$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft File: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft (raw, json) Hash identifier: pXRFspE3c/Qc5SWzPCm2HJ6NnIR5gWoBzhNHdK+VF3s= Subject key identifier: BF:75:AE:8B:78:74:98:9F:3F:4A:29:B6:32:DE:2E:B4:42:27:C6:60 Authority key identifier: 28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 Certificate issuer: /CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Certificate serial: 233464831F89D9081936048D180ED196F87AA35A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft Manifest number: BF Signing time: Mon 21 Sep 2026 10:49:50 +0000 Manifest this update: Mon 21 Sep 2026 10:44:50 +0000 Manifest next update: Tue 22 Sep 2026 13:54:50 +0000 Files and hashes: 1: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl (hash: AGgnmUiVcCaWRXEN9B6PJ2/gapPs9auDfxdiGqt1y7k=) 2: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: IYkMg6+qZ/xVvXBkVi5WzC87htsBExZ9GFp2XLTOPIo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:34:64:83:1f:89:d9:08:19:36:04:8d:18:0e:d1:96:f8:7a:a3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Validity Not Before: Sep 21 10:44:50 2026 GMT Not After : Sep 22 13:54:50 2026 GMT Subject: CN=BF75AE8B7874989F3F4A29B632DE2EB44227C660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9d:89:c2:ad:a3:87:96:29:64:f9:0d:50:53: bf:a6:eb:1f:da:44:c8:4c:44:db:81:90:eb:b1:b5: f2:5c:70:62:7a:00:0d:95:8d:9c:08:44:01:03:11: ec:69:df:51:42:8d:da:f2:58:76:6c:7e:26:74:f0: 89:b6:53:0b:48:0d:6d:4c:e2:3c:9c:a7:13:91:ed: 05:12:86:99:ca:a1:96:99:25:59:18:c9:30:4d:7f: ab:54:ab:ab:9e:52:24:40:0b:ae:87:1a:a0:4b:88: a0:e0:15:00:26:76:bd:c1:60:c7:31:2a:dc:77:f0: 62:39:1c:ce:1e:7f:9a:ec:71:26:68:d3:3c:21:0b: b6:6d:e7:40:41:86:12:ed:9c:a0:62:6e:fc:d7:a4: f4:96:ab:e2:ab:c2:90:10:47:00:47:12:49:0f:46: e9:49:df:da:1f:f6:f5:14:52:a4:bc:ff:53:4e:cf: bd:97:eb:7c:2f:cd:33:25:f5:e2:e8:cb:8a:ed:07: cd:19:49:d8:ed:18:38:d9:99:35:27:97:83:3d:36: d4:dd:04:d5:82:31:94:9d:eb:85:24:58:8b:50:34: 51:3a:79:0f:b1:80:96:22:d3:d4:19:7a:eb:a7:17: 16:dd:e5:39:31:8e:93:35:b6:8a:13:ae:23:bf:d7: 29:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:75:AE:8B:78:74:98:9F:3F:4A:29:B6:32:DE:2E:B4:42:27:C6:60 X509v3 Authority Key Identifier: keyid:28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f9:a0:00:07:49:f5:34:3f:a1:58:db:93:b6:3b:56:01:33: 00:d7:16:05:fa:3d:01:b8:dd:7b:14:64:39:f9:b5:fd:b6:8d: 00:22:d3:26:84:9b:3a:23:80:83:e5:28:28:e7:30:6b:4c:10: c1:5d:de:08:54:85:af:0a:f1:a8:d6:1a:5a:44:63:ca:e9:ab: d4:c2:b8:1c:7a:75:bb:6d:3b:23:f4:76:dd:18:d3:3b:fa:9c: 7f:6f:a4:0d:fe:99:a9:f3:89:e1:6e:46:7b:72:53:5a:ac:d4: 3c:90:13:37:fe:26:1a:f5:be:7f:f6:b1:78:1d:f2:2e:33:01: 9f:4c:1f:eb:42:50:6a:74:e7:77:29:c2:33:13:cd:21:f7:db: 84:1c:70:37:95:7b:f8:a8:df:a1:90:9d:8c:94:d4:08:2b:7d: 5f:48:2d:ff:df:4d:6f:ee:32:96:5d:b1:a6:c5:8b:c2:4d:62: d2:0e:48:41:1b:b9:63:81:ee:04:dc:31:17:9b:91:98:47:b5: 37:a7:4d:fd:71:91:1a:9b:fa:2c:5a:fd:91:61:78:17:61:e5: 09:93:e3:d5:d2:11:94:16:93:57:70:bd:e9:c7:5c:b5:74:62: 6a:2c:dd:d8:ba:62:26:b9:0f:c5:c0:dd:db:36:b0:39:9f:34: c5:6f:02:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIzRkgx+J2QgZNgSNGA7Rlvh6o1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBE M0FDRUJEODAeFw0yNjA5MjExMDQ0NTBaFw0yNjA5MjIxMzU0NTBaMDMxMTAvBgNV BAMTKEJGNzVBRThCNzg3NDk4OUYzRjRBMjlCNjMyREUyRUI0NDIyN0M2NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnYnCraOHlilk+Q1QU7+m6x/a RMhMRNuBkOuxtfJccGJ6AA2VjZwIRAEDEexp31FCjdryWHZsfiZ08Im2UwtIDW1M 4jycpxOR7QUShpnKoZaZJVkYyTBNf6tUq6ueUiRAC66HGqBLiKDgFQAmdr3BYMcx Ktx38GI5HM4ef5rscSZo0zwhC7Zt50BBhhLtnKBibvzXpPSWq+KrwpAQRwBHEkkP RulJ39of9vUUUqS8/1NOz72X63wvzTMl9eLoy4rtB80ZSdjtGDjZmTUnl4M9NtTd BNWCMZSd64UkWItQNFE6eQ+xgJYi09QZeuunFxbd5TkxjpM1tooTriO/1ynjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv3Wui3h0mJ8/Sim2Mt4utEInxmAwHwYDVR0j BBgwFoAUKPxHOwN5kOGxKyKpuvsZANOs69gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk4OGMwZjItMjgwMC00OGRhLWE4M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0Iw Mzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBEM0FDRUJEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOEZDNDczQjAzNzk5MEUxQjEyQjIyQTlCQUZCMTkwMEQzQUNF QkQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5 MDBEM0FDRUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD75oAAHSfU0P6FY25O2O1YBMwDXFgX6PQG4 3XsUZDn5tf22jQAi0yaEmzojgIPlKCjnMGtMEMFd3ghUha8K8ajWGlpEY8rpq9TC uBx6dbttOyP0dt0Y0zv6nH9vpA3+manzieFuRntyU1qs1DyQEzf+Jhr1vn/2sXgd 8i4zAZ9MH+tCUGp053cpwjMTzSH324QccDeVe/io36GQnYyU1AgrfV9ILf/fTW/u MpZdsabFi8JNYtIOSEEbuWOB7gTcMRebkZhHtTenTf1xkRqb+ixa/ZFheBdh5QmT 49XSEZQWk1dwvenHXLV0Ymos3di6Yia5D8XA3ds2sDmfNMVvAnA= -----END CERTIFICATE-----Generated at Tue Sep 22 01:12:10 2026 by rpki-client