$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft File: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft (raw, json) Hash identifier: fWykLfxThlQQrpwhutgrGm5vCiktznxC5Rftw2uBa50= Subject key identifier: F8:8D:FA:48:16:92:35:D0:5F:30:20:39:D6:2A:BC:D5:D5:18:5C:4A Authority key identifier: 02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 Certificate issuer: /CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Certificate serial: 4D026771C0DD695EB0A1FFC76FDC9887FA029DA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 05:37:59 +0000 Manifest this update: Wed 23 Sep 2026 05:32:59 +0000 Manifest next update: Thu 24 Sep 2026 07:39:59 +0000 Files and hashes: 1: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: OyG3mFe6SrJhcLOwFyBCeuQpeyeUH09cXSgAgqZj+fA=) 2: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl (hash: kQk6H3lc2SVMV38hT6V59ej7Bz2OnC+3JLYscC8l0vU=) 3: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: GtQhQt5lC+popSxKBpEXClSBs/pxIHaZp5GFBcVq7Ds=) 4: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: N8zhnsK8z7VxJNfcfyiLUZPoMiisc/2RHnWBqlz/4MI=) 5: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: OZMHHHmslz7MYh9R9Ib0RjlOxsJyDimPwwAqaL88/ng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:02:67:71:c0:dd:69:5e:b0:a1:ff:c7:6f:dc:98:87:fa:02:9d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Validity Not Before: Sep 23 05:32:59 2026 GMT Not After : Sep 24 07:39:59 2026 GMT Subject: CN=F88DFA48169235D05F302039D62ABCD5D5185C4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:54:dd:78:f3:1d:e3:54:12:c0:6e:4a:66: bb:96:79:1e:d9:c3:61:70:2f:28:79:c5:99:e4:88: f6:92:6d:2c:38:58:b6:36:6c:fe:c7:fb:83:b6:ae: cd:65:0c:40:55:da:e3:dd:2b:74:04:92:da:90:96: 59:02:9e:76:0e:39:f6:be:97:ee:15:4d:1d:ea:f4: ba:d1:52:17:90:e6:d1:7d:0f:7b:78:2d:29:62:7d: 9d:68:71:47:c6:74:62:ec:48:84:ba:a9:99:4b:86: 5c:3e:31:f7:50:5a:fb:7e:64:7b:90:f6:21:a8:29: 95:5a:c9:c3:07:a1:1c:13:66:18:9e:2b:5d:b7:8d: 2a:7a:a5:95:1a:1a:b2:b7:3c:bb:57:e9:fa:d3:84: ce:23:79:af:a5:ac:58:61:ab:14:a9:76:dc:52:b4: 49:2e:9a:af:71:f0:66:c0:8f:72:ae:83:61:68:7a: 90:4e:d0:9a:c4:af:06:7d:f7:ad:b7:34:73:28:96: 3c:d5:07:23:46:9d:45:ab:bb:58:1f:1d:b3:f9:05: 3b:c3:65:01:79:1c:7d:52:23:e3:41:39:a0:3b:dd: f8:58:f7:7e:c6:37:a6:e7:5b:29:dc:73:d6:da:ed: 66:07:b2:40:5c:ab:ed:66:93:d8:a6:0c:1e:5b:77: 00:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8D:FA:48:16:92:35:D0:5F:30:20:39:D6:2A:BC:D5:D5:18:5C:4A X509v3 Authority Key Identifier: keyid:02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:39:27:8a:6f:28:72:09:19:5d:ff:96:43:6a:92:63:f9:e2: b4:b9:d2:00:a3:4d:db:db:3f:e1:85:41:35:c9:dc:53:e3:c2: 1f:2b:78:74:a2:26:a5:4b:3b:f2:35:51:9b:6c:11:e2:de:7e: 1a:36:b9:14:c7:08:cb:14:33:be:52:eb:fb:fb:e4:be:2f:8f: 31:0a:59:26:55:ba:7d:15:91:65:f4:43:78:d5:a5:1e:ab:24: 78:81:9e:54:b4:4d:fb:69:a7:81:60:ad:14:9b:5b:97:2c:b2: 44:47:48:37:8d:14:df:c8:b4:ea:97:b2:93:5e:c1:4c:99:88: a5:9a:23:b8:a9:8b:93:ee:ed:f3:a2:89:d8:6e:dc:6c:a7:e8: 17:86:79:8c:b0:2d:0e:b9:af:db:11:8c:b1:47:77:49:39:b8: 48:22:51:c2:b8:69:ad:de:53:ca:e1:35:ec:65:fe:7a:8c:fd: 6d:23:0c:b0:2e:02:db:32:b8:ec:fe:af:e9:1a:94:73:16:54: 90:b3:58:f9:a0:8c:eb:e5:c1:0f:e1:68:e5:03:66:d4:c0:e9: cd:13:b5:c7:3d:88:8a:a9:de:42:c5:9f:4e:c4:c4:5e:7e:57: bf:65:94:25:65:7a:67:f2:e0:99:8d:6e:62:a5:bf:76:72:38: b9:f0:90:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQJnccDdaV6wof/Hb9yYh/oCnakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNBMDdD MjE4QTVBNjAeFw0yNjA5MjMwNTMyNTlaFw0yNjA5MjQwNzM5NTlaMDMxMTAvBgNV BAMTKEY4OERGQTQ4MTY5MjM1RDA1RjMwMjAzOUQ2MkFCQ0Q1RDUxODVDNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1z1TdePMd41QSwG5KZruWeR7Z w2FwLyh5xZnkiPaSbSw4WLY2bP7H+4O2rs1lDEBV2uPdK3QEktqQllkCnnYOOfa+ l+4VTR3q9LrRUheQ5tF9D3t4LSlifZ1ocUfGdGLsSIS6qZlLhlw+MfdQWvt+ZHuQ 9iGoKZVaycMHoRwTZhieK123jSp6pZUaGrK3PLtX6frThM4jea+lrFhhqxSpdtxS tEkumq9x8GbAj3Kug2FoepBO0JrErwZ99623NHMoljzVByNGnUWru1gfHbP5BTvD ZQF5HH1SI+NBOaA73fhY937GN6bnWyncc9ba7WYHskBcq+1mk9imDB5bdwCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+I36SBaSNdBfMCA51iq81dUYXEowHwYDVR0j BBgwFoAUAos+olHDpZevVdTbPvQ6B8IYpaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM2YjJiZDctZDdmMS00ODE1LWE2MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1 MUMzQTU5N0FGNTVENERCM0VGNDNBMDdDMjE4QTVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCM0VBMjUxQzNBNTk3QUY1NUQ0REIzRUY0M0EwN0MyMThB NUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNB MDdDMjE4QTVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADE5J4pvKHIJGV3/lkNqkmP54rS50gCjTdvb P+GFQTXJ3FPjwh8reHSiJqVLO/I1UZtsEeLefho2uRTHCMsUM75S6/v75L4vjzEK WSZVun0VkWX0Q3jVpR6rJHiBnlS0Tftpp4FgrRSbW5csskRHSDeNFN/ItOqXspNe wUyZiKWaI7ipi5Pu7fOiidhu3Gyn6BeGeYywLQ65r9sRjLFHd0k5uEgiUcK4aa3e U8rhNexl/nqM/W0jDLAuAtsyuOz+r+kalHMWVJCzWPmgjOvlwQ/haOUDZtTA6c0T tcc9iIqp3kLFn07ExF5+V79llCVlemfy4JmNbmKlv3ZyOLnwkAE= -----END CERTIFICATE-----Generated at Thu Sep 24 00:33:53 2026 by rpki-client