$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft File: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft (raw, json) Hash identifier: Pgm29mOnUq9/5Oq0Bz8e8mMTRKhqPYX2iEN54sq7MRA= Subject key identifier: DB:18:FC:1E:3C:D6:C1:16:88:3C:F0:7B:95:B5:32:33:2B:CB:EE:B5 Authority key identifier: 28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 Certificate issuer: /CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Certificate serial: 7C2D5DEFD780E3A464D8B6442776BC0D1998FB43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 18:09:23 +0000 Manifest this update: Sun 02 Aug 2026 18:04:23 +0000 Manifest next update: Mon 03 Aug 2026 20:19:23 +0000 Files and hashes: 1: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: DX9De2RZ1fwPjXYRliJoG3vcnnWQkcrXmm5lY0DlQ8c=) 2: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: QbxtuI4YaAQndGClm2TbpKVghRM330ZkzNpAWirg1ig=) 3: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: 3yzCp4wkI3KfVYe4A0JZd3yJ1CphXPMHC1KQXGZTn24=) 4: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: cqIEZQxU+EZc9SYrpFqE5pS8nDzAxvnkTbzbHwD4B2w=) 5: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl (hash: vlrHP7hnVKfLMYxA56KWYoLovYM6bvzN7akUOSfnlBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2d:5d:ef:d7:80:e3:a4:64:d8:b6:44:27:76:bc:0d:19:98:fb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Validity Not Before: Aug 2 18:04:23 2026 GMT Not After : Aug 3 20:19:23 2026 GMT Subject: CN=DB18FC1E3CD6C116883CF07B95B532332BCBEEB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:a7:52:ac:70:d3:eb:c5:03:64:a6:fa:16: 68:98:a6:5b:68:a5:06:4e:ea:eb:8a:b1:35:3a:95: 8d:f6:7e:67:be:a7:d5:35:de:21:59:3e:d4:e2:23: a1:1b:a1:90:43:1c:88:5e:d1:36:44:1b:f9:51:0a: a7:45:a9:fc:8c:48:99:d4:57:f5:af:b8:85:10:4e: 06:29:27:41:e1:97:67:7c:6c:e6:36:4d:1d:2a:2b: fa:38:e4:50:7b:ad:fc:d5:62:0d:18:a1:6f:6a:9e: 73:05:76:2b:7c:2e:82:fa:d1:3b:d9:43:9b:65:b2: 40:3e:a0:67:2e:c3:b4:b6:e0:f9:75:88:fe:88:ef: c4:fe:f7:b4:49:52:de:c5:b3:aa:76:a1:5c:b7:d9: 8d:02:ba:4b:69:cc:00:47:e6:ec:ac:dd:be:48:fd: 9a:b2:49:3f:e5:fd:34:8c:6e:cb:7c:59:07:a3:f7: 57:69:6f:8a:79:bb:a3:11:31:24:12:4c:1e:58:dc: af:d0:c7:78:d6:ea:35:2d:1a:95:3b:9c:55:16:02: 18:3b:89:96:f7:f5:39:e7:77:d2:b0:89:e9:1e:b2: fc:7c:a1:81:ac:55:a8:23:0f:70:5c:9b:9e:7f:4c: 4d:7f:80:7e:15:6f:29:b1:53:07:44:ab:e8:83:9a: d0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:18:FC:1E:3C:D6:C1:16:88:3C:F0:7B:95:B5:32:33:2B:CB:EE:B5 X509v3 Authority Key Identifier: keyid:28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ec:53:6c:21:06:ec:ee:88:ff:00:e2:67:27:94:63:58:76: 0d:dd:e5:34:91:07:59:fb:43:3e:6b:6f:4f:8e:03:60:54:c6: 36:1c:94:6f:d5:5a:7a:92:40:28:3d:75:97:2b:0d:54:18:9a: 9a:db:b7:f2:fe:64:94:95:05:d0:00:dc:1b:83:61:27:6c:f7: d9:22:41:03:39:73:4e:75:f7:11:50:54:26:ab:96:d8:f2:5a: a6:04:ed:d1:7c:2d:3a:5d:48:f6:63:ac:0f:e3:d3:d3:ba:4f: 83:ad:15:9c:5a:55:cb:6e:92:ae:47:9d:82:6d:8a:87:8f:6a: 3e:21:73:c6:6b:9e:33:6b:d1:45:d6:e5:f2:05:5d:1e:46:4e: fb:9d:91:9e:9a:87:54:27:04:7d:e8:a4:c2:35:6f:8e:f4:9a: b4:b6:05:c3:d8:10:04:45:3e:2a:57:b3:14:8e:58:0f:59:ed: cd:c5:48:76:3f:e3:cf:2e:a3:2a:26:50:cc:52:04:d3:22:e9: 61:09:6f:4c:52:54:f8:cd:9a:7b:73:52:93:64:74:f2:69:29: cf:ae:5b:0c:b5:93:6e:5a:b4:a1:26:15:88:54:3f:0a:5f:d6: e7:82:98:d7:6a:69:61:f3:40:db:2a:be:00:f4:01:9a:7b:0d: d6:b6:4c:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfC1d79eA46Rk2LZEJ3a8DRmY+0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAw MkNENUMyMjAeFw0yNjA4MDIxODA0MjNaFw0yNjA4MDMyMDE5MjNaMDMxMTAvBgNV BAMTKERCMThGQzFFM0NENkMxMTY4ODNDRjA3Qjk1QjUzMjMzMkJDQkVFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFAqdSrHDT68UDZKb6FmiYplto pQZO6uuKsTU6lY32fme+p9U13iFZPtTiI6EboZBDHIhe0TZEG/lRCqdFqfyMSJnU V/WvuIUQTgYpJ0Hhl2d8bOY2TR0qK/o45FB7rfzVYg0YoW9qnnMFdit8LoL60TvZ Q5tlskA+oGcuw7S24Pl1iP6I78T+97RJUt7Fs6p2oVy32Y0CuktpzABH5uys3b5I /ZqyST/l/TSMbst8WQej91dpb4p5u6MRMSQSTB5Y3K/Qx3jW6jUtGpU7nFUWAhg7 iZb39Tnnd9Kwiekesvx8oYGsVagjD3Bcm55/TE1/gH4VbymxUwdEq+iDmtD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2xj8HjzWwRaIPPB7lbUyMyvL7rUwHwYDVR0j BBgwFoAUKAUf8ZCtYPKGrmmlwsKnUALNXCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZjOGIzYTktNGVmZi00NjBkLWIwMWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5 MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAwMkNENUMyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODA1MUZGMTkwQUQ2MEYyODZBRTY5QTVDMkMyQTc1MDAyQ0Q1 QzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3 NTAwMkNENUMyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnsU2whBuzuiP8A4mcnlGNYdg3d5TSRB1n7 Qz5rb0+OA2BUxjYclG/VWnqSQCg9dZcrDVQYmprbt/L+ZJSVBdAA3BuDYSds99ki QQM5c0519xFQVCarltjyWqYE7dF8LTpdSPZjrA/j09O6T4OtFZxaVctukq5HnYJt ioePaj4hc8ZrnjNr0UXW5fIFXR5GTvudkZ6ah1QnBH3opMI1b470mrS2BcPYEARF PipXsxSOWA9Z7c3FSHY/488uoyomUMxSBNMi6WEJb0xSVPjNmntzUpNkdPJpKc+u Wwy1k25atKEmFYhUPwpf1ueCmNdqaWHzQNsqvgD0AZp7Dda2TD0= -----END CERTIFICATE-----Generated at Sun Aug 2 22:43:04 2026 by rpki-client