$ rpki-client -vvf rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft File: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft (raw, json) Hash identifier: i3JKcOutkaUFrNVB3USU3RuqHvSFgKFQS37MoRQYywo= Subject key identifier: DA:8C:40:EA:10:FF:CF:32:E5:C2:9C:38:59:3D:84:19:66:74:2C:5E Authority key identifier: 28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 Certificate issuer: /CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Certificate serial: 2293AD1CC73661BD73F1ECD479A04604880375C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:22:33 +0000 Manifest this update: Tue 16 Jun 2026 19:17:33 +0000 Manifest next update: Wed 17 Jun 2026 19:30:33 +0000 Files and hashes: 1: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl (hash: kEr9hFsRBHDdSWspX/NaoFWniAZOh5vEQN1vLeQRhpQ=) 2: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: IYkMg6+qZ/xVvXBkVi5WzC87htsBExZ9GFp2XLTOPIo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:93:ad:1c:c7:36:61:bd:73:f1:ec:d4:79:a0:46:04:88:03:75:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Validity Not Before: Jun 16 19:17:33 2026 GMT Not After : Jun 17 19:30:33 2026 GMT Subject: CN=DA8C40EA10FFCF32E5C29C38593D841966742C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:92:f3:c5:11:ea:14:b2:0f:0f:73:c1:4a: 61:68:00:dd:be:9f:c4:0a:81:75:87:62:0d:de:23: a1:b5:c5:b7:4b:ef:b2:47:6d:34:8c:15:e3:b7:ac: cd:40:5c:bf:7b:87:59:15:f3:5b:ff:dc:12:4a:81: 88:92:91:ea:f3:1c:ab:e0:fb:6d:5c:01:04:56:1b: 79:54:6e:2d:0a:6c:cf:aa:e0:72:06:47:69:99:26: 60:e2:8a:04:cf:8f:fc:f2:99:cc:8c:a9:10:94:14: 1e:4a:9a:34:73:12:3e:34:5a:60:e1:68:49:a3:e0: 4e:02:9b:9b:20:54:01:ba:3e:37:0d:20:97:cb:b3: 0d:cc:49:86:14:a2:59:90:d6:a3:c7:05:02:52:2e: 76:ea:66:8e:23:a5:cf:c3:58:70:7e:ac:c0:b1:1e: 58:c3:b5:5c:29:e3:46:cd:b2:ee:89:d2:09:b1:da: 85:01:78:0b:18:44:94:e1:87:10:c9:b1:e0:4b:76: 92:7e:3d:dc:7e:5d:a2:78:25:dd:10:6b:2c:bd:b1: 5e:87:eb:28:ff:0b:5a:49:cc:ed:98:11:ad:5d:8f: 69:4e:43:07:e1:e1:62:f7:57:3b:0e:e8:ef:c8:90: de:af:57:57:de:ed:cd:8b:b2:6a:59:f7:74:de:ba: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8C:40:EA:10:FF:CF:32:E5:C2:9C:38:59:3D:84:19:66:74:2C:5E X509v3 Authority Key Identifier: keyid:28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:20:40:c6:45:08:22:47:39:26:90:48:50:a6:9b:bf:3b:d4: b5:79:c2:15:18:5b:42:a9:fc:71:2c:7a:14:6f:f8:3e:df:56: 89:e0:18:52:2c:03:95:dd:46:6a:a6:1c:bd:e1:b3:6f:23:e6: 48:fd:6e:5e:84:3d:c3:31:b0:45:91:3d:93:1a:79:db:44:31: 8e:38:86:ee:8c:aa:8f:c3:91:ee:3b:08:dc:bf:d4:8b:36:60: eb:17:9f:aa:e1:db:b0:44:ff:7a:05:6d:9d:c1:93:4c:ca:cd: 8a:53:e1:ba:41:3c:a1:3f:2a:20:11:08:ea:b5:74:a4:4b:9c: cd:c1:65:61:e0:e0:de:54:cf:e4:29:e0:65:69:4e:f5:ea:e6: f0:be:d3:4e:8d:f8:ef:d2:58:60:a1:37:f9:a3:8a:b2:0b:e8: 7a:1a:04:06:1c:73:78:3c:a2:f2:f1:bb:b9:92:3f:43:02:89: 0f:67:95:95:31:7c:a4:b4:45:7e:2f:ea:ef:ee:38:84:fc:82: 6f:03:27:b4:c8:4e:a6:6c:12:2f:9f:b3:f1:9b:df:6c:b3:3b: 3f:f1:56:9e:69:bb:2b:95:0f:8b:67:1f:ac:93:e0:d7:43:86: 9d:e4:9e:ac:8b:37:11:1a:8d:5b:cd:d5:14:28:88:0f:9d:8d: a5:4e:be:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIpOtHMc2Yb1z8ezUeaBGBIgDdckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBE M0FDRUJEODAeFw0yNjA2MTYxOTE3MzNaFw0yNjA2MTcxOTMwMzNaMDMxMTAvBgNV BAMTKERBOEM0MEVBMTBGRkNGMzJFNUMyOUMzODU5M0Q4NDE5NjY3NDJDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5R5LzxRHqFLIPD3PBSmFoAN2+ n8QKgXWHYg3eI6G1xbdL77JHbTSMFeO3rM1AXL97h1kV81v/3BJKgYiSkerzHKvg +21cAQRWG3lUbi0KbM+q4HIGR2mZJmDiigTPj/zymcyMqRCUFB5KmjRzEj40WmDh aEmj4E4Cm5sgVAG6PjcNIJfLsw3MSYYUolmQ1qPHBQJSLnbqZo4jpc/DWHB+rMCx HljDtVwp40bNsu6J0gmx2oUBeAsYRJThhxDJseBLdpJ+Pdx+XaJ4Jd0Qayy9sV6H 6yj/C1pJzO2YEa1dj2lOQwfh4WL3VzsO6O/IkN6vV1fe7c2LsmpZ93TeugHpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2oxA6hD/zzLlwpw4WT2EGWZ0LF4wHwYDVR0j BBgwFoAUKPxHOwN5kOGxKyKpuvsZANOs69gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk4OGMwZjItMjgwMC00OGRhLWE4M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0Iw Mzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBEM0FDRUJEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOEZDNDczQjAzNzk5MEUxQjEyQjIyQTlCQUZCMTkwMEQzQUNF QkQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5 MDBEM0FDRUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMgQMZFCCJHOSaQSFCmm7871LV5whUYW0Kp /HEsehRv+D7fVongGFIsA5XdRmqmHL3hs28j5kj9bl6EPcMxsEWRPZMaedtEMY44 hu6Mqo/Dke47CNy/1Is2YOsXn6rh27BE/3oFbZ3Bk0zKzYpT4bpBPKE/KiARCOq1 dKRLnM3BZWHg4N5Uz+Qp4GVpTvXq5vC+006N+O/SWGChN/mjirIL6HoaBAYcc3g8 ovLxu7mSP0MCiQ9nlZUxfKS0RX4v6u/uOIT8gm8DJ7TITqZsEi+fs/Gb32yzOz/x Vp5puyuVD4tnH6yT4NdDhp3knqyLNxEajVvN1RQoiA+djaVOvtQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:24 2026 by rpki-client