$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft File: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft (raw, json) Hash identifier: juASxNjLV/JSJWQDT0b9ui7n/nid2ZCA00mJdTI8RlM= Subject key identifier: BD:32:5A:E3:52:60:1B:7E:E8:DA:45:EE:59:B6:BD:99:4A:D2:DD:0C Authority key identifier: 02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 Certificate issuer: /CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Certificate serial: 44E8D4F604B5A47B463AEA5B6F528D18C2AB190E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 14:47:27 +0000 Manifest this update: Sat 13 Jun 2026 14:42:27 +0000 Manifest next update: Sun 14 Jun 2026 16:08:27 +0000 Files and hashes: 1: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl (hash: wZDI3H0KbmbNHtCin9woL6JOMCwy8d5qYblBh8WZ6eQ=) 2: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: Xk7Qw7wFoGRI3rjKCFAl7ffLOSrFJh23uM7+wGfmYww=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e8:d4:f6:04:b5:a4:7b:46:3a:ea:5b:6f:52:8d:18:c2:ab:19:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Validity Not Before: Jun 13 14:42:27 2026 GMT Not After : Jun 14 16:08:27 2026 GMT Subject: CN=BD325AE352601B7EE8DA45EE59B6BD994AD2DD0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:74:82:b5:bf:c9:c5:c5:f8:08:46:4f:a7: 30:2f:1a:09:79:ae:54:97:61:3d:dd:49:46:4c:5b: 64:3a:2f:33:3a:e9:19:0c:be:fc:89:f9:ed:8a:35: 48:c6:72:f6:83:6e:54:02:b2:8b:b1:8c:3d:ee:5a: 2c:39:e5:57:5b:a5:1e:dd:78:12:c8:3e:cc:e8:02: 3d:c9:9b:d2:ae:a5:08:9f:50:0d:fe:81:04:58:c5: aa:63:01:30:80:57:d4:3b:05:e0:82:1c:aa:a2:11: ea:71:f4:e7:bb:a9:16:00:75:91:a0:87:bb:20:e1: f0:d2:57:17:6a:a0:c8:70:17:a2:5b:53:32:bf:46: 3a:8e:00:98:67:bb:13:8d:e7:d0:84:55:76:d2:33: 79:96:cf:5f:21:9c:32:9c:08:97:c2:8e:2e:ca:89: d2:cb:79:44:c0:36:f8:5b:94:9e:eb:1a:f4:37:fe: 5e:fb:79:9b:a2:d4:a7:74:9d:c9:1a:26:eb:c2:1f: 24:ee:e9:5d:3f:ad:44:d7:52:e0:ea:e3:6d:b0:1a: 47:95:ef:11:6a:f4:6b:dc:c2:89:30:68:c3:76:5c: 90:fc:f4:89:d6:6d:96:2a:c4:54:df:e9:57:4e:d7: 14:62:ad:64:62:70:75:e5:60:6a:d3:2d:31:1c:a9: 86:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:32:5A:E3:52:60:1B:7E:E8:DA:45:EE:59:B6:BD:99:4A:D2:DD:0C X509v3 Authority Key Identifier: keyid:02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:74:2b:67:fa:60:ec:a9:3d:26:8f:fb:a7:e8:b6:5d:ae:84: 17:f9:0a:a9:36:58:51:80:af:88:8e:f8:b9:10:9f:05:4b:aa: b3:21:4d:4c:94:c3:44:33:2e:7c:32:a1:50:ad:c6:fe:5b:8e: 7a:d5:b9:45:de:fe:15:af:e9:22:40:74:5c:92:09:ad:0a:72: 7a:79:19:73:7d:c6:7d:0d:a0:c9:22:35:94:97:13:e1:51:5e: 2e:f7:7d:c8:d0:2a:2b:43:9d:5f:77:57:9f:e8:b2:99:19:2e: 45:89:65:d0:2e:6c:46:99:f6:22:e5:c9:96:a5:fb:a9:57:c8: bf:be:4f:b6:37:30:15:32:1e:b4:41:50:52:8b:e2:20:0d:ee: e9:d8:37:dc:e1:e5:c5:fe:99:84:ca:bb:05:e0:79:28:19:86: b2:81:1b:90:47:a6:1c:47:78:62:b6:de:6e:ac:3d:c2:04:21: f8:b7:a4:a2:ab:7f:12:48:ea:71:e7:31:d5:80:57:2c:b4:80: 1a:89:6d:47:e7:c2:60:fb:28:c6:d9:6f:86:1d:f4:73:2d:ee: 71:3c:af:83:4d:92:55:ea:9e:f2:d9:7b:e2:87:e3:47:bf:0c: 69:0e:3e:e8:7b:70:e6:ec:c1:f8:8a:f9:06:21:9d:89:70:2e: c3:8c:be:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROjU9gS1pHtGOupbb1KNGMKrGQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0QjczQzY4 RDBBMENCMzAeFw0yNjA2MTMxNDQyMjdaFw0yNjA2MTQxNjA4MjdaMDMxMTAvBgNV BAMTKEJEMzI1QUUzNTI2MDFCN0VFOERBNDVFRTU5QjZCRDk5NEFEMkREMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXnSCtb/JxcX4CEZPpzAvGgl5 rlSXYT3dSUZMW2Q6LzM66RkMvvyJ+e2KNUjGcvaDblQCsouxjD3uWiw55VdbpR7d eBLIPszoAj3Jm9KupQifUA3+gQRYxapjATCAV9Q7BeCCHKqiEepx9Oe7qRYAdZGg h7sg4fDSVxdqoMhwF6JbUzK/RjqOAJhnuxON59CEVXbSM3mWz18hnDKcCJfCji7K idLLeUTANvhblJ7rGvQ3/l77eZui1Kd0nckaJuvCHyTu6V0/rUTXUuDq422wGkeV 7xFq9GvcwokwaMN2XJD89InWbZYqxFTf6VdO1xRirWRicHXlYGrTLTEcqYbTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvTJa41JgG37o2kXuWba9mUrS3QwwHwYDVR0j BBgwFoAUAgYo2xbf3fRCkjsJ0Etzxo0KDLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmM5MDk3MzctMTU2NC00NmNhLTkwMDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIx NkRGRERGNDQyOTIzQjA5RDA0QjczQzY4RDBBMENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjA2MjhEQjE2REZEREY0NDI5MjNCMDlEMDRCNzNDNjhEMEEw Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0Qjcz QzY4RDBBMENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZ0K2f6YOypPSaP+6fotl2uhBf5Cqk2WFGA r4iO+LkQnwVLqrMhTUyUw0QzLnwyoVCtxv5bjnrVuUXe/hWv6SJAdFySCa0Kcnp5 GXN9xn0NoMkiNZSXE+FRXi73fcjQKitDnV93V5/ospkZLkWJZdAubEaZ9iLlyZal +6lXyL++T7Y3MBUyHrRBUFKL4iAN7unYN9zh5cX+mYTKuwXgeSgZhrKBG5BHphxH eGK23m6sPcIEIfi3pKKrfxJI6nHnMdWAVyy0gBqJbUfnwmD7KMbZb4Yd9HMt7nE8 r4NNklXqnvLZe+KH40e/DGkOPuh7cObswfiK+QYhnYlwLsOMvt0= -----END CERTIFICATE-----Generated at Sat Jun 13 21:19:55 2026 by rpki-client