$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft File: 28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft (raw, json) Hash identifier: 8TZlNWHlS2dIJOGbK+F/EgSzErpkakkakuwzCLdaByk= Subject key identifier: F9:0A:13:8E:72:46:EF:8B:8E:EE:48:45:65:72:23:D9:1A:26:40:5F Authority key identifier: 28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA Certificate issuer: /CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Certificate serial: 02069FA224687F7BAB69F5C4205ECA7307A17996 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 19:29:35 +0000 Manifest this update: Fri 25 Sep 2026 19:24:35 +0000 Manifest next update: Sat 26 Sep 2026 21:46:35 +0000 Files and hashes: 1: 28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl (hash: 8Nwvuc5EDXBHuFXJgDMJKCMUDADkvEWEso2p8yv0dnw=) 2: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: IW57GOIpsV3XMacGHlka+0CSQgtIywURoK2nG7nWa7w=) 3: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: SdAYaKbLY7S/5p5HGrJ4jkCgcURLrEIiXWTRP7lNFqs=) 4: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: A6nVc+CU4v4uaObx3pcTTBPbO/2k+l19C2GraBAa5qQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:06:9f:a2:24:68:7f:7b:ab:69:f5:c4:20:5e:ca:73:07:a1:79:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Validity Not Before: Sep 25 19:24:35 2026 GMT Not After : Sep 26 21:46:35 2026 GMT Subject: CN=F90A138E7246EF8B8EEE4845657223D91A26405F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ec:5d:cb:b3:7d:9b:81:c0:dd:43:0e:27:9e: 23:34:80:37:e3:52:e6:bc:13:e7:d1:e8:af:14:82: f6:a9:d2:22:77:d3:ec:89:30:85:fb:82:30:d8:66: 05:34:e1:c4:ae:53:34:40:d6:2c:97:08:86:7a:f7: 1b:2e:5a:f1:94:38:f9:f1:8e:68:6f:f6:af:60:13: ed:d0:7d:3a:4a:f5:d3:3c:93:e3:83:21:ea:5b:79: 0c:6e:34:ab:ef:fe:9b:b4:2d:42:b1:2e:94:9c:a9: c2:39:47:15:66:47:ea:dc:5d:c2:ec:ec:be:01:0a: b7:ed:4a:fd:0f:41:c6:14:be:26:4e:ad:bc:5c:b7: 2d:d8:93:30:ec:c5:05:0a:7b:78:92:5f:58:9f:6b: 5f:4b:b0:1c:ab:28:5a:82:96:9e:e6:8d:39:19:ed: 0d:65:fd:92:fd:cb:47:71:26:35:3c:94:4b:8d:2b: 2f:68:93:f7:29:90:a0:f0:64:bd:e8:ee:88:ea:44: 44:2d:01:61:a4:ae:09:23:ec:bd:d8:62:cc:49:a6: da:58:10:39:c5:4a:76:8f:b5:ee:80:f9:7c:e2:23: 8d:69:d7:33:b9:da:c4:a2:f4:a9:8a:f4:ff:ae:6a: f7:12:8e:ff:9b:3d:e2:a5:ff:b9:2f:00:fe:92:52: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0A:13:8E:72:46:EF:8B:8E:EE:48:45:65:72:23:D9:1A:26:40:5F X509v3 Authority Key Identifier: keyid:28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:14:81:e2:50:d5:27:64:5c:b8:b3:ff:d8:86:2f:5d:fe:42: 