$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft File: 28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft (raw, json) Hash identifier: 4/IlS26mJUL77+mq8ENlWEuakrrU4iwrLd4aVcQlVGw= Subject key identifier: BC:6E:D5:43:CC:C9:73:D3:81:36:AC:26:D9:AE:BE:0F:57:A5:D5:9D Authority key identifier: 28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA Certificate issuer: /CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Certificate serial: 5E67B4E2F0F06E0726A585C7BB68D91374B96BD4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:22:11 +0000 Manifest this update: Tue 12 May 2026 17:17:11 +0000 Manifest next update: Wed 13 May 2026 17:51:11 +0000 Files and hashes: 1: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: SdAYaKbLY7S/5p5HGrJ4jkCgcURLrEIiXWTRP7lNFqs=) 2: 28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl (hash: KPkqxaYS5ghnvidCHqC4Mfbm/RmuBqJfPWidcd76+/Y=) 3: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: A6nVc+CU4v4uaObx3pcTTBPbO/2k+l19C2GraBAa5qQ=) 4: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: IW57GOIpsV3XMacGHlka+0CSQgtIywURoK2nG7nWa7w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:67:b4:e2:f0:f0:6e:07:26:a5:85:c7:bb:68:d9:13:74:b9:6b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Validity Not Before: May 12 17:17:11 2026 GMT Not After : May 13 17:51:11 2026 GMT Subject: CN=BC6ED543CCC973D38136AC26D9AEBE0F57A5D59D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:dd:b2:2b:8f:6d:32:b5:89:bd:79:23:6f: 3b:38:35:94:ea:7d:ac:21:46:17:80:50:a2:1b:af: f7:60:8e:e1:08:b9:6a:60:71:c2:9b:8a:d3:e0:4f: fc:64:a7:4b:25:13:17:f2:3c:65:0e:b3:b7:8c:d7: f1:5a:95:ee:c5:f9:b9:27:0c:37:0a:1d:74:c1:0a: 23:37:42:b4:04:1e:1c:e5:9b:4a:74:f5:d5:0e:fb: 8d:b9:00:e7:c9:9e:7b:e6:88:61:94:93:59:da:5d: a7:76:9a:31:dc:27:6a:da:9d:8e:e4:db:cb:97:9c: 84:27:18:9e:2e:a7:3e:ea:c8:b1:77:5b:28:a4:de: 28:65:b9:2d:a9:6c:87:a5:00:a2:f5:46:09:ac:6e: 4d:2a:36:e7:44:c1:66:55:5a:36:b0:b3:ca:cc:d6: df:2a:13:c8:67:49:e0:8e:f8:65:21:f2:c2:3b:30: e7:79:02:57:33:39:19:16:52:69:74:7f:c1:c1:63: 4a:d2:4d:27:73:f4:d8:97:dc:21:bb:5c:fd:c9:b7: 25:34:5d:33:fc:d2:e9:58:6a:a5:64:be:5b:fa:4e: 52:e5:9e:df:6d:23:6d:bb:32:9b:2c:27:32:6c:56: 9d:c5:17:c7:3e:a1:36:9b:59:69:bd:1e:9f:1c:37: d7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6E:D5:43:CC:C9:73:D3:81:36:AC:26:D9:AE:BE:0F:57:A5:D5:9D X509v3 Authority Key Identifier: keyid:28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:33:ea:01:a1:76:95:c6:8f:91:b5:f8:df:d0:a5:1e:31:62: