$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft File: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft (raw, json) Hash identifier: yEDzmMSPcR9yIgGTnYKSkwjBegoD84HMnTl1aG1JmQY= Subject key identifier: 46:FE:0D:F2:95:A7:60:C6:CB:B6:41:7D:C1:1B:98:48:97:51:E7:1B Authority key identifier: 28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 Certificate issuer: /CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Certificate serial: 5A394630E41F04609FE185BA2B4DF61413F45967 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft Manifest number: BE Signing time: Mon 21 Sep 2026 11:45:58 +0000 Manifest this update: Mon 21 Sep 2026 11:40:58 +0000 Manifest next update: Tue 22 Sep 2026 15:02:58 +0000 Files and hashes: 1: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl (hash: f6ap6oBLxCCL2ipz/e47TkgLwOdnb1UZEfvY80BkGoo=) 2: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: DX9De2RZ1fwPjXYRliJoG3vcnnWQkcrXmm5lY0DlQ8c=) 3: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: 3yzCp4wkI3KfVYe4A0JZd3yJ1CphXPMHC1KQXGZTn24=) 4: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: QbxtuI4YaAQndGClm2TbpKVghRM330ZkzNpAWirg1ig=) 5: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: cqIEZQxU+EZc9SYrpFqE5pS8nDzAxvnkTbzbHwD4B2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:39:46:30:e4:1f:04:60:9f:e1:85:ba:2b:4d:f6:14:13:f4:59:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Validity Not Before: Sep 21 11:40:58 2026 GMT Not After : Sep 22 15:02:58 2026 GMT Subject: CN=46FE0DF295A760C6CBB6417DC11B98489751E71B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:84:6d:ce:00:f1:a4:a0:59:2c:57:06:3c: d6:da:fd:46:f9:35:93:20:ce:e1:a5:3b:fc:ab:c7: d9:4b:cd:1b:4b:ac:5c:5e:44:3a:d8:f0:be:0a:a3: 36:5c:97:09:e1:e9:48:7f:eb:0a:b4:a8:34:ba:aa: 85:73:3e:a3:14:21:bf:0b:2c:5b:5f:f1:ad:c3:a3: 26:89:28:a6:7d:5d:3f:1d:b0:8f:df:00:9c:d2:27: 11:41:29:22:e8:76:85:f1:b2:32:31:86:85:6d:51: 73:66:ab:79:08:20:13:c4:c6:08:87:f2:12:f5:90: 77:31:e9:86:17:db:ee:0d:d5:c2:8e:72:42:e5:95: 0b:07:fc:20:e5:5c:a0:33:8d:45:c9:6b:f5:72:f9: b3:40:5f:a2:cb:ca:48:b7:73:cc:88:b0:f1:7f:af: 3e:a5:60:af:10:f8:e8:05:ed:09:bb:25:92:01:c2: cb:ca:57:b3:a6:19:4a:f0:b2:67:d1:ca:cf:94:84: 38:0d:92:6c:f8:88:fa:70:98:c9:fc:2a:ac:3d:b5: 87:61:20:9f:38:a9:2e:cf:78:be:98:e4:b0:61:97: c3:1d:aa:69:3a:ba:75:40:ed:01:4f:5b:89:49:f8: a0:58:4a:c1:31:b7:a6:7a:2b:4c:32:e2:ad:2b:ab: 45:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FE:0D:F2:95:A7:60:C6:CB:B6:41:7D:C1:1B:98:48:97:51:E7:1B