$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft File: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft (raw, json) Hash identifier: lquEzeB1H6R3rnbU8w6UTYthAu0IsN4Thhc6zxw0uS0= Subject key identifier: 6A:8F:E5:72:8B:75:26:BD:91:ED:AE:21:02:9D:D4:41:01:A5:C3:1D Authority key identifier: 1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD Certificate issuer: /CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Certificate serial: 07FC4B0C17D78B4FC68D6682DE7049197B7231FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 08:06:41 +0000 Manifest this update: Tue 22 Sep 2026 08:01:41 +0000 Manifest next update: Wed 23 Sep 2026 10:56:41 +0000 Files and hashes: 1: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: Iyu6UGXh6K6YUKWK1Cw0yY2+2dIgfvoG18aCPpAU41Y=) 2: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl (hash: 8YinmrEeU7vQu5JxTOfrHf6K0aBa/sDZuUUJ0LnHWFo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 10:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:fc:4b:0c:17:d7:8b:4f:c6:8d:66:82:de:70:49:19:7b:72:31:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Validity Not Before: Sep 22 08:01:41 2026 GMT Not After : Sep 23 10:56:41 2026 GMT Subject: CN=6A8FE5728B7526BD91EDAE21029DD44101A5C31D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:a2:89:71:cd:2c:a5:b8:39:0a:9d:ce:e5: 87:82:fa:77:fc:c8:dc:e6:e0:5d:7a:4f:3a:ac:e9: bd:5d:71:a4:55:98:b2:c0:00:21:13:8b:e7:6f:27: e6:87:ba:82:6a:c8:17:75:50:f3:67:06:20:dc:a5: ca:36:d3:45:d0:29:ef:b4:5c:fa:83:e5:6c:26:1f: 5d:d5:39:ee:d1:57:ed:cd:9e:67:26:33:bb:f1:98: e7:ab:d3:c9:04:70:1a:2a:17:82:37:bb:7c:84:7d: 42:0f:99:0c:2c:21:90:98:13:8e:48:67:cd:56:ab: 31:8c:d8:a3:ca:6e:5f:64:0b:24:9e:9d:de:91:ff: 14:5b:88:88:68:ae:d5:be:73:9e:62:5b:ce:47:2b: d7:77:96:a7:b4:55:a5:f9:c0:88:21:c2:41:ce:a9: 3e:9b:2c:f4:44:6a:57:60:86:ac:49:a1:01:b5:a2: a1:63:dc:20:fa:d5:e4:0a:bc:ad:cc:a9:f7:94:81: e9:cc:d7:08:38:67:4c:49:b4:0d:e9:42:68:5c:81: 6d:ca:1e:41:62:5c:05:a1:44:2a:a5:6f:9e:89:aa: 6f:42:be:2b:4c:09:da:63:dc:a9:94:70:56:7e:9b: 4f:d8:4e:5c:6d:25:31:0b:9c:8a:8f:66:fb:80:5c: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8F:E5:72:8B:75:26:BD:91:ED:AE:21:02:9D:D4:41:01:A5:C3:1D X509v3 Authority Key Identifier: keyid:1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ca:83:cc:2b:45:0d:88:f5:a0:9d:b4:a6:96:fd:81:fd:11: 40:8d:1c:e8:49:72:50:34:0d:b7:90:d7:38:99:86:10:62:b7: 77:47:5f:d1:38:80:37:c4:e5:4d:de:8a:c1:52:41:68:27:2a: 69:c9:0b:b2:f8:3f:bb:26:35:d8:fd:23:8d:65:8b:63:21:7c: 99:c4:fa:10:dc:c1:b4:77:a1:51:bd:16:18:6b:97:82:d0:47: fe:8a:ca:1e:d4:9f:64:a0:9a:37:10:58:36:fd:57:bc:37:24: d3:6f:dc:98:7f:00:09:a4:e9:2e:89:bc:be:c1:c9:33:16:b9: c4:84:26:2d:7b:b3:e8:af:e7:92:f6:45:0e:3b:ec:02:9c:c4: c1:53:4f:06:74:43:f3:88:77:0a:79:03:df:d8:38:6d:c9:c4: 18:c3:8d:63:7c:7d:5c:d8:ae:4d:9f:eb:13:c1:e0:ed:94:bd: c1:5d:3a:da:ad:f0:01:55:de:27:da:4b:9a:1c:88:54:9b:ef: 47:9d:20:65:b7:e1:69:12:db:73:23:8e:16:5e:71:7b:f2:fd: 2d:ec:ef:b5:94:cd:30:22:01:df:ee:83:f0:cb:5d:f4:c1:fe: c6:30:45:ae:20:ab:f2:10:d4:ee:e2:cc:cc:f2:6a:f2:73:c7: e5:7e:b8:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/xLDBfXi0/GjWaC3nBJGXtyMf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZC M0Y3OThGRDAeFw0yNjA5MjIwODAxNDFaFw0yNjA5MjMxMDU2NDFaMDMxMTAvBgNV BAMTKDZBOEZFNTcyOEI3NTI2QkQ5MUVEQUUyMTAyOURENDQxMDFBNUMzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsaKJcc0spbg5Cp3O5YeC+nf8 yNzm4F16Tzqs6b1dcaRVmLLAACETi+dvJ+aHuoJqyBd1UPNnBiDcpco200XQKe+0 XPqD5WwmH13VOe7RV+3NnmcmM7vxmOer08kEcBoqF4I3u3yEfUIPmQwsIZCYE45I Z81WqzGM2KPKbl9kCySend6R/xRbiIhortW+c55iW85HK9d3lqe0VaX5wIghwkHO qT6bLPREaldghqxJoQG1oqFj3CD61eQKvK3MqfeUgenM1wg4Z0xJtA3pQmhcgW3K HkFiXAWhRCqlb56Jqm9CvitMCdpj3KmUcFZ+m0/YTlxtJTELnIqPZvuAXNmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUao/lcot1Jr2R7a4hAp3UQQGlwx0wHwYDVR0j BBgwFoAUHSim4h8oEp1JUqAI//jun7P3mP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFkMzk0NTAtNDU4NC00ODgyLWI1YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIx RjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZCM0Y3OThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDI4QTZFMjFGMjgxMjlENDk1MkEwMDhGRkY4RUU5RkIzRjc5 OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVF OUZCM0Y3OThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDKg8wrRQ2I9aCdtKaW/YH9EUCNHOhJclA0 DbeQ1ziZhhBit3dHX9E4gDfE5U3eisFSQWgnKmnJC7L4P7smNdj9I41li2MhfJnE +hDcwbR3oVG9Fhhrl4LQR/6Kyh7Un2SgmjcQWDb9V7w3JNNv3Jh/AAmk6S6JvL7B yTMWucSEJi17s+iv55L2RQ477AKcxMFTTwZ0Q/OIdwp5A9/YOG3JxBjDjWN8fVzY rk2f6xPB4O2UvcFdOtqt8AFV3ifaS5ociFSb70edIGW34WkS23MjjhZecXvy/S3s 77WUzTAiAd/ug/DLXfTB/sYwRa4gq/IQ1O7izMzyavJzx+V+uO8= -----END CERTIFICATE-----Generated at Tue Sep 22 14:22:50 2026 by rpki-client