$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft File: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft (raw, json) Hash identifier: e3KJieNVetcwkuZYiLu0KtrpNiScgKZFpbv2UrZixUg= Subject key identifier: 86:58:63:81:6E:15:9F:A9:6C:01:B8:0D:5A:70:63:66:22:AD:54:86 Authority key identifier: 02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 Certificate issuer: /CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Certificate serial: 2C7072A30CB5A05222D158D598219D98A685BB38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft Manifest number: BD Signing time: Sun 20 Sep 2026 15:05:40 +0000 Manifest this update: Sun 20 Sep 2026 15:00:40 +0000 Manifest next update: Mon 21 Sep 2026 18:42:40 +0000 Files and hashes: 1: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl (hash: HjxD7CMYRKkvrj4SUvveEVlKbH8u2yhdScJfSkDQzQI=) 2: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: BUSB0kLsC7pjKXi5bhLXUPIzYoFZsUEccBkiDUzp6D8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:70:72:a3:0c:b5:a0:52:22:d1:58:d5:98:21:9d:98:a6:85:bb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Validity Not Before: Sep 20 15:00:40 2026 GMT Not After : Sep 21 18:42:40 2026 GMT Subject: CN=865863816E159FA96C01B80D5A70636622AD5486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:65:21:52:8c:c6:1c:a2:36:31:c5:16:e1:f5: be:d6:26:c8:be:03:94:c6:0f:88:77:bb:1e:11:41: bd:01:e3:42:b4:3d:db:f7:d4:aa:e0:f8:26:7c:1f: 50:a8:67:1e:f6:7d:19:02:ca:5a:ad:fe:4f:b1:35: 80:f7:5f:8d:1d:19:a7:b6:09:44:c0:27:29:d6:18: 5c:a1:5e:a8:98:44:22:24:bc:b7:59:3a:0e:bb:3c: 16:50:fa:48:ec:ae:f7:0b:e5:44:1d:63:4d:9d:e9: 7d:24:c2:eb:ac:c3:52:04:d8:7a:b2:35:32:f0:52: b9:77:6b:4e:cb:c8:82:f9:2f:49:0d:be:e6:39:3f: 77:b2:f6:93:65:b2:25:d9:b9:7f:2f:39:b1:d1:d4: 47:84:8b:97:f6:c4:a5:dd:d8:26:46:51:88:98:9a: ef:99:33:4f:8c:87:79:ee:94:a9:af:d8:53:61:02: d2:17:b9:cc:98:25:91:46:30:14:79:0d:d9:54:9b: 40:ed:a0:0a:dd:11:77:78:f5:01:4a:b3:8e:5b:a0: d0:3b:f9:8d:1a:99:4f:b4:0e:bb:34:52:56:d7:68: 49:a2:d5:d2:8d:b5:51:75:60:73:57:12:13:86:30: fc:6d:a0:67:fa:3b:25:61:a8:03:70:31:cc:52:89: cd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:58:63:81:6E:15:9F:A9:6C:01:B8:0D:5A:70:63:66:22:AD:54:86 X509v3 Authority Key Identifier: keyid:02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c6:55:e9:ea:ad:c2:20:82:ed:e3:fe:25:34:98:1d:fd:69: 55:25:bf:86:59:bb:b7:cd:a7:67:a6:ac:0f:cc:da:46:bc:75: d9:f9:c1:88:dc:7f:3c:d7:b2:ac:ee:cb:05:95:37:17:9f:e0: 77:54:fc:00:41:60:a0:d2:ca:7b:0f:9f:2b:85:ba:54:93:0f: e4:a4:0e:24:92:4b:08:8b:93:f0:71:8c:ae:52:ea:16:14:47: 99:28:5e:ce:a6:0d:31:e1:26:ed:e1:15:2a:ab:a1:a8:dd:4f: 2d:2f:71:ff:94:30:54:ee:01:30:12:46:16:30:8d:10:b1:36: 29:e0:40:5d:e6:0b:12:47:9c:53:82:46:f5:ae:91:cd:76:98: 72:c5:49:10:ab:cd:0f:e7:0c:c0:10:57:5e:02:dc:5e:80:32: bc:72:cf:f7:7a:2e:fe:89:99:7d:a6:80:3f:cc:25:8c:51:7b: 16:6b:3a:6d:12:4e:aa:f4:b2:40:55:7c:44:ba:33:10:9b:0d: 22:d8:c9:bd:ec:83:58:b2:a4:e4:e6:36:30:fe:52:6e:b7:7a: 76:eb:e7:72:40:58:51:68:cf:96:d7:e7:06:49:6f:f0:e7:8c: 3c:39:ec:7d:ae:a5:fb:f5:6a:c3:94:4e:27:4e:ca:29:a8:41: 54:77:f8:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHByowy1oFIi0VjVmCGdmKaFuzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlD MjQ0MkFEOTAeFw0yNjA5MjAxNTAwNDBaFw0yNjA5MjExODQyNDBaMDMxMTAvBgNV BAMTKDg2NTg2MzgxNkUxNTlGQTk2QzAxQjgwRDVBNzA2MzY2MjJBRDU0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChZSFSjMYcojYxxRbh9b7WJsi+ A5TGD4h3ux4RQb0B40K0Pdv31Krg+CZ8H1CoZx72fRkCylqt/k+xNYD3X40dGae2 CUTAJynWGFyhXqiYRCIkvLdZOg67PBZQ+kjsrvcL5UQdY02d6X0kwuusw1IE2Hqy NTLwUrl3a07LyIL5L0kNvuY5P3ey9pNlsiXZuX8vObHR1EeEi5f2xKXd2CZGUYiY mu+ZM0+Mh3nulKmv2FNhAtIXucyYJZFGMBR5DdlUm0DtoArdEXd49QFKs45boNA7 +Y0amU+0Drs0UlbXaEmi1dKNtVF1YHNXEhOGMPxtoGf6OyVhqANwMcxSic3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhlhjgW4Vn6lsAbgNWnBjZiKtVIYwHwYDVR0j BBgwFoAUAotyiY4Lq880cMfonsbh+cJEKtkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg1Y2JkOTUtNTc0Zi00MDViLThiZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4 RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlDMjQ0MkFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCNzI4OThFMEJBQkNGMzQ3MEM3RTg5RUM2RTFGOUMyNDQy QUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUx RjlDMjQ0MkFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLGVenqrcIggu3j/iU0mB39aVUlv4ZZu7fN p2emrA/M2ka8ddn5wYjcfzzXsqzuywWVNxef4HdU/ABBYKDSynsPnyuFulSTD+Sk DiSSSwiLk/BxjK5S6hYUR5koXs6mDTHhJu3hFSqroajdTy0vcf+UMFTuATASRhYw jRCxNingQF3mCxJHnFOCRvWukc12mHLFSRCrzQ/nDMAQV14C3F6AMrxyz/d6Lv6J mX2mgD/MJYxRexZrOm0STqr0skBVfES6MxCbDSLYyb3sg1iypOTmNjD+Um63enbr 53JAWFFoz5bX5wZJb/DnjDw57H2upfv1asOUTidOyimoQVR3+D4= -----END CERTIFICATE-----Generated at Mon Sep 21 04:02:48 2026 by rpki-client