$ rpki-client -vvf rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft File: 3028A8BB1ECF7550222580449D4FA78158DBF42A.mft (raw, json) Hash identifier: MNVljXfYewg6XFALs82eJLsT6dDLiJM6eV9HWGpSKrc= Subject key identifier: EE:21:24:1F:B2:0C:F3:47:6C:6F:59:89:E0:9D:CA:5D:E0:B3:E0:4E Authority key identifier: 30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A Certificate issuer: /CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Certificate serial: 179006C9F3BB847F845D78D32D3840907E1A9A85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:34:42 +0000 Manifest this update: Wed 17 Jun 2026 01:29:42 +0000 Manifest next update: Thu 18 Jun 2026 03:32:42 +0000 Files and hashes: 1: 3028A8BB1ECF7550222580449D4FA78158DBF42A.crl (hash: HYc1NHYq8aj3bOc1JdrAcoJnvjR5CMYU3Ylx9obrh3E=) 2: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: EAY48hYNH/6TUE1xmrb2C7cSV9ZpqN9x7POku5Es1R0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:90:06:c9:f3:bb:84:7f:84:5d:78:d3:2d:38:40:90:7e:1a:9a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Validity Not Before: Jun 17 01:29:42 2026 GMT Not After : Jun 18 03:32:42 2026 GMT Subject: CN=EE21241FB20CF3476C6F5989E09DCA5DE0B3E04E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:65:8a:23:22:48:92:a5:1b:5d:23:30:2a: c7:43:48:fe:bd:f7:f9:e3:6f:f7:6d:d7:9f:4e:a0: 85:31:a4:50:82:de:04:32:1b:68:21:fd:5f:14:c3: 42:e2:90:b6:aa:e1:93:44:c5:76:31:df:5c:81:9f: 90:08:0e:41:26:d7:45:bf:05:df:30:82:fa:59:a7: d8:47:8e:3f:e7:11:4d:00:3c:f2:9d:76:76:1e:87: 91:f5:00:54:31:13:4a:2c:c7:15:c0:35:7d:89:31: 42:d4:9b:a0:0b:7b:19:fc:63:c5:9d:e8:04:ef:f1: f5:68:04:89:38:82:77:24:40:71:b6:3c:a3:7d:e7: ec:12:ef:f0:c5:33:ab:93:9b:fe:9c:36:f1:ad:aa: 72:00:59:e8:32:bd:fb:0e:90:45:53:ab:e1:eb:8f: ec:19:32:4c:13:40:30:73:65:96:2a:16:5e:05:c3: 85:b0:3a:bb:80:97:ce:dc:85:ee:6d:2a:fa:bc:98: 6a:aa:f7:bd:26:18:9d:6d:af:fb:3f:42:fc:02:5b: 42:c0:ce:b6:2a:e6:20:07:f3:46:22:09:93:10:3b: a5:56:6b:f2:54:09:fc:3a:82:5c:b8:bd:2e:14:1e: 4f:6e:e0:32:a6:72:6e:ae:04:7c:97:7f:0c:fd:07: e0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:21:24:1F:B2:0C:F3:47:6C:6F:59:89:E0:9D:CA:5D:E0:B3:E0:4E X509v3 Authority Key Identifier: keyid:30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:4a:2a:be:f3:c7:88:0b:4d:75:d8:16:77:78:6e:2a:ba:25: ba:ff:b1:c3:bf:90:19:1c:fb:89:12:d5:3a:cb:32:59:f0:0d: 95:18:46:e8:ea:4c:50:ad:e5:5d:c0:d2:8f:5f:88:06:2d:e2: 60:18:b3:ff:92:9f:ec:8e:77:8c:f6:43:7e:39:08:66:68:12: 00:f6:87:01:7f:99:38:19:1e:59:ec:1e:2b:09:eb:65:48:49: d5:a3:ed:e5:c5:e3:41:c7:51:c9:f1:3a:63:13:09:a5:71:db: ea:a7:56:ac:5c:70:71:03:30:a8:3b:c5:0f:89:ab:40:3d:c8: e6:bb:9f:77:63:3b:76:e3:3d:77:f6:bd:13:70:c9:d4:49:c4: 70:c3:f1:d6:e3:50:7b:f2:04:e7:95:7c:c0:e6:69:f7:fd:d7: 27:aa:b7:69:28:d5:4b:db:f8:8c:1a:c5:ab:64:d0:a9:ad:5e: df:7a:68:c8:d0:e0:76:c6:59:e4:b6:6d:18:cb:86:12:4b:e1: ea:34:61:08:b2:80:e3:8a:1c:cb:1f:b9:80:80:17:1e:a8:c3: 87:29:2f:0f:5f:0d:e7:07:5e:49:fb:56:a4:b5:3c:44:28:ec: 15:27:5e:30:f5:f3:db:09:55:bd:bf:f9:9b:73:49:5c:1a:41: 79:be:16:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF5AGyfO7hH+EXXjTLThAkH4amoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1 OERCRjQyQTAeFw0yNjA2MTcwMTI5NDJaFw0yNjA2MTgwMzMyNDJaMDMxMTAvBgNV BAMTKEVFMjEyNDFGQjIwQ0YzNDc2QzZGNTk4OUUwOURDQTVERTBCM0UwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFEGWKIyJIkqUbXSMwKsdDSP69 9/njb/dt159OoIUxpFCC3gQyG2gh/V8Uw0LikLaq4ZNExXYx31yBn5AIDkEm10W/ Bd8wgvpZp9hHjj/nEU0APPKddnYeh5H1AFQxE0osxxXANX2JMULUm6ALexn8Y8Wd 6ATv8fVoBIk4gnckQHG2PKN95+wS7/DFM6uTm/6cNvGtqnIAWegyvfsOkEVTq+Hr j+wZMkwTQDBzZZYqFl4Fw4WwOruAl87che5tKvq8mGqq970mGJ1tr/s/QvwCW0LA zrYq5iAH80YiCZMQO6VWa/JUCfw6gly4vS4UHk9u4DKmcm6uBHyXfwz9B+CPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7iEkH7IM80dsb1mJ4J3KXeCz4E4wHwYDVR0j BBgwFoAUMCioux7PdVAiJYBEnU+ngVjb9CowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmZGQ2ZjktYjc5OS00YTk2LTllMmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIx RUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1OERCRjQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDI4QThCQjFFQ0Y3NTUwMjIyNTgwNDQ5RDRGQTc4MTU4REJG NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3 ODE1OERCRjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNKKr7zx4gLTXXYFnd4biq6Jbr/scO/kBkc +4kS1TrLMlnwDZUYRujqTFCt5V3A0o9fiAYt4mAYs/+Sn+yOd4z2Q345CGZoEgD2 hwF/mTgZHlnsHisJ62VISdWj7eXF40HHUcnxOmMTCaVx2+qnVqxccHEDMKg7xQ+J q0A9yOa7n3djO3bjPXf2vRNwydRJxHDD8dbjUHvyBOeVfMDmaff91yeqt2ko1Uvb +Iwaxatk0KmtXt96aMjQ4HbGWeS2bRjLhhJL4eo0YQiygOOKHMsfuYCAFx6ow4cp Lw9fDecHXkn7VqS1PEQo7BUnXjD189sJVb2/+ZtzSVwaQXm+FoM= -----END CERTIFICATE-----Generated at Wed Jun 17 13:15:14 2026 by rpki-client