$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft File: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft (raw, json) Hash identifier: zczXjwzIsKSz0kYzAWLfhMmE/bgsncZoFSiSVjxAjUQ= Subject key identifier: 3C:CA:98:80:0C:2D:92:7F:3D:FD:FC:D5:2F:76:53:70:FE:7A:CE:35 Authority key identifier: 02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 Certificate issuer: /CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Certificate serial: 05856215E4F8B83FDCFDE576A49A9DCEC25D1CC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 10:02:56 +0000 Manifest this update: Wed 29 Jul 2026 09:57:56 +0000 Manifest next update: Thu 30 Jul 2026 13:12:56 +0000 Files and hashes: 1: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl (hash: yA+zVzJuiPkppXO1aaxAULMY6RJ5UJsmmfQBKIW7x/4=) 2: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: Xk7Qw7wFoGRI3rjKCFAl7ffLOSrFJh23uM7+wGfmYww=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 13:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:85:62:15:e4:f8:b8:3f:dc:fd:e5:76:a4:9a:9d:ce:c2:5d:1c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Validity Not Before: Jul 29 09:57:56 2026 GMT Not After : Jul 30 13:12:56 2026 GMT Subject: CN=3CCA98800C2D927F3DFDFCD52F765370FE7ACE35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e4:9b:53:48:34:6e:8f:b8:48:c8:4d:40:ac: 71:71:4a:40:08:43:c6:1b:a0:17:10:f8:d3:a2:fa: f2:c5:a8:db:8b:bd:e1:46:48:e1:50:31:8a:5b:51: e7:85:36:47:b4:52:63:8b:73:6f:80:25:67:ab:a5: ca:7e:f6:39:be:1c:71:5a:1a:76:0e:83:53:44:e2: bf:47:f4:e1:85:83:ba:5d:85:ff:47:a9:13:78:36: 3f:53:ff:a6:29:45:63:3c:60:d8:dd:aa:87:6b:56: 59:c1:80:4a:83:dc:37:a1:89:15:01:c1:80:65:9e: 73:2c:14:ae:bf:58:50:5e:d6:15:6d:07:39:27:05: a2:14:08:e4:df:6f:7b:d3:61:14:85:05:ae:75:f6: c8:65:c2:3b:1f:0d:9f:3a:b4:62:26:0a:bc:00:ac: 7f:13:16:1c:c3:2f:5c:5a:f6:90:6c:f6:80:c9:97: f1:f0:86:0b:91:b0:50:29:24:3d:21:b2:0d:9b:d5: 48:c1:ab:e9:fe:62:a5:1e:69:92:16:67:a7:9a:fc: b5:3d:31:c9:d1:aa:ae:65:59:37:b6:9f:cd:47:69: 86:82:28:4b:30:2c:72:fa:80:3b:c8:64:db:4d:64: 44:ad:d4:ad:c9:23:75:29:45:5e:c3:54:56:cf:6d: fc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CA:98:80:0C:2D:92:7F:3D:FD:FC:D5:2F:76:53:70:FE:7A:CE:35 X509v3 Authority Key Identifier: keyid:02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:68:4c:0d:d8:1e:4b:dd:4e:4e:28:ff:16:0d:97:a3:3b:f5: 0b:1f:f5:bc:0e:98:76:13:cc:9f:be:bb:a6:b4:61:63:90:15: e5:d0:bf:02:e9:0e:79:a5:b7:76:fe:f5:c0:b4:b4:5a:14:fc: 65:9f:f2:b1:a2:fd:20:5c:de:84:fe:21:43:a6:95:80:e6:26: 06:04:e3:7a:9a:c9:3f:15:c0:6f:e0:04:d8:0d:7a:95:a3:ad: 68:b4:e0:bf:14:14:45:8b:18:57:b0:c9:c7:e0:c2:3f:f8:c1: 18:69:cf:28:9b:08:0c:26:44:3d:0a:1a:de:a9:b5:47:45:54: 09:63:de:50:07:fd:4b:a9:53:b6:31:49:87:15:2f:20:2d:82: 02:30:78:bd:7e:b0:45:03:bc:3e:95:00:26:ac:15:b7:e5:3f: ce:91:d5:f1:1b:4b:05:4e:95:f5:8c:71:db:1c:37:ff:a4:66: 26:72:88:d3:d1:4c:3b:cd:cb:a7:0c:3b:67:1b:86:68:8c:a9: 5c:8e:f3:64:56:ef:0f:0b:29:33:e5:d0:b9:aa:62:6a:d2:20: 5a:c8:60:9c:36:b6:ed:e2:bd:3f:f1:0d:06:47:85:c6:dc:fa: 78:6a:06:66:5f:65:2c:d7:f5:92:50:bb:f7:12:e7:1f:83:a7: 9c:18:2a:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBYViFeT4uD/c/eV2pJqdzsJdHMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0QjczQzY4 RDBBMENCMzAeFw0yNjA3MjkwOTU3NTZaFw0yNjA3MzAxMzEyNTZaMDMxMTAvBgNV BAMTKDNDQ0E5ODgwMEMyRDkyN0YzREZERkNENTJGNzY1MzcwRkU3QUNFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe5JtTSDRuj7hIyE1ArHFxSkAI Q8YboBcQ+NOi+vLFqNuLveFGSOFQMYpbUeeFNke0UmOLc2+AJWerpcp+9jm+HHFa GnYOg1NE4r9H9OGFg7pdhf9HqRN4Nj9T/6YpRWM8YNjdqodrVlnBgEqD3DehiRUB wYBlnnMsFK6/WFBe1hVtBzknBaIUCOTfb3vTYRSFBa519shlwjsfDZ86tGImCrwA rH8TFhzDL1xa9pBs9oDJl/HwhguRsFApJD0hsg2b1UjBq+n+YqUeaZIWZ6ea/LU9 McnRqq5lWTe2n81HaYaCKEswLHL6gDvIZNtNZESt1K3JI3UpRV7DVFbPbfwtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPMqYgAwtkn89/fzVL3ZTcP56zjUwHwYDVR0j BBgwFoAUAgYo2xbf3fRCkjsJ0Etzxo0KDLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmM5MDk3MzctMTU2NC00NmNhLTkwMDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIx NkRGRERGNDQyOTIzQjA5RDA0QjczQzY4RDBBMENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjA2MjhEQjE2REZEREY0NDI5MjNCMDlEMDRCNzNDNjhEMEEw Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0Qjcz QzY4RDBBMENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABoTA3YHkvdTk4o/xYNl6M79Qsf9bwOmHYT zJ++u6a0YWOQFeXQvwLpDnmlt3b+9cC0tFoU/GWf8rGi/SBc3oT+IUOmlYDmJgYE 43qayT8VwG/gBNgNepWjrWi04L8UFEWLGFewycfgwj/4wRhpzyibCAwmRD0KGt6p tUdFVAlj3lAH/UupU7YxSYcVLyAtggIweL1+sEUDvD6VACasFbflP86R1fEbSwVO lfWMcdscN/+kZiZyiNPRTDvNy6cMO2cbhmiMqVyO82RW7w8LKTPl0LmqYmrSIFrI YJw2tu3ivT/xDQZHhcbc+nhqBmZfZSzX9ZJQu/cS5x+Dp5wYKg8= -----END CERTIFICATE-----Generated at Wed Jul 29 12:03:09 2026 by rpki-client