$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft File: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft (raw, json) Hash identifier: MA3knXDFyJgcduoaeX7TVwyh3mdGREvtdM42S6I87dY= Subject key identifier: 80:3C:D8:5F:FB:E2:56:FD:9A:08:DE:51:84:ED:3A:97:6C:22:C7:EE Authority key identifier: 28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 Certificate issuer: /CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Certificate serial: 7CD0231AECA0EE06EA53530A46B3774DAC9DB26C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft Manifest number: D3 Signing time: Tue 06 Oct 2026 20:28:30 +0000 Manifest this update: Tue 06 Oct 2026 20:23:30 +0000 Manifest next update: Thu 08 Oct 2026 00:21:30 +0000 Files and hashes: 1: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl (hash: tZ0BkAzcvjlBrQabs9J0df8yuXrNmeA8bq1cu8E9GbM=) 2: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: QbxtuI4YaAQndGClm2TbpKVghRM330ZkzNpAWirg1ig=) 3: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: DX9De2RZ1fwPjXYRliJoG3vcnnWQkcrXmm5lY0DlQ8c=) 4: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: cqIEZQxU+EZc9SYrpFqE5pS8nDzAxvnkTbzbHwD4B2w=) 5: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: 3yzCp4wkI3KfVYe4A0JZd3yJ1CphXPMHC1KQXGZTn24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 00:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d0:23:1a:ec:a0:ee:06:ea:53:53:0a:46:b3:77:4d:ac:9d:b2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Validity Not Before: Oct 6 20:23:30 2026 GMT Not After : Oct 8 00:21:30 2026 GMT Subject: CN=803CD85FFBE256FD9A08DE5184ED3A976C22C7EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:ba:7a:2c:51:f8:6e:39:f2:e1:8b:8e:37: 2f:51:da:67:52:10:94:02:0d:be:5f:63:91:4f:7c: 29:0a:b1:99:c1:9f:f7:4b:06:34:8c:f3:35:92:fc: e9:aa:7d:ad:79:9b:b7:96:ab:39:57:13:e9:2e:61: 3f:dd:e3:02:65:21:5d:d9:9f:1f:bc:da:f4:d9:19: 80:76:aa:24:c1:7c:ea:09:f7:2a:4c:f1:a2:00:d4: 80:60:0e:b9:d0:ef:22:ff:37:d0:80:d7:65:b7:e8: c4:03:91:42:72:56:99:d7:97:a5:45:7e:24:4f:6b: 08:a9:ee:1b:70:44:00:28:7a:54:49:f3:5a:8c:b4: fb:b1:c0:53:23:d2:3b:5d:5c:b0:9d:c1:70:72:9d: 9d:85:85:09:3f:c9:f1:06:2e:9d:d8:83:99:fc:38: ab:d7:29:bc:03:bd:13:5c:3c:66:57:87:5e:80:7c: 33:95:17:3b:57:99:c9:15:81:31:92:b3:bc:96:4a: 66:ff:fc:6c:d7:c4:3f:f2:95:7c:72:f3:ba:6a:38: 98:8b:fc:53:0e:41:ac:5f:27:b7:ff:d3:5e:34:a6: dd:21:94:47:e5:ed:2b:bb:e6:94:ea:67:6a:13:e2: 57:58:cf:b1:a2:b4:97:09:cb:b8:f7:60:df:94:b6: da:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3C:D8:5F:FB:E2:56:FD:9A:08:DE:51:84:ED:3A:97:6C:22:C7:EE