$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft File: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft (raw, json) Hash identifier: fUskU9VB3BQyUyRiRMLMq7KH96c1db5ReEHySswacXU= Subject key identifier: A2:A5:60:59:EE:43:95:E4:F7:EA:37:C2:D5:CA:1C:DE:02:BB:2B:BE Authority key identifier: 02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 Certificate issuer: /CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Certificate serial: 6D3D9C1590CC126881841B087302B25195923869 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft Manifest number: BD Signing time: Mon 21 Sep 2026 05:18:11 +0000 Manifest this update: Mon 21 Sep 2026 05:13:11 +0000 Manifest next update: Tue 22 Sep 2026 06:21:11 +0000 Files and hashes: 1: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: Xk7Qw7wFoGRI3rjKCFAl7ffLOSrFJh23uM7+wGfmYww=) 2: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl (hash: +g/lRV68xBbQSSoon2oKoA8Vi/rY7boCLVBW4WXgdTI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3d:9c:15:90:cc:12:68:81:84:1b:08:73:02:b2:51:95:92:38:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Validity Not Before: Sep 21 05:13:11 2026 GMT Not After : Sep 22 06:21:11 2026 GMT Subject: CN=A2A56059EE4395E4F7EA37C2D5CA1CDE02BB2BBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:66:c5:33:dd:ca:b5:93:78:74:12:19:a7: 07:17:e4:3e:91:21:f7:cf:06:a7:ef:11:95:93:c8: 09:4d:68:28:f1:40:4e:cf:da:fa:2f:d4:c8:45:bf: 18:4d:0f:bc:c7:f0:81:50:70:32:e2:aa:df:f0:71: d7:24:fa:69:bf:9f:b7:e3:90:d9:7d:07:30:e2:0a: a9:8e:ab:02:d5:b8:7a:98:c6:79:ad:c7:26:58:c5: 3f:7c:0b:73:93:8d:71:27:f6:60:80:ac:68:91:0f: b4:f8:ab:fd:10:96:aa:81:5d:10:4c:45:83:4d:6b: 90:87:be:1a:6b:25:a0:24:43:0e:c9:ac:ee:50:23: 85:41:cf:03:09:c9:e9:53:1a:6d:52:be:ee:4f:e7: 34:47:5d:8d:14:75:d0:3f:ba:ef:3e:f7:ab:77:82: 23:1b:9b:dc:bc:d6:9e:f3:95:69:12:e3:15:17:5b: 7e:5d:ef:72:0e:cb:b8:58:0d:fb:91:40:c9:89:41: 17:8d:5c:0d:6a:98:5d:12:a7:32:71:38:67:fb:17: 45:ee:e2:ed:e4:61:fa:40:5a:8e:1b:79:d5:46:a6: eb:33:44:a4:21:fe:04:80:23:82:2f:25:77:7b:74: b2:02:2a:db:30:5c:b1:29:06:8f:c1:40:7c:19:8c: 98:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A5:60:59:EE:43:95:E4:F7:EA:37:C2:D5:CA:1C:DE:02:BB:2B:BE X509v3 Authority Key Identifier: keyid:02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c7:03:ff:13:bd:6b:72:ec:6b:9a:28:be:1e:ff:76:e2:c3: 99:77:b8:af:65:f3:ee:22:83:7f:4c:25:fe:ec:3d:fc:90:39: 13:6c:6b:33:e1:73:dc:38:c0:03:41:eb:85:1d:b3:3a:bb:a5: 61:4e:31:21:9f:3a:cd:d4:f3:66:d5:74:e5:5c:f1:7b:5b:72: e7:45:91:3d:b6:2a:f3:64:d5:d6:e8:91:d1:76:c6:36:41:62: 7f:b9:04:8b:61:ce:99:36:d2:7f:7a:64:f9:c9:39:6c:be:d9: d9:63:07:6a:8c:29:2d:0b:e1:fd:e9:cf:c0:88:66:bc:b7:ed: f4:3c:da:2c:de:22:09:73:78:8a:52:b5:8a:f2:87:3c:f4:59: d3:8f:0f:14:27:5b:ef:b5:1e:b1:3c:3f:bb:f8:9a:0c:3d:b8: ab:84:95:33:0a:c9:c2:21:57:b8:96:c5:48:27:4d:05:ed:60: b7:4f:62:26:4c:1f:e3:42:6d:04:ed:05:a2:90:8c:4d:c2:09: f9:50:8e:f5:cf:00:5d:eb:87:a6:8e:9b:48:a8:73:3d:81:a4: b9:7a:ae:d0:86:41:ef:5f:7e:c1:2b:e4:b6:17:d0:f1:7e:3c: 91:a6:91:ad:8e:15:f7:d6:0d:f0:bc:df:99:3e:a2:b0:9b:83: 06:2a:9b:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbT2cFZDMEmiBhBsIcwKyUZWSOGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0QjczQzY4 RDBBMENCMzAeFw0yNjA5MjEwNTEzMTFaFw0yNjA5MjIwNjIxMTFaMDMxMTAvBgNV BAMTKEEyQTU2MDU5RUU0Mzk1RTRGN0VBMzdDMkQ1Q0ExQ0RFMDJCQjJCQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7GbFM93KtZN4dBIZpwcX5D6R IffPBqfvEZWTyAlNaCjxQE7P2vov1MhFvxhND7zH8IFQcDLiqt/wcdck+mm/n7fj kNl9BzDiCqmOqwLVuHqYxnmtxyZYxT98C3OTjXEn9mCArGiRD7T4q/0QlqqBXRBM RYNNa5CHvhprJaAkQw7JrO5QI4VBzwMJyelTGm1Svu5P5zRHXY0UddA/uu8+96t3 giMbm9y81p7zlWkS4xUXW35d73IOy7hYDfuRQMmJQReNXA1qmF0SpzJxOGf7F0Xu 4u3kYfpAWo4bedVGpuszRKQh/gSAI4IvJXd7dLICKtswXLEpBo/BQHwZjJizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoqVgWe5DleT36jfC1coc3gK7K74wHwYDVR0j BBgwFoAUAgYo2xbf3fRCkjsJ0Etzxo0KDLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmM5MDk3MzctMTU2NC00NmNhLTkwMDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIx NkRGRERGNDQyOTIzQjA5RDA0QjczQzY4RDBBMENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjA2MjhEQjE2REZEREY0NDI5MjNCMDlEMDRCNzNDNjhEMEEw Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0Qjcz QzY4RDBBMENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnHA/8TvWty7GuaKL4e/3biw5l3uK9l8+4i g39MJf7sPfyQORNsazPhc9w4wANB64Udszq7pWFOMSGfOs3U82bVdOVc8XtbcudF kT22KvNk1dbokdF2xjZBYn+5BIthzpk20n96ZPnJOWy+2dljB2qMKS0L4f3pz8CI Zry37fQ82izeIglzeIpStYryhzz0WdOPDxQnW++1HrE8P7v4mgw9uKuElTMKycIh V7iWxUgnTQXtYLdPYiZMH+NCbQTtBaKQjE3CCflQjvXPAF3rh6aOm0iocz2BpLl6 rtCGQe9ffsEr5LYX0PF+PJGmka2OFffWDfC835k+orCbgwYqm88= -----END CERTIFICATE-----Generated at Mon Sep 21 20:06:59 2026 by rpki-client