$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft File: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft (raw, json) Hash identifier: yHbPvOVBEtq52MIT7qPi2w+M1XYOV3CPSUO3t6gfKkM= Subject key identifier: 76:DD:68:15:D2:5F:50:71:EA:7B:0F:49:AE:BC:37:BD:B1:88:92:42 Authority key identifier: 02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 Certificate issuer: /CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Certificate serial: 643A2E47D6B4600361B1B70EC8E193D0306C1CDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft Manifest number: 0F Signing time: Tue 12 May 2026 10:46:43 +0000 Manifest this update: Tue 12 May 2026 10:41:43 +0000 Manifest next update: Wed 13 May 2026 11:14:43 +0000 Files and hashes: 1: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl (hash: amyi6Nlk8TX0WqyqnJ8jGrs4tB2aOMqvCZ2T1s8z+dc=) 2: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: Xk7Qw7wFoGRI3rjKCFAl7ffLOSrFJh23uM7+wGfmYww=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3a:2e:47:d6:b4:60:03:61:b1:b7:0e:c8:e1:93:d0:30:6c:1c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Validity Not Before: May 12 10:41:43 2026 GMT Not After : May 13 11:14:43 2026 GMT Subject: CN=76DD6815D25F5071EA7B0F49AEBC37BDB1889242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:45:da:9c:4a:ee:f3:66:eb:0e:a8:c0:5f:f1: 67:e9:bd:3e:84:d2:09:00:9c:8e:70:6c:65:62:b2: 90:95:b3:02:f6:28:fe:90:0d:a5:c8:9d:c1:d5:00: 98:05:4e:f0:20:2d:c1:94:26:60:ec:de:28:ae:10: fd:e1:64:fa:b1:91:f1:29:9f:6d:ca:69:28:74:c5: 09:6b:15:f4:25:21:59:9d:3d:22:f4:df:4f:51:ac: 52:b5:e3:68:ff:d3:00:87:6a:96:2c:08:bb:dc:7c: 55:16:53:45:04:7b:46:9a:2d:0d:cd:7e:6b:15:9e: d7:de:dd:2e:89:68:0f:cf:79:29:b2:be:96:1a:01: 7e:6d:2d:54:df:4f:e1:10:6c:8b:52:2d:87:a6:cd: fb:d0:ea:2a:20:28:8e:de:63:26:e5:ab:8d:22:b6: a0:99:c6:4d:fe:61:a6:10:31:39:9a:48:92:61:ff: 00:0e:74:fd:99:2c:d9:1a:a7:f8:bf:21:2b:e9:48: c3:cc:51:d7:ea:c8:26:b4:ec:da:6c:de:14:02:d7: 9f:3e:ca:51:6b:ae:8c:c6:0d:30:3b:27:19:69:a6: b5:17:57:c8:71:af:fa:3e:12:51:95:7e:21:1c:3d: 41:0b:a7:93:ee:a1:04:21:1f:74:5b:cc:69:eb:70: 91:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DD:68:15:D2:5F:50:71:EA:7B:0F:49:AE:BC:37:BD:B1:88:92:42 X509v3 Authority Key Identifier: keyid:02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:34:03:a9:1e:2c:4c:d4:10:20:64:5f:c0:db:16:f3:9b:0d: ab:50:c6:5c:eb:00:e7:8f:b0:6c:2d:dc:e5:6e:6a:71:22:96: 1c:44:08:ed:32:6d:3b:49:99:ee:f6:41:06:8d:0d:18:1a:34: 4a:b0:4f:b0:b4:2a:c2:b5:e9:0d:63:29:e0:90:89:2b:1d:c7: 36:c1:7d:e9:21:0d:e7:a3:b1:c0:6d:e9:d4:9e:a0:a1:7b:e5: 76:5b:2e:c7:73:b4:40:e1:5d:74:85:c8:37:7d:93:de:9c:30: ec:93:02:d3:32:54:8f:95:42:a1:2f:91:37:06:02:47:b6:c4: 83:fb:58:05:1e:4b:8f:6b:ad:8a:0e:4c:9f:85:3d:5d:2a:da: a5:a9:f3:f8:43:16:0d:7c:e2:dd:7d:b6:b0:dd:39:16:26:b9: f7:9d:99:2b:32:38:39:c7:e9:ca:1c:22:f8:7b:34:c6:a7:13: e7:e3:5f:f9:ef:62:ce:f7:c4:b7:96:b4:39:99:e7:f0:b8:ed: d1:51:8a:40:36:2c:68:ff:fe:b2:3f:66:eb:d8:9e:57:05:12: 73:47:46:24:23:26:e3:c2:e7:a8:15:ce:ee:39:ab:d4:85:c1: bb:b0:cc:f8:59:be:74:7e:7e:e3:dd:38:3c:b8:6b:89:42:55: 6e:57:7c:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZDouR9a0YANhsbcOyOGT0DBsHN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0QjczQzY4 RDBBMENCMzAeFw0yNjA1MTIxMDQxNDNaFw0yNjA1MTMxMTE0NDNaMDMxMTAvBgNV BAMTKDc2REQ2ODE1RDI1RjUwNzFFQTdCMEY0OUFFQkMzN0JEQjE4ODkyNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtRdqcSu7zZusOqMBf8WfpvT6E 0gkAnI5wbGVispCVswL2KP6QDaXIncHVAJgFTvAgLcGUJmDs3iiuEP3hZPqxkfEp n23KaSh0xQlrFfQlIVmdPSL0309RrFK142j/0wCHapYsCLvcfFUWU0UEe0aaLQ3N fmsVntfe3S6JaA/PeSmyvpYaAX5tLVTfT+EQbItSLYemzfvQ6iogKI7eYyblq40i tqCZxk3+YaYQMTmaSJJh/wAOdP2ZLNkap/i/ISvpSMPMUdfqyCa07Nps3hQC158+ ylFrrozGDTA7JxlpprUXV8hxr/o+ElGVfiEcPUELp5PuoQQhH3RbzGnrcJFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdt1oFdJfUHHqew9Jrrw3vbGIkkIwHwYDVR0j BBgwFoAUAgYo2xbf3fRCkjsJ0Etzxo0KDLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmM5MDk3MzctMTU2NC00NmNhLTkwMDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIx NkRGRERGNDQyOTIzQjA5RDA0QjczQzY4RDBBMENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjA2MjhEQjE2REZEREY0NDI5MjNCMDlEMDRCNzNDNjhEMEEw Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0Qjcz QzY4RDBBMENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK80A6keLEzUECBkX8DbFvObDatQxlzrAOeP sGwt3OVuanEilhxECO0ybTtJme72QQaNDRgaNEqwT7C0KsK16Q1jKeCQiSsdxzbB fekhDeejscBt6dSeoKF75XZbLsdztEDhXXSFyDd9k96cMOyTAtMyVI+VQqEvkTcG Ake2xIP7WAUeS49rrYoOTJ+FPV0q2qWp8/hDFg184t19trDdORYmufedmSsyODnH 6cocIvh7NManE+fjX/nvYs73xLeWtDmZ5/C47dFRikA2LGj//rI/ZuvYnlcFEnNH RiQjJuPC56gVzu45q9SFwbuwzPhZvnR+fuPdODy4a4lCVW5XfPo= -----END CERTIFICATE-----Generated at Tue May 12 22:20:14 2026 by rpki-client