X509v3 Authority Key Identifier: keyid:28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b8:f4:d9:c2:9f:ca:84:19:7e:83:15:c5:89:9e:20:45:29: 6b:61:51:c0:85:43:21:21:03:92:34:73:c9:4a:98:fe:0c:70: f4:26:e2:6d:ea:fe:22:2c:70:57:76:ba:c8:ca:c1:c1:ce:57: 49:58:dd:60:bc:98:7d:11:81:d0:8b:2d:9c:0c:b0:c5:7b:1e: 79:89:82:3d:8d:06:7b:7f:99:c1:9b:42:d3:1e:c9:4c:54:e8: ce:40:07:bb:84:df:46:d6:20:cc:85:9d:2a:df:73:ad:dc:4f: ed:66:93:44:40:41:85:13:96:0e:d8:a0:25:ee:1a:1e:0d:75: 1d:91:5e:1e:e2:40:db:2f:9d:bc:b3:8c:85:b7:96:79:b5:7a: cb:e1:ce:c5:f9:b2:93:56:e7:5a:7a:2f:25:14:74:b2:6c:58: 52:79:3a:8c:cd:6d:ae:35:27:fb:39:85:5e:cc:d2:66:bf:34: 55:e2:26:1b:2a:42:48:25:28:61:27:63:50:81:fd:b9:95:56: 7d:af:af:94:f1:3a:83:5f:50:6e:8a:6a:13:90:40:22:a4:05: 21:73:d3:f9:10:60:ad:46:72:0e:7d:98:6d:f7:27:6d:4c:31: 16:d6:4d:08:b6:c5:9c:6b:d6:db:f8:f9:cd:c3:42:0e:3d:7e: cb:8f:a0:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjlGMOQfBGCf4YW6K032FBP0WWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAw MkNENUMyMjAeFw0yNjA5MjExMTQwNThaFw0yNjA5MjIxNTAyNThaMDMxMTAvBgNV BAMTKDQ2RkUwREYyOTVBNzYwQzZDQkI2NDE3REMxMUI5ODQ4OTc1MUU3MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZYRtzgDxpKBZLFcGPNba/Ub5 NZMgzuGlO/yrx9lLzRtLrFxeRDrY8L4KozZclwnh6Uh/6wq0qDS6qoVzPqMUIb8L LFtf8a3DoyaJKKZ9XT8dsI/fAJzSJxFBKSLodoXxsjIxhoVtUXNmq3kIIBPExgiH 8hL1kHcx6YYX2+4N1cKOckLllQsH/CDlXKAzjUXJa/Vy+bNAX6LLyki3c8yIsPF/ rz6lYK8Q+OgF7Qm7JZIBwsvKV7OmGUrwsmfRys+UhDgNkmz4iPpwmMn8Kqw9tYdh IJ84qS7PeL6Y5LBhl8Mdqmk6unVA7QFPW4lJ+KBYSsExt6Z6K0wy4q0rq0VZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURv4N8pWnYMbLtkF9wRuYSJdR5xswHwYDVR0j BBgwFoAUKAUf8ZCtYPKGrmmlwsKnUALNXCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZjOGIzYTktNGVmZi00NjBkLWIwMWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5 MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAwMkNENUMyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODA1MUZGMTkwQUQ2MEYyODZBRTY5QTVDMkMyQTc1MDAyQ0Q1 QzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3 NTAwMkNENUMyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAm49NnCn8qEGX6DFcWJniBFKWthUcCFQyEh A5I0c8lKmP4McPQm4m3q/iIscFd2usjKwcHOV0lY3WC8mH0RgdCLLZwMsMV7HnmJ gj2NBnt/mcGbQtMeyUxU6M5AB7uE30bWIMyFnSrfc63cT+1mk0RAQYUTlg7YoCXu Gh4NdR2RXh7iQNsvnbyzjIW3lnm1esvhzsX5spNW51p6LyUUdLJsWFJ5OozNba41 J/s5hV7M0ma/NFXiJhsqQkglKGEnY1CB/bmVVn2vr5TxOoNfUG6KahOQQCKkBSFz 0/kQYK1Gcg59mG33J21MMRbWTQi2xZxr1tv4+c3DQg49fsuPoB4= -----END CERTIFICATE-----Generated at Mon Sep 21 16:18:55 2026 by rpki-client