:fa: 46:2b:09:aa:36:2d:63:b8:4e:85:c7:cd:ef:af:28: bf:ec:e5:ea:02:d0:cf:cb:b9:4e:52:79:e0:f4:fa: e5:6f:0b:fe:61:cf:7b:01:23:8e:cd:9d:9f:2c:60: 08:0e:2b:2d:b9:ed:ac:e2:2c:c6:27:4f:d9:9e:9c: 22:54:cd:24:d5:3b:d4:f9:4d:8e:14:be:23:0e:ae: 96:8a:1b:63:66:cb:c8:e7:e9:9a:98:7f:cc:57:f7: 6a:58:bf:f0:e3:38:67:6a:fc:8b:78:68:63:5b:38: a4:68:c3:91:08:fb:d5:3b:90:04:8d:4b:48:62:b3: 9e:49:77:99:40:75:1e:f3:4e:17:cf:c3:fe:8c:7f: 9f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DA:E6:3E:06:67:FE:F7:DA:9D:B6:0F:77:BA:11:40:18:0F:C5:DA X509v3 Authority Key Identifier: keyid:28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:0b:59:f2:89:42:62:ce:97:f4:02:fa:b4:82:27:2e:e6:c0: c3:53:1e:c5:97:dd:1c:6a:13:05:58:ea:31:d7:ac:eb:96:a2: e2:18:61:00:b7:1d:0a:3a:02:c7:eb:5c:e0:35:95:32:ff:34: 0f:39:bf:c1:39:0d:31:b5:5f:a4:c5:ce:8a:e8:5a:b4:ff:35: 84:10:aa:68:06:ed:a4:2c:8c:5e:8a:a2:56:76:84:f5:ae:ad: b0:4d:7c:24:da:b1:4e:6a:71:e9:7a:75:04:87:9d:cc:07:91: e9:1e:93:6a:32:65:85:30:dc:1e:7c:d6:f2:a7:87:ee:4a:9d: 46:81:0b:e4:63:6d:ed:28:e2:2b:49:57:3b:e0:7c:e2:38:a7: bc:b7:a1:63:f8:72:79:0d:0d:6d:83:7d:3a:1e:f8:b6:16:bc: 68:1d:10:ec:d8:d6:ec:84:a2:ed:9e:db:86:2a:53:9b:91:1d: 83:4f:0e:ee:49:08:4d:b7:15:ea:2e:b8:90:05:27:76:80:dd: df:a4:d5:55:0c:d7:f8:e0:d9:6b:b1:82:66:10:44:fb:df:9c: 67:5e:8e:20:bf:6f:36:b4:44:70:6a:a7:1c:48:a4:c1:b6:57: 38:f3:f0:f4:43:19:5a:5c:92:f9:41:ce:aa:9b:d9:88:54:b0: 3a:13:c5:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYn+fk4OmeH6j7ZdrjVcTHrKdyHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAw MkNENUMyMjAeFw0yNjA5MTcwMTQwNDZaFw0yNjA5MTgwNDUxNDZaMDMxMTAvBgNV BAMTKEY4REFFNjNFMDY2N0ZFRjdEQTlEQjYwRjc3QkExMTQwMTgwRkM1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAV3CLam4wfkWNzsof0+HMp/4F IAZ0414go5OJTZnRYq6xHOxvytzQgN0nTYyHd/N6Ouhl2QaPuleNFqpfyy3O5HU0 2tNDYK+x8nVzCLqEBinTooHiIuOwVApRonSACOqnCV141pGGfg3810IgJZDrwCEC mkFT+kYrCao2LWO4ToXHze+vKL/s5eoC0M/LuU5SeeD0+uVvC/5hz3sBI47NnZ8s YAgOKy257aziLMYnT9menCJUzSTVO9T5TY4UviMOrpaKG2Nmy8jn6ZqYf8xX92pY v/DjOGdq/It4aGNbOKRow5EI+9U7kASNS0his55Jd5lAdR7zThfPw/6Mf59DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+NrmPgZn/vfanbYPd7oRQBgPxdowHwYDVR0j BBgwFoAUKAUf8ZCtYPKGrmmlwsKnUALNXCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZjOGIzYTktNGVmZi00NjBkLWIwMWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5 MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAwMkNENUMyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODA1MUZGMTkwQUQ2MEYyODZBRTY5QTVDMkMyQTc1MDAyQ0Q1 QzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3 NTAwMkNENUMyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANALWfKJQmLOl/QC+rSCJy7mwMNTHsWX3Rxq EwVY6jHXrOuWouIYYQC3HQo6AsfrXOA1lTL/NA85v8E5DTG1X6TFzoroWrT/NYQQ qmgG7aQsjF6KolZ2hPWurbBNfCTasU5qcel6dQSHncwHkekek2oyZYUw3B581vKn h+5KnUaBC+Rjbe0o4itJVzvgfOI4p7y3oWP4cnkNDW2DfToe+LYWvGgdEOzY1uyE ou2e24YqU5uRHYNPDu5JCE23FeouuJAFJ3aA3d+k1VUM1/jg2WuxgmYQRPvfnGde jiC/bza0RHBqpxxIpMG2Vzjz8PRDGVpckvlBzqqb2YhUsDoTxYg= -----END CERTIFICATE-----Generated at Thu Sep 17 10:01:51 2026 by rpki-client