$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft File: 3028A8BB1ECF7550222580449D4FA78158DBF42A.mft (raw, json) Hash identifier: DkZXoo5Xpl838bEYTBRxQrTclemvgYqg1QzX0aHSJUQ= Subject key identifier: 7E:83:04:91:9E:CE:CD:97:5C:3B:29:01:C8:02:37:63:86:6F:51:7C Authority key identifier: 30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A Certificate issuer: /CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Certificate serial: 4575EFEEAF19CE88B98FE74B86819D0A7242D5D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:17:57 +0000 Manifest this update: Mon 21 Sep 2026 13:12:57 +0000 Manifest next update: Tue 22 Sep 2026 15:00:57 +0000 Files and hashes: 1: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: EAY48hYNH/6TUE1xmrb2C7cSV9ZpqN9x7POku5Es1R0=) 2: 3028A8BB1ECF7550222580449D4FA78158DBF42A.crl (hash: CZDlcYa0Nyn8A5jyslUIgm9D+FjwvBhugsRCth8QBiQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:75:ef:ee:af:19:ce:88:b9:8f:e7:4b:86:81:9d:0a:72:42:d5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Validity Not Before: Sep 21 13:12:57 2026 GMT Not After : Sep 22 15:00:57 2026 GMT Subject: CN=7E8304919ECECD975C3B2901C8023763866F517C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:57:ce:62:a3:1d:52:96:09:6d:cd:f8:27:f9: 3c:cb:c4:c6:a2:2e:3a:9d:06:b7:9f:5d:26:6b:48: a0:bd:d1:42:03:65:7f:d5:b0:30:07:d9:55:8f:61: b8:1b:e8:dd:49:f2:dd:c9:e1:00:c1:e9:24:d5:34: 64:d5:89:19:9c:5d:3c:b8:4b:14:a7:03:0a:5a:12: 41:57:20:f6:04:9e:e0:40:9e:cb:aa:a1:f4:8b:92: a1:8c:23:7a:66:61:66:b7:bd:f3:3d:29:0d:74:05: 3c:ff:9c:54:37:6e:4d:33:3f:0d:e6:44:54:1e:3d: fc:15:e8:13:d6:1e:c4:55:f4:e5:d3:57:30:f7:29: 38:08:21:cc:c5:e2:d9:e6:1e:82:dc:6b:9d:83:f2: f2:3a:7b:72:e9:6c:90:c7:a5:37:14:22:a5:26:2d: 19:28:0c:a6:81:1f:09:62:6b:33:21:50:b5:f7:bd: 9c:8c:fa:a0:1f:69:80:1d:ea:60:c4:cc:73:e2:8a: 2f:57:44:ad:91:68:51:00:52:bf:b0:69:0a:9d:47: d8:05:92:ca:f0:1e:46:1a:2a:9e:0a:1e:50:36:b0: 4d:eb:69:3f:ff:99:e2:b8:6c:4d:aa:c7:b6:71:06: 65:fc:73:1b:2f:40:bc:ce:b5:3b:15:f1:2e:da:16: 35:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:83:04:91:9E:CE:CD:97:5C:3B:29:01:C8:02:37:63:86:6F:51:7C X509v3 Authority Key Identifier: keyid:30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:11:f3:76:4b:62:6a:c6:fe:05:ad:ad:52:b2:d4:ff:6f:e6: 1b:58:20:22:3a:31:18:f0:a8:20:e3:71:1e:3e:29:9a:e9:cb: e9:b9:82:03:2f:b6:92:12:e4:a1:bf:3b:88:83:ac:7a:11:19: 6e:a1:ee:d0:20:1c:43:5b:17:52:a4:b7:8f:c5:e0:6a:f9:ef: c2:7f:aa:9c:a3:19:3e:a1:dc:38:d6:27:6f:c4:d8:e6:32:8c: ec:0f:21:07:61:38:36:5a:23:86:c2:e1:54:9e:11:a0:65:89: 3f:36:47:30:e9:b4:bc:e7:6b:14:7c:9f:1f:b7:75:9d:23:3e: f6:6c:e9:3d:d6:38:88:b3:9a:ea:a2:c9:64:5f:ce:80:e9:30: 47:95:b5:78:c5:8e:71:dc:1f:cf:45:f9:4f:6b:14:e1:59:41: 72:0b:51:a7:d8:d6:2d:99:e9:e2:e8:44:18:e9:72:d5:7a:82: b6:88:87:e6:29:bd:99:3e:90:e4:4e:3f:a9:86:2d:67:6b:b1: 76:c3:8c:27:36:09:b6:43:12:43:49:92:36:a9:f5:72:55:75: 2b:03:be:ac:2a:ff:0f:50:b3:45:d5:1d:60:5a:e7:52:7c:5e: 9b:62:83:fc:8f:24:4e:b6:d1:7d:a6:7a:d3:38:64:34:67:06: f0:6a:34:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURXXv7q8Zzoi5j+dLhoGdCnJC1dMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1 OERCRjQyQTAeFw0yNjA5MjExMzEyNTdaFw0yNjA5MjIxNTAwNTdaMDMxMTAvBgNV BAMTKDdFODMwNDkxOUVDRUNEOTc1QzNCMjkwMUM4MDIzNzYzODY2RjUxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxV85iox1Slgltzfgn+TzLxMai LjqdBrefXSZrSKC90UIDZX/VsDAH2VWPYbgb6N1J8t3J4QDB6STVNGTViRmcXTy4 SxSnAwpaEkFXIPYEnuBAnsuqofSLkqGMI3pmYWa3vfM9KQ10BTz/nFQ3bk0zPw3m RFQePfwV6BPWHsRV9OXTVzD3KTgIIczF4tnmHoLca52D8vI6e3LpbJDHpTcUIqUm LRkoDKaBHwliazMhULX3vZyM+qAfaYAd6mDEzHPiii9XRK2RaFEAUr+waQqdR9gF ksrwHkYaKp4KHlA2sE3raT//meK4bE2qx7ZxBmX8cxsvQLzOtTsV8S7aFjVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfoMEkZ7OzZdcOykByAI3Y4ZvUXwwHwYDVR0j BBgwFoAUMCioux7PdVAiJYBEnU+ngVjb9CowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmZGQ2ZjktYjc5OS00YTk2LTllMmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIx RUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1OERCRjQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDI4QThCQjFFQ0Y3NTUwMjIyNTgwNDQ5RDRGQTc4MTU4REJG NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3 ODE1OERCRjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYR83ZLYmrG/gWtrVKy1P9v5htYICI6MRjw qCDjcR4+KZrpy+m5ggMvtpIS5KG/O4iDrHoRGW6h7tAgHENbF1Kkt4/F4Gr578J/ qpyjGT6h3DjWJ2/E2OYyjOwPIQdhODZaI4bC4VSeEaBliT82RzDptLznaxR8nx+3 dZ0jPvZs6T3WOIizmuqiyWRfzoDpMEeVtXjFjnHcH89F+U9rFOFZQXILUafY1i2Z 6eLoRBjpctV6graIh+YpvZk+kOROP6mGLWdrsXbDjCc2CbZDEkNJkjap9XJVdSsD vqwq/w9Qs0XVHWBa51J8Xptig/yPJE620X2metM4ZDRnBvBqNIk= -----END CERTIFICATE-----Generated at Mon Sep 21 19:46:26 2026 by rpki-client