$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft File: 28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft (raw, json) Hash identifier: XvnzpniIdsEwuH016/zfl8B26BHlh/8uTA5qrmqzyAE= Subject key identifier: E9:9B:DF:FC:AC:B7:E2:DA:26:80:9D:1C:08:51:C9:86:1A:35:22:C0 Authority key identifier: 28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA Certificate issuer: /CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Certificate serial: 22682C3436CB973816C01E23D7271A420E101C7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 14:36:54 +0000 Manifest this update: Tue 16 Jun 2026 14:31:54 +0000 Manifest next update: Wed 17 Jun 2026 18:24:54 +0000 Files and hashes: 1: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: SdAYaKbLY7S/5p5HGrJ4jkCgcURLrEIiXWTRP7lNFqs=) 2: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: A6nVc+CU4v4uaObx3pcTTBPbO/2k+l19C2GraBAa5qQ=) 3: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: IW57GOIpsV3XMacGHlka+0CSQgtIywURoK2nG7nWa7w=) 4: 28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl (hash: WLHn3QlUoE7vAx91GxQ4aFfJcPS0RjQPqgVCIgmffSM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:68:2c:34:36:cb:97:38:16:c0:1e:23:d7:27:1a:42:0e:10:1c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Validity Not Before: Jun 16 14:31:54 2026 GMT Not After : Jun 17 18:24:54 2026 GMT Subject: CN=E99BDFFCACB7E2DA26809D1C0851C9861A3522C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fb:b3:01:62:78:83:3c:05:9c:66:4b:4d:67: 59:be:22:8f:01:1b:17:53:c2:ae:87:cc:89:04:1c: ab:18:eb:9d:d0:b1:44:18:b6:d5:f1:9f:9c:5c:9f: 90:3b:fe:4a:02:d3:b4:19:74:cd:c8:a7:a5:67:9f: 58:c6:1e:a8:d4:3a:ce:c9:18:85:cc:af:20:1c:c0: 80:1f:d0:f3:58:28:99:14:5e:04:be:69:8b:bf:92: ca:45:70:e6:d8:6f:47:42:a0:8a:27:cc:29:c2:88: 73:21:94:0c:1f:f3:64:9a:47:cc:43:39:3f:85:b4: 73:6b:f3:37:cf:67:1f:7f:e6:22:c3:0b:eb:c8:88: 61:bc:be:42:57:3d:44:50:48:e2:dc:2b:74:cf:ba: 6c:f0:af:40:3b:64:d4:fa:74:72:af:81:b3:c5:a0: 34:25:15:23:71:aa:fd:5c:e5:cd:92:c5:2b:85:e1: 3f:ef:8b:4c:8a:db:ee:5a:d8:14:f5:b0:93:74:46: f9:ec:92:e9:39:ed:56:33:83:66:51:65:57:74:1d: a9:33:5c:7d:b0:d9:f1:23:c8:30:d1:26:c6:5e:bd: 5b:81:32:6e:d3:69:74:bc:c3:f8:da:8e:0d:7e:3e: b0:a5:2c:e5:75:de:3b:02:3d:34:29:2f:af:8c:b2: 80:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9B:DF:FC:AC:B7:E2:DA:26:80:9D:1C:08:51:C9:86:1A:35:22:C0 X509v3 Authority Key Identifier: keyid:28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c1:27:17:08:9d:78:5e:c9:0e:bc:ea:14:5e:21:98:df:b4: 4a:8b:75:5a:2e:67:88:27:c5:04:56:01:6d:70:ac:c7:ee:3b: 0e:f9:3f:f2:a3:6e:8a:0b:29:04:71:3a:24:02:e1:5d:46:ae: 9c:f7:28:9e:e0:04:3a:e2:56:93:51:d9:90:9e:37:03:16:c7: 77:b9:8c:27:02:d4:47:c6:df:8b:10:66:62:18:5b:b5:0a:b9: df:c9:11:59:ec:92:cb:f1:68:07:70:38:41:89:cd:5a:18:73: 6e:ef:7f:97:50:60:2c:4e:57:c5:6c:04:4d:53:03:00:d8:c1: 27:55:53:cd:57:3b:30:4c:fd:ff:59:23:ae:db:b6:16:d8:ef: b8:1d:c5:0a:a1:1a:0b:75:02:8b:34:ac:f8:8d:bc:3c:53:c2: d4:7f:03:46:ca:23:be:1b:b9:91:25:83:f1:9b:22:6c:2a:b1: cf:8e:16:26:89:08:48:80:b8:14:71:8d:95:74:50:68:72:6a: e7:13:4d:27:4f:66:aa:e0:82:b7:6d:cd:7e:84:8c:4b:1c:18: 3f:ed:ce:59:89:fc:f7:de:97:0d:0f:35:7c:e8:b6:a3:93:9a: 2e:f9:2d:be:8f:4c:26:bb:3e:75:af:32:6c:df:e2:4b:61:a3: ac:92:88:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImgsNDbLlzgWwB4j1ycaQg4QHHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg4ODBFNkEzNUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2 MTlGRTBCQTAeFw0yNjA2MTYxNDMxNTRaFw0yNjA2MTcxODI0NTRaMDMxMTAvBgNV BAMTKEU5OUJERkZDQUNCN0UyREEyNjgwOUQxQzA4NTFDOTg2MUEzNTIyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+7MBYniDPAWcZktNZ1m+Io8B GxdTwq6HzIkEHKsY653QsUQYttXxn5xcn5A7/koC07QZdM3Ip6Vnn1jGHqjUOs7J GIXMryAcwIAf0PNYKJkUXgS+aYu/kspFcObYb0dCoIonzCnCiHMhlAwf82SaR8xD OT+FtHNr8zfPZx9/5iLDC+vIiGG8vkJXPURQSOLcK3TPumzwr0A7ZNT6dHKvgbPF oDQlFSNxqv1c5c2SxSuF4T/vi0yK2+5a2BT1sJN0Rvnskuk57VYzg2ZRZVd0Hakz XH2w2fEjyDDRJsZevVuBMm7TaXS8w/jajg1+PrClLOV13jsCPTQpL6+MsoBLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Zvf/Ky34tomgJ0cCFHJhho1IsAwHwYDVR0j BBgwFoAUKIgOajW2yK7LwIMo4ML2OWGf4LowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4ODQ0MmItYzQ4ZS00YmEwLThhZDctNThlMTI2M2M2ZGM3LzAvMjg4ODBFNkEz NUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2MTlGRTBCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODg4MEU2QTM1QjZDOEFFQ0JDMDgzMjhFMEMyRjYzOTYxOUZF MEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvMjg4ODBFNkEzNUI2QzhBRUNCQzA4MzI4RTBDMkY2 Mzk2MTlGRTBCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3BJxcInXheyQ686hReIZjftEqLdVouZ4gn xQRWAW1wrMfuOw75P/KjbooLKQRxOiQC4V1Grpz3KJ7gBDriVpNR2ZCeNwMWx3e5 jCcC1EfG34sQZmIYW7UKud/JEVnsksvxaAdwOEGJzVoYc27vf5dQYCxOV8VsBE1T AwDYwSdVU81XOzBM/f9ZI67bthbY77gdxQqhGgt1Aos0rPiNvDxTwtR/A0bKI74b uZElg/GbImwqsc+OFiaJCEiAuBRxjZV0UGhyaucTTSdPZqrggrdtzX6EjEscGD/t zlmJ/Pfelw0PNXzotqOTmi75Lb6PTCa7PnWvMmzf4ktho6ySiLo= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:30 2026 by rpki-client