dc:34:43:cd:38:ce:80:f8:7d:23:1c:70:ba:4c:94:db:fc:72: f5:f0:4f:bf:0c:df:83:e0:b3:8e:cd:00:25:c6:50:a3:53:11: 5f:80:89:c7:be:23:89:a2:47:c1:2a:04:a6:d8:ca:7f:d9:80: bd:6e:7b:08:40:ef:e7:a8:59:b9:df:8d:5e:9c:ba:78:15:38: db:01:f0:48:68:24:e6:62:bc:7d:48:a3:ed:f0:47:43:db:72: e3:86:5d:14:5b:8c:19:32:85:60:5e:9a:9c:2b:fc:23:67:bb: 1c:f7:cb:d0:cd:1e:5b:5e:9b:00:d3:a8:f5:8a:49:91:40:8e: 57:78:03:af:71:1a:c1:eb:cf:d6:3d:3f:5d:1f:7c:d3:53:9f: 76:55:13:05:0e:f2:22:6f:1e:0d:72:9b:f4:ee:28:fb:12:4e: d0:ba:cd:72:34:25:95:f0:29:e0:05:ce:37:28:42:19:29:24: 18:cd:4f:47:99:43:9b:d1:89:3d:6d:3b:ee:f6:3c:2a:b9:ec: c9:be:ff:3b:9a:e7:54:3c:2d:a4:7d:e5:0e:76:1d:34:1f:00: c2:ed:a0:1d:30:d3:62:44:11:c3:8a:e0:81:01:90:89:68:19: 72:65:2e:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXme04vDwbgcmpYXHu2jZE3S5a9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg4ODBFNkEzNUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2 MTlGRTBCQTAeFw0yNjA1MTIxNzE3MTFaFw0yNjA1MTMxNzUxMTFaMDMxMTAvBgNV BAMTKEJDNkVENTQzQ0NDOTczRDM4MTM2QUMyNkQ5QUVCRTBGNTdBNUQ1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5IN2yK49tMrWJvXkjbzs4NZTq fawhRheAUKIbr/dgjuEIuWpgccKbitPgT/xkp0slExfyPGUOs7eM1/Fale7F+bkn DDcKHXTBCiM3QrQEHhzlm0p09dUO+425AOfJnnvmiGGUk1naXad2mjHcJ2ranY7k 28uXnIQnGJ4upz7qyLF3Wyik3ihluS2pbIelAKL1Rgmsbk0qNudEwWZVWjaws8rM 1t8qE8hnSeCO+GUh8sI7MOd5AlczORkWUml0f8HBY0rSTSdz9NiX3CG7XP3JtyU0 XTP80ulYaqVkvlv6TlLlnt9tI227MpssJzJsVp3FF8c+oTabWWm9Hp8cN9cpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvG7VQ8zJc9OBNqwm2a6+D1el1Z0wHwYDVR0j BBgwFoAUKIgOajW2yK7LwIMo4ML2OWGf4LowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4ODQ0MmItYzQ4ZS00YmEwLThhZDctNThlMTI2M2M2ZGM3LzAvMjg4ODBFNkEz NUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2MTlGRTBCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODg4MEU2QTM1QjZDOEFFQ0JDMDgzMjhFMEMyRjYzOTYxOUZF MEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvMjg4ODBFNkEzNUI2QzhBRUNCQzA4MzI4RTBDMkY2 Mzk2MTlGRTBCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQz6gGhdpXGj5G1+N/QpR4xYtw0Q804zoD4 fSMccLpMlNv8cvXwT78M34Pgs47NACXGUKNTEV+Aice+I4miR8EqBKbYyn/ZgL1u ewhA7+eoWbnfjV6cungVONsB8EhoJOZivH1Io+3wR0PbcuOGXRRbjBkyhWBempwr /CNnuxz3y9DNHltemwDTqPWKSZFAjld4A69xGsHrz9Y9P10ffNNTn3ZVEwUO8iJv Hg1ym/TuKPsSTtC6zXI0JZXwKeAFzjcoQhkpJBjNT0eZQ5vRiT1tO+72PCq57Mm+ /zua51Q8LaR95Q52HTQfAMLtoB0w02JEEcOK4IEBkIloGXJlLiU= -----END CERTIFICATE-----Generated at Wed May 13 03:00:02 2026 by rpki-client