$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft File: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft (raw, json) Hash identifier: b4qpIIzsGXYl2E/iUALyxUSJ5Gbe5Jagcg6gCMcg4F8= Subject key identifier: 34:D2:A6:07:40:36:CB:BB:43:A3:6C:27:8D:A8:67:64:89:3F:A0:BB Authority key identifier: 02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 Certificate issuer: /CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Certificate serial: 7194E64872BCA2554DBD3FA337704130B5BDFBE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:33:41 +0000 Manifest this update: Wed 17 Jun 2026 00:28:41 +0000 Manifest next update: Thu 18 Jun 2026 01:13:41 +0000 Files and hashes: 1: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl (hash: K1mH4Xf+jrjrUpCOIJs7nZu/viOzsl7B+NAyY9t+aS8=) 2: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: GtQhQt5lC+popSxKBpEXClSBs/pxIHaZp5GFBcVq7Ds=) 3: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: N8zhnsK8z7VxJNfcfyiLUZPoMiisc/2RHnWBqlz/4MI=) 4: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: OZMHHHmslz7MYh9R9Ib0RjlOxsJyDimPwwAqaL88/ng=) 5: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: OyG3mFe6SrJhcLOwFyBCeuQpeyeUH09cXSgAgqZj+fA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:94:e6:48:72:bc:a2:55:4d:bd:3f:a3:37:70:41:30:b5:bd:fb:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Validity Not Before: Jun 17 00:28:41 2026 GMT Not After : Jun 18 01:13:41 2026 GMT Subject: CN=34D2A6074036CBBB43A36C278DA86764893FA0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:10:a8:8b:f5:1e:d5:62:91:78:b7:79:61:cf: 2b:16:85:39:e2:cb:45:97:7f:2c:f8:3b:88:61:51: 97:f6:01:e6:84:46:c6:6f:9c:76:a1:94:5e:01:fc: 08:92:9d:a6:4b:04:db:af:64:97:ed:5a:96:98:a2: 38:8f:b0:c7:38:07:a3:d3:58:6e:c5:0a:f7:73:7c: 5a:15:b7:3c:03:42:84:39:05:30:04:01:e4:3b:85: 18:4f:43:d4:80:56:24:d6:a3:01:89:a8:a9:40:be: 0c:35:42:46:34:1d:ba:24:b8:60:89:92:7a:cd:4f: c4:1f:2f:18:19:80:e5:74:45:b8:9a:ef:e0:57:b0: 6d:b2:5b:61:f5:ed:d0:17:e3:6a:08:c8:80:d3:97: 34:95:ed:d5:8b:b5:27:17:a4:17:63:75:c3:1f:52: 23:25:ed:93:f8:fa:98:b0:be:ef:4c:57:74:35:10: a2:c4:08:ff:ba:9b:26:c5:67:5e:f6:9d:10:27:27: f4:82:9c:6d:71:75:d8:fa:fe:b7:f9:7f:1c:72:58: a0:26:a5:6c:82:5f:4e:4d:84:88:07:22:a0:d2:f8: 79:1e:b9:df:cf:5e:c4:b4:96:a0:be:32:7d:c6:50: a9:80:4a:5b:0d:0c:cb:72:b5:3e:70:ee:03:5f:cb: 13:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D2:A6:07:40:36:CB:BB:43:A3:6C:27:8D:A8:67:64:89:3F:A0:BB X509v3 Authority Key Identifier: keyid:02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:08:21:f9:45:33:05:83:72:6b:f9:1e:f5:fb:a0:c2:3c:78: bb:8f:e9:72:13:0d:9e:f7:4c:74:53:8c:cc:e7:e9:28:eb:d4: 7f:8e:da:78:bc:79:86:f4:fe:45:1c:16:29:37:d8:b2:39:4c: 6b:46:37:ca:59:c8:01:08:47:04:ec:da:5a:0b:a0:bc:dd:d5: 56:d8:db:0c:8e:c7:71:4e:5d:46:ab:a5:44:79:1d:cc:74:84: 60:27:ca:46:fa:69:f5:7a:cf:1a:5f:c9:ea:3c:93:45:e8:4d: e5:fd:f2:fd:bf:2a:0c:4c:79:72:dd:0d:e9:05:3c:83:7c:46: 90:f4:20:c7:50:a5:e4:17:0a:11:83:2f:c5:00:10:3b:1f:03: a5:47:75:25:a7:fa:d4:1d:34:fe:12:33:56:c7:a9:05:38:f0: 5f:3f:de:47:20:b8:b8:b8:48:47:ff:5a:09:9a:04:79:c3:84: de:db:9b:36:61:15:ef:77:aa:26:da:16:dc:e4:41:7c:ba:d6: 85:cd:72:b1:f7:ca:16:9f:98:43:97:45:82:01:0c:ea:2c:8c: 52:08:d8:8d:f0:d9:61:d2:ae:36:83:ae:bc:d6:e2:5a:d3:3c: 45:6e:b9:f4:4d:c8:8c:be:6a:d9:77:e5:16:fe:de:63:79:60: e0:ab:e0:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZTmSHK8olVNvT+jN3BBMLW9++QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNBMDdD MjE4QTVBNjAeFw0yNjA2MTcwMDI4NDFaFw0yNjA2MTgwMTEzNDFaMDMxMTAvBgNV BAMTKDM0RDJBNjA3NDAzNkNCQkI0M0EzNkMyNzhEQTg2NzY0ODkzRkEwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvEKiL9R7VYpF4t3lhzysWhTni y0WXfyz4O4hhUZf2AeaERsZvnHahlF4B/AiSnaZLBNuvZJftWpaYojiPsMc4B6PT WG7FCvdzfFoVtzwDQoQ5BTAEAeQ7hRhPQ9SAViTWowGJqKlAvgw1QkY0HbokuGCJ knrNT8QfLxgZgOV0Rbia7+BXsG2yW2H17dAX42oIyIDTlzSV7dWLtScXpBdjdcMf UiMl7ZP4+piwvu9MV3Q1EKLECP+6mybFZ172nRAnJ/SCnG1xddj6/rf5fxxyWKAm pWyCX05NhIgHIqDS+Hkeud/PXsS0lqC+Mn3GUKmASlsNDMtytT5w7gNfyxOhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNNKmB0A2y7tDo2wnjahnZIk/oLswHwYDVR0j BBgwFoAUAos+olHDpZevVdTbPvQ6B8IYpaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM2YjJiZDctZDdmMS00ODE1LWE2MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1 MUMzQTU5N0FGNTVENERCM0VGNDNBMDdDMjE4QTVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCM0VBMjUxQzNBNTk3QUY1NUQ0REIzRUY0M0EwN0MyMThB NUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNB MDdDMjE4QTVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsIIflFMwWDcmv5HvX7oMI8eLuP6XITDZ73 THRTjMzn6Sjr1H+O2ni8eYb0/kUcFik32LI5TGtGN8pZyAEIRwTs2loLoLzd1VbY 2wyOx3FOXUarpUR5Hcx0hGAnykb6afV6zxpfyeo8k0XoTeX98v2/KgxMeXLdDekF PIN8RpD0IMdQpeQXChGDL8UAEDsfA6VHdSWn+tQdNP4SM1bHqQU48F8/3kcguLi4 SEf/WgmaBHnDhN7bmzZhFe93qibaFtzkQXy61oXNcrH3yhafmEOXRYIBDOosjFII 2I3w2WHSrjaDrrzW4lrTPEVuufRNyIy+atl35Rb+3mN5YOCr4I4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:08 2026 by rpki-client