$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft File: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft (raw, json) Hash identifier: rSaFrFkVdCXnvbLvRmI+m05PgB6pgyceHUAZnOwU8Ts= Subject key identifier: 7F:BC:D9:7D:A8:14:79:87:0D:EF:DA:2D:E2:54:23:BF:20:C5:A4:68 Authority key identifier: 28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 Certificate issuer: /CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Certificate serial: 1F0D1F0F265627C9535F094930399B9545AEAC60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 00:37:34 +0000 Manifest this update: Thu 18 Jun 2026 00:32:34 +0000 Manifest next update: Fri 19 Jun 2026 04:06:34 +0000 Files and hashes: 1: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl (hash: pE+cfST3+x+zxZl67lyDfR9OVFu29dTpUzn6DDbTaqU=) 2: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: cqIEZQxU+EZc9SYrpFqE5pS8nDzAxvnkTbzbHwD4B2w=) 3: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: 3yzCp4wkI3KfVYe4A0JZd3yJ1CphXPMHC1KQXGZTn24=) 4: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: DX9De2RZ1fwPjXYRliJoG3vcnnWQkcrXmm5lY0DlQ8c=) 5: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: QbxtuI4YaAQndGClm2TbpKVghRM330ZkzNpAWirg1ig=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 04:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:0d:1f:0f:26:56:27:c9:53:5f:09:49:30:39:9b:95:45:ae:ac:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Validity Not Before: Jun 18 00:32:34 2026 GMT Not After : Jun 19 04:06:34 2026 GMT Subject: CN=7FBCD97DA81479870DEFDA2DE25423BF20C5A468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d3:c1:d5:4f:96:11:27:5d:c5:9b:25:c9:a4: 96:d9:9d:30:97:ec:aa:26:be:5b:39:21:31:f9:42: 5b:50:5d:43:77:ec:ca:de:1f:1c:65:a7:90:08:5f: d5:92:5d:ed:15:25:83:01:fe:99:24:bc:59:12:df: 6d:66:f7:d5:96:f2:67:ca:ac:b3:4b:92:aa:a0:66: f3:b2:e9:b4:93:0a:3d:23:eb:80:30:76:e1:ea:49: 43:80:6a:45:50:e7:93:89:64:e1:df:ac:a6:10:2e: 5e:65:3f:22:75:ee:7c:8d:7a:49:77:1c:f3:5c:e3: 8d:50:52:a7:df:27:0e:9a:7d:11:2f:84:ed:52:23: b9:61:ca:31:49:20:66:8c:07:90:46:85:84:92:da: ba:1f:11:da:22:e3:e8:25:99:0d:7f:3e:e0:00:cb: 27:fe:01:8b:51:d7:6d:be:84:31:b3:27:b2:0c:ea: e8:8c:02:e2:e0:34:99:2a:d8:ef:13:9f:38:06:b0: b6:f2:96:c6:36:c4:a4:35:9c:3e:2b:68:a6:41:1c: 06:00:af:7b:2a:be:27:12:2f:0b:81:68:e6:5a:3b: da:2c:46:57:31:c8:fb:f1:e0:9c:e3:17:d4:55:ca: eb:62:2f:6d:8c:af:4d:e0:cd:6e:9b:f2:fa:5c:e9: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BC:D9:7D:A8:14:79:87:0D:EF:DA:2D:E2:54:23:BF:20:C5:A4:68 X509v3 Authority Key Identifier: keyid:28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:26:ea:3e:c7:01:8e:d8:f8:4e:35:e4:ff:8f:0a:58:e7:5d: 46:6f:68:20:14:98:d1:8d:d9:44:2c:b6:83:e9:fa:1f:fa:2f: 86:c4:4f:4f:d5:94:39:5a:0d:9f:3b:e7:40:9b:31:b2:62:f3: 2b:7f:c6:0c:31:2a:7c:aa:4f:32:f4:4e:73:9b:a1:33:71:6c: 2c:e5:b5:64:4d:89:c7:00:a0:39:01:f5:2d:6a:56:f8:ca:df: 68:d0:0e:86:32:49:99:69:8d:30:5a:1a:48:1b:bf:0e:d1:28: 8c:63:53:d2:0d:2f:8a:72:ca:7a:6e:23:2e:88:78:2d:6c:b3: cb:14:7e:7f:47:ae:fe:bb:14:8e:73:9d:cd:88:bc:30:b9:5a: 33:ad:80:10:bf:f6:c6:f3:9a:20:f1:35:33:31:53:6a:2e:f8: 66:88:80:d0:be:03:ca:02:7c:1d:23:ef:43:94:c8:16:22:57: 37:4c:e2:4c:25:a0:4f:a1:d3:48:6d:d4:b5:d4:ea:c8:87:bb: c8:30:bf:25:55:17:70:f3:e8:1f:ba:44:d1:8b:7c:70:e8:9b: 1a:b7:7f:22:20:71:3a:c8:a6:8e:83:9f:e4:ea:19:26:68:53: 4a:d7:ba:f8:82:b9:2e:84:8b:58:e8:73:84:0c:86:66:9a:cf: b0:96:2f:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHw0fDyZWJ8lTXwlJMDmblUWurGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAw MkNENUMyMjAeFw0yNjA2MTgwMDMyMzRaFw0yNjA2MTkwNDA2MzRaMDMxMTAvBgNV BAMTKDdGQkNEOTdEQTgxNDc5ODcwREVGREEyREUyNTQyM0JGMjBDNUE0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN08HVT5YRJ13FmyXJpJbZnTCX 7Komvls5ITH5QltQXUN37MreHxxlp5AIX9WSXe0VJYMB/pkkvFkS321m99WW8mfK rLNLkqqgZvOy6bSTCj0j64AwduHqSUOAakVQ55OJZOHfrKYQLl5lPyJ17nyNekl3 HPNc441QUqffJw6afREvhO1SI7lhyjFJIGaMB5BGhYSS2rofEdoi4+glmQ1/PuAA yyf+AYtR122+hDGzJ7IM6uiMAuLgNJkq2O8TnzgGsLbylsY2xKQ1nD4raKZBHAYA r3sqvicSLwuBaOZaO9osRlcxyPvx4JzjF9RVyutiL22Mr03gzW6b8vpc6d9DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf7zZfagUeYcN79ot4lQjvyDFpGgwHwYDVR0j BBgwFoAUKAUf8ZCtYPKGrmmlwsKnUALNXCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZjOGIzYTktNGVmZi00NjBkLWIwMWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5 MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAwMkNENUMyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODA1MUZGMTkwQUQ2MEYyODZBRTY5QTVDMkMyQTc1MDAyQ0Q1 QzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3 NTAwMkNENUMyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANUm6j7HAY7Y+E415P+PCljnXUZvaCAUmNGN 2UQstoPp+h/6L4bET0/VlDlaDZ8750CbMbJi8yt/xgwxKnyqTzL0TnOboTNxbCzl tWRNiccAoDkB9S1qVvjK32jQDoYySZlpjTBaGkgbvw7RKIxjU9INL4pyynpuIy6I eC1ss8sUfn9Hrv67FI5znc2IvDC5WjOtgBC/9sbzmiDxNTMxU2ou+GaIgNC+A8oC fB0j70OUyBYiVzdM4kwloE+h00ht1LXU6siHu8gwvyVVF3Dz6B+6RNGLfHDomxq3 fyIgcTrIpo6Dn+TqGSZoU0rXuviCuS6Ei1joc4QMhmaaz7CWL4k= -----END CERTIFICATE-----Generated at Thu Jun 18 19:03:02 2026 by rpki-client