$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft File: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft (raw, json) Hash identifier: FNsjQ/dBD4gAScdY7NtfNNLGUOFifUbni5YxKaFXCNA= Subject key identifier: D9:57:E2:6E:C3:3D:64:53:5B:6A:82:A2:08:A1:89:C1:F4:05:E3:57 Authority key identifier: 1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD Certificate issuer: /CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Certificate serial: 4BA33B7EDA30C35437018CA39695158222EF2D9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 14:13:33 +0000 Manifest this update: Thu 24 Sep 2026 14:08:33 +0000 Manifest next update: Fri 25 Sep 2026 15:49:33 +0000 Files and hashes: 1: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: Iyu6UGXh6K6YUKWK1Cw0yY2+2dIgfvoG18aCPpAU41Y=) 2: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl (hash: nIRcfceUORhv206Gw7IxKhyKB1T76aAihg/RdS/vgFU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a3:3b:7e:da:30:c3:54:37:01:8c:a3:96:95:15:82:22:ef:2d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Validity Not Before: Sep 24 14:08:33 2026 GMT Not After : Sep 25 15:49:33 2026 GMT Subject: CN=D957E26EC33D64535B6A82A208A189C1F405E357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7b:d5:83:19:3b:00:b2:14:0b:f4:51:d0:7c: 5b:ff:6e:9d:00:6c:db:a7:b9:2c:10:7f:df:22:bf: f1:02:34:ae:27:6e:f6:54:47:c6:4f:0f:6c:a7:b9: b5:b5:f9:67:00:e8:23:b2:e2:29:cb:42:1d:a8:78: 9c:91:bc:34:e7:b2:33:95:c7:27:eb:45:ab:88:8e: 3f:7c:d5:e3:00:fe:0f:45:a1:de:44:09:18:ad:a6: ab:4b:8a:fb:3a:0f:96:69:61:38:b3:e8:22:2d:b7: 80:9f:38:62:29:14:6f:7b:72:54:98:30:44:a9:d2: 9f:6b:ba:9f:11:f1:46:b8:34:f4:e1:da:0e:f6:e2: 1c:04:df:6e:5c:7d:e2:88:35:52:47:66:f2:82:36: cf:f8:fd:ed:c8:56:d0:17:65:89:4a:74:26:e7:dc: 14:3d:53:f8:d7:7f:eb:fc:96:f0:2a:44:29:1d:2b: 39:4c:15:08:7c:06:ff:19:d0:6b:b0:23:16:2f:54: 9b:0b:2c:ee:6b:bf:ff:90:fa:5d:a3:5e:84:b6:29: 9d:53:89:ac:59:d0:06:66:d8:01:81:4a:fb:b6:9c: 71:34:d6:c5:f8:10:b1:df:e0:a5:36:56:09:22:03: 0a:af:e6:0a:22:9e:a1:ee:d8:8f:bd:44:b1:5d:9a: c4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:57:E2:6E:C3:3D:64:53:5B:6A:82:A2:08:A1:89:C1:F4:05:E3:57 X509v3 Authority Key Identifier: keyid:1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:ac:ea:85:a5:71:07:d4:15:e9:1e:2b:68:26:22:97:df:1b: 05:ae:c3:d3:21:5f:fd:8a:10:35:fb:9e:de:af:d0:b4:90:49: 65:0d:71:63:37:7b:0d:76:61:33:d3:bf:f3:4a:46:7d:6a:63: da:5f:87:d6:57:f0:ce:f9:51:5f:6d:1a:9e:d7:77:fe:47:1c: 88:28:b1:bb:91:b2:7a:df:ac:aa:c4:01:03:55:f2:5e:ea:e5: 06:0a:54:aa:d6:18:4d:d5:6d:34:08:c2:c7:da:5d:d5:a3:fa: f0:ff:fb:f7:db:81:86:98:f8:e6:0c:65:f0:90:c2:fc:37:09: df:32:c4:88:e3:19:e8:25:bb:13:04:ab:1a:d6:db:28:6f:d4: 62:9f:ad:86:67:39:85:f3:ec:80:0f:0e:9a:6e:c1:db:47:b9: 79:65:e4:52:32:d7:51:02:21:c4:90:e7:1e:f0:c8:61:2b:79: f8:24:8a:04:25:88:1c:6b:d0:af:f7:fe:93:09:06:92:3b:c2: 15:1b:01:33:08:26:d3:0b:a3:e9:a2:94:65:3a:2f:01:c3:b8: 71:10:98:54:e3:45:dd:f6:d7:bc:45:77:5c:00:91:df:f5:84: b2:7b:dd:6a:1a:dd:6b:b1:12:8a:dd:88:5a:aa:fa:7c:31:5d: dc:8b:6b:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6M7ftoww1Q3AYyjlpUVgiLvLZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZC M0Y3OThGRDAeFw0yNjA5MjQxNDA4MzNaFw0yNjA5MjUxNTQ5MzNaMDMxMTAvBgNV BAMTKEQ5NTdFMjZFQzMzRDY0NTM1QjZBODJBMjA4QTE4OUMxRjQwNUUzNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCe9WDGTsAshQL9FHQfFv/bp0A bNunuSwQf98iv/ECNK4nbvZUR8ZPD2ynubW1+WcA6COy4inLQh2oeJyRvDTnsjOV xyfrRauIjj981eMA/g9Fod5ECRitpqtLivs6D5ZpYTiz6CItt4CfOGIpFG97clSY MESp0p9rup8R8Ua4NPTh2g724hwE325cfeKINVJHZvKCNs/4/e3IVtAXZYlKdCbn 3BQ9U/jXf+v8lvAqRCkdKzlMFQh8Bv8Z0GuwIxYvVJsLLO5rv/+Q+l2jXoS2KZ1T iaxZ0AZm2AGBSvu2nHE01sX4ELHf4KU2VgkiAwqv5goinqHu2I+9RLFdmsQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2VfibsM9ZFNbaoKiCKGJwfQF41cwHwYDVR0j BBgwFoAUHSim4h8oEp1JUqAI//jun7P3mP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFkMzk0NTAtNDU4NC00ODgyLWI1YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIx RjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZCM0Y3OThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDI4QTZFMjFGMjgxMjlENDk1MkEwMDhGRkY4RUU5RkIzRjc5 OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVF OUZCM0Y3OThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANas6oWlcQfUFekeK2gmIpffGwWuw9MhX/2K EDX7nt6v0LSQSWUNcWM3ew12YTPTv/NKRn1qY9pfh9ZX8M75UV9tGp7Xd/5HHIgo sbuRsnrfrKrEAQNV8l7q5QYKVKrWGE3VbTQIwsfaXdWj+vD/+/fbgYaY+OYMZfCQ wvw3Cd8yxIjjGegluxMEqxrW2yhv1GKfrYZnOYXz7IAPDppuwdtHuXll5FIy11EC IcSQ5x7wyGErefgkigQliBxr0K/3/pMJBpI7whUbATMIJtMLo+milGU6LwHDuHEQ mFTjRd3217xFd1wAkd/1hLJ73Woa3WuxEordiFqq+nwxXdyLa/4= -----END CERTIFICATE-----Generated at Thu Sep 24 23:31:11 2026 by rpki-client