X509v3 Authority Key Identifier: keyid:28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:01:49:d1:3a:e0:4e:62:b1:a9:24:70:8a:fc:4f:e6:86:ad: 18:37:84:0f:97:32:7e:c1:85:99:f8:0e:df:cc:a1:47:53:81: 6b:02:3a:3f:3a:be:90:15:90:b2:5d:a0:8d:87:fd:09:45:3d: e6:2f:98:9c:3d:79:ec:55:6f:17:ed:74:fb:31:e9:93:e8:7b: 7b:8a:8f:74:72:e0:53:a9:31:f1:3d:92:df:25:2d:0c:29:32: 79:69:dc:f3:c0:fc:3c:87:e2:78:7d:eb:a6:42:9b:4c:e2:7e: 94:86:1e:bb:c2:5e:4b:9b:74:f8:a2:50:1a:24:05:16:76:97: 61:23:c5:54:9f:f5:b6:b0:ef:3b:4e:ef:97:a1:b1:91:0d:bc: 54:da:2e:2a:fe:78:9e:23:b4:b4:c3:49:4c:f3:2e:af:50:b7: e9:5e:8d:c1:7e:dc:81:e6:4e:44:c7:06:8d:65:0e:88:1e:dc: e1:b0:b9:88:d0:a5:da:a1:71:4c:6c:86:7f:d1:12:6c:2a:54: f6:90:ee:ef:ea:3e:cb:5c:03:30:e9:5f:78:b7:09:6b:69:65: 69:a2:5b:48:31:e2:00:e6:e8:c9:2b:08:95:75:7a:fd:b5:fd: 44:7b:e3:52:ce:b8:0c:d8:32:af:28:5d:19:78:c0:80:96:36: c2:01:8e:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNAjGuyg7gbqU1MKRrN3TaydsmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAw MkNENUMyMjAeFw0yNjEwMDYyMDIzMzBaFw0yNjEwMDgwMDIxMzBaMDMxMTAvBgNV BAMTKDgwM0NEODVGRkJFMjU2RkQ5QTA4REU1MTg0RUQzQTk3NkMyMkM3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pbp6LFH4bjny4YuONy9R2mdS EJQCDb5fY5FPfCkKsZnBn/dLBjSM8zWS/Omqfa15m7eWqzlXE+kuYT/d4wJlIV3Z nx+82vTZGYB2qiTBfOoJ9ypM8aIA1IBgDrnQ7yL/N9CA12W36MQDkUJyVpnXl6VF fiRPawip7htwRAAoelRJ81qMtPuxwFMj0jtdXLCdwXBynZ2FhQk/yfEGLp3Yg5n8 OKvXKbwDvRNcPGZXh16AfDOVFztXmckVgTGSs7yWSmb//GzXxD/ylXxy87pqOJiL /FMOQaxfJ7f/0140pt0hlEfl7Su75pTqZ2oT4ldYz7GitJcJy7j3YN+UttptAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgDzYX/viVv2aCN5RhO06l2wix+4wHwYDVR0j BBgwFoAUKAUf8ZCtYPKGrmmlwsKnUALNXCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZjOGIzYTktNGVmZi00NjBkLWIwMWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5 MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAwMkNENUMyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODA1MUZGMTkwQUQ2MEYyODZBRTY5QTVDMkMyQTc1MDAyQ0Q1 QzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3 NTAwMkNENUMyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgBSdE64E5isakkcIr8T+aGrRg3hA+XMn7B hZn4Dt/MoUdTgWsCOj86vpAVkLJdoI2H/QlFPeYvmJw9eexVbxftdPsx6ZPoe3uK j3Ry4FOpMfE9kt8lLQwpMnlp3PPA/DyH4nh966ZCm0zifpSGHrvCXkubdPiiUBok BRZ2l2EjxVSf9baw7ztO75ehsZENvFTaLir+eJ4jtLTDSUzzLq9Qt+lejcF+3IHm TkTHBo1lDoge3OGwuYjQpdqhcUxshn/REmwqVPaQ7u/qPstcAzDpX3i3CWtpZWmi W0gx4gDm6MkrCJV1ev21/UR741LOuAzYMq8oXRl4wICWNsIBjvs= -----END CERTIFICATE-----Generated at Wed Oct 7 12:18:25 2026 by rpki-client