$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft File: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft (raw, json) Hash identifier: fQFNSbN3vWsQIa36XFMV+f+uvlITrPb6Y8xPaVIpQC0= Subject key identifier: C9:51:98:FB:48:8B:2C:E9:9A:F1:9C:B0:2A:4C:11:8F:E5:F8:33:12 Authority key identifier: 1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD Certificate issuer: /CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Certificate serial: 02553106E8A82C09C670B63759D96BED5E59AF08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:27:40 +0000 Manifest this update: Tue 16 Jun 2026 19:22:40 +0000 Manifest next update: Wed 17 Jun 2026 19:40:40 +0000 Files and hashes: 1: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl (hash: qnnCkxGC5ZcFWIcJrJEKw6q46JU556NXMHK+1gSF/L0=) 2: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: Iyu6UGXh6K6YUKWK1Cw0yY2+2dIgfvoG18aCPpAU41Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:55:31:06:e8:a8:2c:09:c6:70:b6:37:59:d9:6b:ed:5e:59:af:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Validity Not Before: Jun 16 19:22:40 2026 GMT Not After : Jun 17 19:40:40 2026 GMT Subject: CN=C95198FB488B2CE99AF19CB02A4C118FE5F83312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0a:1c:26:a6:fd:ae:cd:28:35:bc:71:50:2a: 92:7b:a7:7f:9b:db:ea:04:61:f4:59:08:22:f8:c8: 7c:d9:14:8b:86:66:b4:bc:85:c2:c7:f5:c3:d5:5b: 66:ba:85:bc:9a:07:90:57:10:1c:1b:ae:d6:80:40: e6:71:6b:31:38:50:42:48:5a:f3:8f:52:a2:08:8a: 17:04:98:04:ee:70:f2:b2:49:87:da:21:19:c1:70: a2:80:42:3a:ae:09:64:ad:b4:af:cd:62:b8:04:77: f7:06:1a:23:c7:71:76:d3:a0:3d:df:95:a5:dc:a5: e8:a2:bf:1a:ad:a9:5a:77:5e:ed:01:19:a8:3f:f9: 7e:88:0e:b5:e2:83:bb:22:6d:5e:5f:10:0a:59:4e: 1d:05:20:90:03:de:07:95:d6:97:8b:16:cd:a3:d1: 36:c8:39:53:58:5a:32:09:45:50:49:fe:cb:68:f7: 44:eb:42:fb:cf:7d:c2:03:a3:d9:96:e6:ba:1c:e4: aa:95:57:9c:b8:62:e9:51:97:5f:d6:78:2c:a5:7c: 58:6d:1a:f6:7a:7b:23:b1:31:96:19:d6:fe:6f:83: 7d:21:95:26:c2:57:3b:18:b4:3f:57:68:87:e8:db: 64:a7:0b:da:05:d3:b5:58:fa:cf:15:82:7d:d2:3b: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:51:98:FB:48:8B:2C:E9:9A:F1:9C:B0:2A:4C:11:8F:E5:F8:33:12 X509v3 Authority Key Identifier: keyid:1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d4:dd:4e:81:04:d0:b0:34:6f:ad:9a:ae:cb:91:be:c7:06: 97:b4:82:a9:fb:3a:63:b1:31:41:6d:95:e8:3d:53:82:7f:24: 1c:33:ce:0a:a6:cc:31:5a:51:7c:15:a1:cb:f4:52:4b:78:f3: b4:f1:c2:ae:3b:c7:48:38:22:da:2f:6c:61:88:3f:7c:a8:e8: c3:07:95:9b:46:c3:ce:5a:c4:ee:c9:80:da:71:9f:d2:ab:7e: 43:f3:3f:bf:d9:bc:48:d0:9a:de:ac:34:23:0c:8f:05:84:e9: 0c:55:54:5c:f7:7b:bd:e0:70:f3:7b:09:c7:a3:da:a8:f4:49: 2d:90:5b:52:79:84:26:bb:4a:24:e6:90:c8:15:9a:68:d4:88: 66:8d:e9:4f:e2:c2:72:97:45:6c:8f:ac:67:c4:ba:4d:56:97: 30:a0:1e:5e:a4:e0:97:23:21:b0:54:f0:4c:5f:81:e3:21:8a: 17:38:70:5a:fa:29:70:39:29:9f:77:73:bb:ae:95:c7:98:44: b9:d6:ea:10:db:9e:a2:67:cf:24:3a:ee:0c:86:ed:e7:a5:24: 7d:93:67:2e:31:78:5b:f7:2a:ee:ca:7f:1b:3e:6f:85:29:ee: 7d:a3:da:a1:29:c0:1e:fd:fc:7c:16:8c:7c:cf:17:7a:69:80: 13:97:c0:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAlUxBuioLAnGcLY3Wdlr7V5ZrwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZC M0Y3OThGRDAeFw0yNjA2MTYxOTIyNDBaFw0yNjA2MTcxOTQwNDBaMDMxMTAvBgNV BAMTKEM5NTE5OEZCNDg4QjJDRTk5QUYxOUNCMDJBNEMxMThGRTVGODMzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnChwmpv2uzSg1vHFQKpJ7p3+b 2+oEYfRZCCL4yHzZFIuGZrS8hcLH9cPVW2a6hbyaB5BXEBwbrtaAQOZxazE4UEJI WvOPUqIIihcEmATucPKySYfaIRnBcKKAQjquCWSttK/NYrgEd/cGGiPHcXbToD3f laXcpeiivxqtqVp3Xu0BGag/+X6IDrXig7sibV5fEApZTh0FIJAD3geV1peLFs2j 0TbIOVNYWjIJRVBJ/sto90TrQvvPfcIDo9mW5roc5KqVV5y4YulRl1/WeCylfFht GvZ6eyOxMZYZ1v5vg30hlSbCVzsYtD9XaIfo22SnC9oF07VY+s8Vgn3SO29XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyVGY+0iLLOma8ZywKkwRj+X4MxIwHwYDVR0j BBgwFoAUHSim4h8oEp1JUqAI//jun7P3mP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFkMzk0NTAtNDU4NC00ODgyLWI1YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIx RjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZCM0Y3OThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDI4QTZFMjFGMjgxMjlENDk1MkEwMDhGRkY4RUU5RkIzRjc5 OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVF OUZCM0Y3OThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPU3U6BBNCwNG+tmq7Lkb7HBpe0gqn7OmOx MUFtleg9U4J/JBwzzgqmzDFaUXwVocv0Ukt487Txwq47x0g4ItovbGGIP3yo6MMH lZtGw85axO7JgNpxn9KrfkPzP7/ZvEjQmt6sNCMMjwWE6QxVVFz3e73gcPN7Ccej 2qj0SS2QW1J5hCa7SiTmkMgVmmjUiGaN6U/iwnKXRWyPrGfEuk1WlzCgHl6k4Jcj IbBU8ExfgeMhihc4cFr6KXA5KZ93c7uulceYRLnW6hDbnqJnzyQ67gyG7eelJH2T Zy4xeFv3Ku7Kfxs+b4Up7n2j2qEpwB79/HwWjHzPF3ppgBOXwFM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:42:56 2026 by rpki-client