$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft File: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft (raw, json) Hash identifier: 3g8HHlclIImsxJhVsGJl8t3EYohhbmwE87UG+JERFko= Subject key identifier: 2A:C4:1D:FD:1D:AF:C0:CB:55:27:AD:1C:5C:62:0F:53:49:E8:B1:CD Authority key identifier: 28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 Certificate issuer: /CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Certificate serial: 4D9C0907DE882409E675DF30275C2C2E92591C12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 14:34:13 +0000 Manifest this update: Mon 09 Nov 2026 14:29:13 +0000 Manifest next update: Tue 10 Nov 2026 15:42:13 +0000 Files and hashes: 1: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl (hash: SCWNDWt4HjYNe2KwZy1k5pih717AZE0kE84bxuieWps=) 2: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: DX9De2RZ1fwPjXYRliJoG3vcnnWQkcrXmm5lY0DlQ8c=) 3: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: cqIEZQxU+EZc9SYrpFqE5pS8nDzAxvnkTbzbHwD4B2w=) 4: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: QbxtuI4YaAQndGClm2TbpKVghRM330ZkzNpAWirg1ig=) 5: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: 3yzCp4wkI3KfVYe4A0JZd3yJ1CphXPMHC1KQXGZTn24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 15:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9c:09:07:de:88:24:09:e6:75:df:30:27:5c:2c:2e:92:59:1c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Validity Not Before: Nov 9 14:29:13 2026 GMT Not After : Nov 10 15:42:13 2026 GMT Subject: CN=2AC41DFD1DAFC0CB5527AD1C5C620F5349E8B1CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:44:a4:f3:dc:64:76:4d:0d:55:6b:40:a9:90: 4f:f8:8f:40:15:eb:50:bd:d8:d8:45:41:92:a3:17: 97:22:17:eb:9d:29:92:69:c2:1b:35:e8:57:57:ff: cc:d4:dc:8c:b1:d7:55:ce:fd:8c:ee:ad:6c:09:c9: 54:9a:ba:41:30:6e:66:64:76:33:9f:51:36:04:7f: a7:36:c4:a1:93:0f:61:a3:02:df:64:35:ef:35:bf: 15:72:18:45:c9:a4:5a:04:4a:72:ca:c5:b3:24:d6: 91:62:6a:ac:6c:5e:9a:1b:0e:05:97:8c:01:17:65: a2:99:74:22:4b:03:9e:b6:79:07:20:45:a8:e0:92: 8d:97:da:2d:e7:2f:1f:7e:83:86:69:62:78:8c:6d: 63:76:5f:ed:6d:ac:f0:56:cd:d8:b6:5c:11:fe:43: dd:85:82:5f:a4:b6:c4:91:02:23:18:7c:30:2f:f1: 73:56:d8:3c:bd:5b:91:ef:eb:00:fb:4d:22:b9:33: 06:b0:89:94:59:ca:64:ab:d4:85:14:07:4e:f0:0f: 79:04:bf:80:2f:2d:15:5a:e4:81:b7:a6:fc:08:da: b6:3e:be:9a:c0:18:e7:74:15:f8:6c:f5:6e:d1:ff: 33:92:4e:70:f9:db:be:ec:8c:6e:bb:9e:53:61:53: aa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C4:1D:FD:1D:AF:C0:CB:55:27:AD:1C:5C:62:0F:53:49:E8:B1:CD X509v3 Authority Key Identifier: keyid:28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d8:02:06:71:83:86:5e:04:8b:55:f7:b7:a8:2c:61:2d:b2: 4f:b1:4f:99:26:8c:54:66:46:c3:2d:5a:20:35:e0:ab:b8:32: d0:f1:5c:53:d1:3a:dc:57:0a:36:1b:00:4d:62:e0:38:11:57: 07:53:ec:bc:54:7e:e1:57:9b:b7:52:60:2f:6d:0f:02:8c:73: 04:05:83:cd:17:4f:e2:85:94:49:71:62:72:4b:7a:89:3d:90: 61:77:72:80:54:01:4a:80:fb:d5:12:67:a6:af:81:03:56:49: a5:40:da:b7:00:0d:29:7c:cc:b8:e2:78:8f:04:6c:c1:34:41: 5f:8b:f3:be:ce:d7:28:5a:1f:42:85:38:84:11:7a:46:01:11: ac:1d:d8:6c:cb:c7:ad:ec:cd:8b:5c:2d:cf:00:9b:00:c6:e7: 80:15:56:4f:1d:33:47:50:dd:2c:db:59:61:f0:7f:dc:de:53: 5c:69:a5:b4:7c:28:14:b4:73:3b:de:5d:6f:a1:16:a5:b1:ae: 33:eb:fd:4a:ae:1f:71:4b:b4:89:40:67:80:8d:65:f4:d7:7d: 25:01:a9:88:b7:47:3b:37:7e:2a:56:9e:41:1a:b0:f0:c5:fd: e1:6f:1f:d8:a7:a0:e1:e0:91:db:2e:a4:9f:47:61:37:fe:88: 18:fb:f3:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZwJB96IJAnmdd8wJ1wsLpJZHBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAw MkNENUMyMjAeFw0yNjExMDkxNDI5MTNaFw0yNjExMTAxNTQyMTNaMDMxMTAvBgNV BAMTKDJBQzQxREZEMURBRkMwQ0I1NTI3QUQxQzVDNjIwRjUzNDlFOEIxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhRKTz3GR2TQ1Va0CpkE/4j0AV 61C92NhFQZKjF5ciF+udKZJpwhs16FdX/8zU3Iyx11XO/YzurWwJyVSaukEwbmZk djOfUTYEf6c2xKGTD2GjAt9kNe81vxVyGEXJpFoESnLKxbMk1pFiaqxsXpobDgWX jAEXZaKZdCJLA562eQcgRajgko2X2i3nLx9+g4ZpYniMbWN2X+1trPBWzdi2XBH+ Q92Fgl+ktsSRAiMYfDAv8XNW2Dy9W5Hv6wD7TSK5MwawiZRZymSr1IUUB07wD3kE v4AvLRVa5IG3pvwI2rY+vprAGOd0Ffhs9W7R/zOSTnD5277sjG67nlNhU6qrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKsQd/R2vwMtVJ60cXGIPU0nosc0wHwYDVR0j BBgwFoAUKAUf8ZCtYPKGrmmlwsKnUALNXCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZjOGIzYTktNGVmZi00NjBkLWIwMWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5 MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAwMkNENUMyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODA1MUZGMTkwQUQ2MEYyODZBRTY5QTVDMkMyQTc1MDAyQ0Q1 QzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3 NTAwMkNENUMyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7YAgZxg4ZeBItV97eoLGEtsk+xT5kmjFRm RsMtWiA14Ku4MtDxXFPROtxXCjYbAE1i4DgRVwdT7LxUfuFXm7dSYC9tDwKMcwQF g80XT+KFlElxYnJLeok9kGF3coBUAUqA+9USZ6avgQNWSaVA2rcADSl8zLjieI8E bME0QV+L877O1yhaH0KFOIQRekYBEawd2GzLx63szYtcLc8AmwDG54AVVk8dM0dQ 3SzbWWHwf9zeU1xppbR8KBS0czveXW+hFqWxrjPr/UquH3FLtIlAZ4CNZfTXfSUB qYi3Rzs3fipWnkEasPDF/eFvH9inoOHgkdsupJ9HYTf+iBj78+8= -----END CERTIFICATE-----Generated at Tue Nov 10 05:58:55 2026 by rpki-client