$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft File: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft (raw, json) Hash identifier: qqlO3e7BZD2SjlrUXw5XTLbWtJS4SPX/yKJoBTb7s5c= Subject key identifier: 9F:2D:3D:DE:36:9E:CE:47:D0:2D:6C:4A:9B:01:D7:9B:C7:EF:9A:0C Authority key identifier: 02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 Certificate issuer: /CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Certificate serial: 46043EF8BD154780111883BF81BDCC5C588A9710 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:30:02 +0000 Manifest this update: Thu 23 Jul 2026 20:25:02 +0000 Manifest next update: Sat 25 Jul 2026 00:07:02 +0000 Files and hashes: 1: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: Xk7Qw7wFoGRI3rjKCFAl7ffLOSrFJh23uM7+wGfmYww=) 2: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl (hash: g92cF/TkVvtyt0gXl086IAKdKKgIq7d/CBjA5H5Ek24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:04:3e:f8:bd:15:47:80:11:18:83:bf:81:bd:cc:5c:58:8a:97:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Validity Not Before: Jul 23 20:25:02 2026 GMT Not After : Jul 25 00:07:02 2026 GMT Subject: CN=9F2D3DDE369ECE47D02D6C4A9B01D79BC7EF9A0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:a7:ee:f7:65:56:56:53:dd:d6:dc:37:26: 83:03:fe:b2:96:85:1b:dc:31:2a:36:8a:53:2b:1d: 8a:89:2b:71:41:93:cc:16:fe:32:ca:01:fe:a7:86: 6d:cc:99:90:39:cb:a0:72:9b:a7:70:57:06:1c:d0: 5a:df:0b:15:dc:bf:a3:a7:58:72:3e:bb:64:90:ac: f4:ae:e5:ce:d8:84:71:ca:06:cf:a6:96:59:36:cf: cc:68:3a:95:89:a3:c2:cd:c6:fc:35:b5:48:93:35: cc:c1:e7:08:31:90:b5:be:d4:d2:e2:0b:ce:7c:2a: 74:d2:97:e3:74:5a:7e:01:66:15:1e:f0:81:b0:b9: 24:82:84:bc:02:8d:6c:ec:75:8f:10:b5:03:2b:19: cc:24:77:6a:fb:fb:8c:bc:b1:3c:33:c3:4a:ce:ee: f2:fb:3a:ad:28:4a:99:75:01:fc:54:73:9d:27:89: 77:dd:81:b9:17:57:75:22:cb:fe:a4:24:4a:65:47: d9:a8:93:fa:53:3f:3f:c3:ab:0a:cb:7a:1b:34:e7: bc:8a:b2:69:7c:a5:a0:40:6b:d7:ba:37:07:5e:c0: 5b:b6:a9:8d:2c:be:98:89:16:c5:db:fa:3b:94:84: 95:34:73:3c:0c:66:9a:6e:fb:a2:09:4b:0d:bb:83: df:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2D:3D:DE:36:9E:CE:47:D0:2D:6C:4A:9B:01:D7:9B:C7:EF:9A:0C X509v3 Authority Key Identifier: keyid:02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5d:0a:43:e1:24:76:4d:29:cf:64:cd:42:05:b0:7f:8d:d4: 02:09:b5:56:94:f1:13:91:f6:ed:3b:7c:f8:3e:2e:f4:06:98: ce:4f:4a:50:a3:13:a2:2e:5d:1b:34:78:a1:27:98:8a:65:55: ce:b7:5c:2e:89:b4:60:cf:96:ab:c5:25:ae:49:66:28:fd:db: 67:c6:ae:c5:69:84:bb:62:19:f5:a7:12:2d:1c:31:b8:ad:57: b3:0f:77:32:69:59:d3:18:ed:b1:73:5f:48:44:fa:92:fa:46: 71:5c:d3:63:4a:e8:a4:df:31:2d:2d:61:87:0d:1e:e8:be:10: 33:62:a5:de:97:77:21:f7:a3:bf:29:e0:42:e7:45:34:0a:54: 51:db:26:c9:c8:8e:0d:f3:90:64:64:89:2f:fa:3f:28:48:4b: 97:56:43:8d:1f:3b:41:ab:ba:97:22:db:69:e2:24:6c:b0:a7: 95:57:b9:70:2b:d2:26:e0:5c:1d:70:48:87:fc:94:67:d2:05: 08:8f:80:ae:44:d2:3d:e9:9e:f7:e9:17:bf:89:e7:4c:79:ce: 62:d7:b0:8f:26:be:12:41:84:90:c7:a0:ac:19:5c:7a:aa:53: c7:24:f6:bf:73:02:96:49:c3:17:c0:d5:21:33:1f:6d:39:c6: 45:7a:61:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURgQ++L0VR4ARGIO/gb3MXFiKlxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0QjczQzY4 RDBBMENCMzAeFw0yNjA3MjMyMDI1MDJaFw0yNjA3MjUwMDA3MDJaMDMxMTAvBgNV BAMTKDlGMkQzRERFMzY5RUNFNDdEMDJENkM0QTlCMDFENzlCQzdFRjlBMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mafu92VWVlPd1tw3JoMD/rKW hRvcMSo2ilMrHYqJK3FBk8wW/jLKAf6nhm3MmZA5y6Bym6dwVwYc0FrfCxXcv6On WHI+u2SQrPSu5c7YhHHKBs+mllk2z8xoOpWJo8LNxvw1tUiTNczB5wgxkLW+1NLi C858KnTSl+N0Wn4BZhUe8IGwuSSChLwCjWzsdY8QtQMrGcwkd2r7+4y8sTwzw0rO 7vL7Oq0oSpl1AfxUc50niXfdgbkXV3Uiy/6kJEplR9mok/pTPz/DqwrLehs057yK sml8paBAa9e6NwdewFu2qY0svpiJFsXb+juUhJU0czwMZppu+6IJSw27g9/zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUny093jaezkfQLWxKmwHXm8fvmgwwHwYDVR0j BBgwFoAUAgYo2xbf3fRCkjsJ0Etzxo0KDLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmM5MDk3MzctMTU2NC00NmNhLTkwMDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIx NkRGRERGNDQyOTIzQjA5RDA0QjczQzY4RDBBMENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjA2MjhEQjE2REZEREY0NDI5MjNCMDlEMDRCNzNDNjhEMEEw Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0Qjcz QzY4RDBBMENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5dCkPhJHZNKc9kzUIFsH+N1AIJtVaU8ROR 9u07fPg+LvQGmM5PSlCjE6IuXRs0eKEnmIplVc63XC6JtGDPlqvFJa5JZij922fG rsVphLtiGfWnEi0cMbitV7MPdzJpWdMY7bFzX0hE+pL6RnFc02NK6KTfMS0tYYcN Hui+EDNipd6XdyH3o78p4ELnRTQKVFHbJsnIjg3zkGRkiS/6PyhIS5dWQ40fO0Gr upci22niJGywp5VXuXAr0ibgXB1wSIf8lGfSBQiPgK5E0j3pnvfpF7+J50x5zmLX sI8mvhJBhJDHoKwZXHqqU8ck9r9zApZJwxfA1SEzH205xkV6YcI= -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:27 2026 by rpki-client