$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft File: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft (raw, json) Hash identifier: aW2O5bzN2YKC3QYbCQ0eH+LwTrhlZkTd/RXljfTFEUY= Subject key identifier: 78:83:04:87:8E:2A:4C:96:BB:A7:A0:6C:A0:15:B4:D7:56:6F:1A:E3 Authority key identifier: 02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 Certificate issuer: /CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Certificate serial: 02EEBCFBDB3384D6790AE01763E70C357218EDE1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 20:25:42 +0000 Manifest this update: Thu 24 Sep 2026 20:20:42 +0000 Manifest next update: Fri 25 Sep 2026 22:41:42 +0000 Files and hashes: 1: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl (hash: fpAOZnxlCckABY1tkOi6qEIA04njPSZ7dvvADSihM8s=) 2: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: Xk7Qw7wFoGRI3rjKCFAl7ffLOSrFJh23uM7+wGfmYww=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 22:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ee:bc:fb:db:33:84:d6:79:0a:e0:17:63:e7:0c:35:72:18:ed:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Validity Not Before: Sep 24 20:20:42 2026 GMT Not After : Sep 25 22:41:42 2026 GMT Subject: CN=788304878E2A4C96BBA7A06CA015B4D7566F1AE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:d6:02:5f:4b:85:e0:ae:43:da:b2:a5:0a: 28:f2:48:6d:5d:3d:82:76:5c:4e:cb:22:4d:e2:87: 92:06:f5:e2:12:31:31:bb:a1:09:77:bc:5f:e9:06: 10:69:2d:b0:c1:91:2a:7d:bb:fb:8b:08:5e:90:42: 19:57:87:2f:7e:ee:b3:1c:4f:f0:dd:d0:ae:eb:a4: d4:6d:35:47:ec:fe:d7:d6:47:e0:a1:7c:2e:71:6b: e1:fb:88:d2:63:40:dc:8f:e8:d5:11:6c:62:c7:b7: c7:8e:a8:8b:58:a5:b1:36:16:db:ec:97:28:fb:ea: fc:9c:90:1a:dd:3a:33:ec:08:2b:ba:c4:1f:9e:c6: ef:29:9d:d2:9e:28:6b:39:df:4c:d4:78:74:36:b7: 4b:72:c8:f6:a6:5b:51:da:b8:79:04:a0:d2:35:bd: 5e:0a:25:79:9a:bb:f9:8f:16:d0:aa:77:cd:86:99: 92:1b:e6:92:d4:fe:f5:e6:27:53:2e:4f:29:07:65: c3:8e:26:d6:77:8d:64:36:ca:26:40:2a:f2:d4:46: 5f:b7:81:71:8a:5a:95:e9:21:27:c1:1f:54:4a:87: 22:d8:88:17:5e:d9:fe:01:22:d4:75:79:b7:d7:29: 28:c7:6f:04:52:e7:27:88:ad:f1:de:13:6a:d4:ce: f8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:83:04:87:8E:2A:4C:96:BB:A7:A0:6C:A0:15:B4:D7:56:6F:1A:E3 X509v3 Authority Key Identifier: keyid:02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:93:9e:5f:8c:09:27:83:36:34:79:9c:6e:d5:61:b3:eb:2b: 3d:5d:a0:20:f6:ab:93:f0:e2:64:8e:2d:d8:88:4a:ba:19:f0: 08:ee:91:0d:9a:f7:3b:4b:cd:b5:a4:0e:b7:b5:d5:ab:08:84: 63:9c:b9:8b:30:59:66:33:b5:e1:38:d2:37:4d:98:da:7a:60: b3:72:8f:34:f1:b8:2e:fb:e1:48:be:25:24:7a:7c:a7:bb:e6: 44:a5:d3:83:3c:16:b9:29:5d:fc:5a:5d:a2:5c:4c:6e:88:af: 3b:b4:c2:b9:5b:67:b0:96:e9:f7:21:99:d3:ab:69:2a:3c:e5: f5:9b:12:b8:59:88:ec:1f:eb:30:73:d2:a5:02:e6:de:59:ea: fa:53:1c:07:95:6e:55:5f:1b:d3:dc:9d:c9:70:7c:2c:66:83: 62:ea:b0:fd:66:56:27:38:22:da:5c:85:f8:04:a4:f9:35:55: 90:5f:27:75:ec:30:f4:d4:a1:8a:01:72:9d:82:de:5b:9c:56: 91:3f:11:ec:e0:36:91:0d:c0:86:2c:f6:b0:69:f3:a2:9a:aa: 47:8e:8f:77:07:33:91:f0:1c:73:64:6a:3a:fb:0d:8f:35:0c: 63:d4:a4:89:3d:a3:57:4d:8a:b9:9b:da:aa:50:10:23:88:d3: b4:ef:8f:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAu68+9szhNZ5CuAXY+cMNXIY7eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0QjczQzY4 RDBBMENCMzAeFw0yNjA5MjQyMDIwNDJaFw0yNjA5MjUyMjQxNDJaMDMxMTAvBgNV BAMTKDc4ODMwNDg3OEUyQTRDOTZCQkE3QTA2Q0EwMTVCNEQ3NTY2RjFBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROdYCX0uF4K5D2rKlCijySG1d PYJ2XE7LIk3ih5IG9eISMTG7oQl3vF/pBhBpLbDBkSp9u/uLCF6QQhlXhy9+7rMc T/Dd0K7rpNRtNUfs/tfWR+ChfC5xa+H7iNJjQNyP6NURbGLHt8eOqItYpbE2Ftvs lyj76vyckBrdOjPsCCu6xB+exu8pndKeKGs530zUeHQ2t0tyyPamW1HauHkEoNI1 vV4KJXmau/mPFtCqd82GmZIb5pLU/vXmJ1MuTykHZcOOJtZ3jWQ2yiZAKvLURl+3 gXGKWpXpISfBH1RKhyLYiBde2f4BItR1ebfXKSjHbwRS5yeIrfHeE2rUzvirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeIMEh44qTJa7p6BsoBW011ZvGuMwHwYDVR0j BBgwFoAUAgYo2xbf3fRCkjsJ0Etzxo0KDLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmM5MDk3MzctMTU2NC00NmNhLTkwMDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIx NkRGRERGNDQyOTIzQjA5RDA0QjczQzY4RDBBMENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjA2MjhEQjE2REZEREY0NDI5MjNCMDlEMDRCNzNDNjhEMEEw Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0Qjcz QzY4RDBBMENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASTnl+MCSeDNjR5nG7VYbPrKz1doCD2q5Pw 4mSOLdiISroZ8AjukQ2a9ztLzbWkDre11asIhGOcuYswWWYzteE40jdNmNp6YLNy jzTxuC774Ui+JSR6fKe75kSl04M8FrkpXfxaXaJcTG6Irzu0wrlbZ7CW6fchmdOr aSo85fWbErhZiOwf6zBz0qUC5t5Z6vpTHAeVblVfG9PcnclwfCxmg2LqsP1mVic4 ItpchfgEpPk1VZBfJ3XsMPTUoYoBcp2C3lucVpE/EezgNpENwIYs9rBp86KaqkeO j3cHM5HwHHNkajr7DY81DGPUpIk9o1dNirmb2qpQECOI07Tvjyo= -----END CERTIFICATE-----Generated at Fri Sep 25 08:48:36 2026 by rpki-client