61:b5:81:1e:9a:ba:29:6e:f3:35:7e:07:2e:b5:ac:d4:81:c9: 44:c5:95:d6:6c:8d:65:3f:d5:d2:a6:5a:91:d4:97:80:b2:08: 85:92:24:e2:b6:39:86:2c:69:90:55:d9:50:31:e2:1f:51:fc: 27:61:23:26:d6:6c:c5:d1:05:bf:0b:18:60:07:4a:0d:d7:7e: 65:32:76:44:af:24:d6:89:8e:51:7d:22:3b:b2:fc:fd:c3:81: ba:69:d7:70:fb:67:37:70:71:ce:1c:f0:88:13:11:f4:ee:05: c4:65:f6:5b:a5:d5:9e:e9:62:cc:83:47:d2:87:96:c4:ec:42: d6:c3:67:7a:5f:70:f1:04:5e:8c:19:b7:2f:6c:3c:6d:0d:d5: 70:75:5f:bd:94:fe:90:6c:54:b1:a1:c3:a9:27:0c:35:60:83: 3a:be:4a:cd:8e:63:d3:09:d1:d6:10:e1:b8:92:81:84:0e:2f: 4d:d4:fc:c0:d5:44:29:57:66:e9:c0:8f:fe:8d:df:7a:38:80: c4:89:ce:03:c9:24:6e:9e:db:1e:30:d7:8b:1c:86:f7:25:14: ef:10:17:f7:73:6b:76:3d:40:bb:a3:0a:ee:5d:c0:81:b4:e8: 1e:30:1d:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAgafoiRof3urafXEIF7KcweheZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg4ODBFNkEzNUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2 MTlGRTBCQTAeFw0yNjA5MjUxOTI0MzVaFw0yNjA5MjYyMTQ2MzVaMDMxMTAvBgNV BAMTKEY5MEExMzhFNzI0NkVGOEI4RUVFNDg0NTY1NzIyM0Q5MUEyNjQwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7F3Ls32bgcDdQw4nniM0gDfj Uua8E+fR6K8Ugvap0iJ30+yJMIX7gjDYZgU04cSuUzRA1iyXCIZ69xsuWvGUOPnx jmhv9q9gE+3QfTpK9dM8k+ODIepbeQxuNKvv/pu0LUKxLpScqcI5RxVmR+rcXcLs 7L4BCrftSv0PQcYUviZOrbxcty3YkzDsxQUKe3iSX1ifa19LsByrKFqClp7mjTkZ 7Q1l/ZL9y0dxJjU8lEuNKy9ok/cpkKDwZL3o7ojqREQtAWGkrgkj7L3YYsxJptpY EDnFSnaPte6A+XziI41p1zO52sSi9KmK9P+uavcSjv+bPeKl/7kvAP6SUgmdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+QoTjnJG74uO7khFZXIj2RomQF8wHwYDVR0j BBgwFoAUKIgOajW2yK7LwIMo4ML2OWGf4LowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4ODQ0MmItYzQ4ZS00YmEwLThhZDctNThlMTI2M2M2ZGM3LzAvMjg4ODBFNkEz NUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2MTlGRTBCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODg4MEU2QTM1QjZDOEFFQ0JDMDgzMjhFMEMyRjYzOTYxOUZF MEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvMjg4ODBFNkEzNUI2QzhBRUNCQzA4MzI4RTBDMkY2 Mzk2MTlGRTBCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0UgeJQ1SdkXLiz/9iGL13+QmG1gR6auilu 8zV+By61rNSByUTFldZsjWU/1dKmWpHUl4CyCIWSJOK2OYYsaZBV2VAx4h9R/Cdh IybWbMXRBb8LGGAHSg3XfmUydkSvJNaJjlF9Ijuy/P3Dgbpp13D7Zzdwcc4c8IgT EfTuBcRl9lul1Z7pYsyDR9KHlsTsQtbDZ3pfcPEEXowZty9sPG0N1XB1X72U/pBs VLGhw6knDDVggzq+Ss2OY9MJ0dYQ4biSgYQOL03U/MDVRClXZunAj/6N33o4gMSJ zgPJJG6e2x4w14schvclFO8QF/dza3Y9QLujCu5dwIG06B4wHXo= -----END CERTIFICATE-----Generated at Fri Sep 25 22:08:02 2026 by rpki-client