$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft File: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft (raw, json) Hash identifier: 52STXdsQuk+nGJ5g7AESpN2WhTpR36qVH74EfDrZLoQ= Subject key identifier: 81:55:D3:35:AA:B2:30:87:73:86:A9:48:94:5A:2C:46:86:CF:0F:D2 Authority key identifier: 02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 Certificate issuer: /CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Certificate serial: 4B6128F0B7E2CB28240A62570073781519CC0B35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 18:23:25 +0000 Manifest this update: Thu 24 Sep 2026 18:18:25 +0000 Manifest next update: Fri 25 Sep 2026 20:32:25 +0000 Files and hashes: 1: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl (hash: K68azkP+VN1vkFALCgo3Lm3d5pB/SrPeTX69Tsztl2k=) 2: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: N8zhnsK8z7VxJNfcfyiLUZPoMiisc/2RHnWBqlz/4MI=) 3: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: OZMHHHmslz7MYh9R9Ib0RjlOxsJyDimPwwAqaL88/ng=) 4: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: GtQhQt5lC+popSxKBpEXClSBs/pxIHaZp5GFBcVq7Ds=) 5: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: OyG3mFe6SrJhcLOwFyBCeuQpeyeUH09cXSgAgqZj+fA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 20:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:61:28:f0:b7:e2:cb:28:24:0a:62:57:00:73:78:15:19:cc:0b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Validity Not Before: Sep 24 18:18:25 2026 GMT Not After : Sep 25 20:32:25 2026 GMT Subject: CN=8155D335AAB230877386A948945A2C4686CF0FD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:39:c4:aa:5c:56:0c:21:e0:7b:4f:64:d6: 49:a4:bf:fc:fd:d7:da:45:c8:7e:78:52:11:53:61: 3c:04:eb:9e:b2:63:dd:2a:71:47:b4:c2:dc:a5:c8: 37:13:5a:72:38:79:24:88:a4:59:d9:c5:bc:fe:46: 15:cc:93:e2:6c:ae:a4:7d:db:6a:dd:48:b5:bf:52: b1:4f:f7:8b:d3:f6:8e:20:fe:18:45:f7:bf:c6:6f: a5:b5:2c:c7:29:10:05:f6:6a:15:d6:c6:a8:d1:d4: b0:ce:c5:5a:de:fc:7c:41:d7:ba:1b:8d:ea:8e:6e: 14:01:14:82:0a:e5:44:fd:ed:7a:26:b7:08:7d:de: b2:92:eb:5e:72:ce:0b:b3:4f:41:de:4a:b8:e7:5f: fe:c8:3c:db:5f:11:cd:38:e3:b7:9e:1f:47:43:05: bc:d2:01:44:6c:e1:72:e0:b7:04:05:34:14:27:ee: 05:63:5b:b8:8d:d7:78:5f:ca:84:81:ab:9f:ea:e3: e1:42:cf:80:53:91:64:b7:0c:a8:b6:49:c3:f0:f6: f4:9d:67:a9:a1:a1:84:cb:98:ac:37:2e:f3:87:e3: 39:b0:6d:93:38:05:1f:f3:e9:6f:f6:51:9d:c0:e0: 99:44:3f:f9:04:07:e8:ce:36:23:a8:15:89:3a:6a: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:55:D3:35:AA:B2:30:87:73:86:A9:48:94:5A:2C:46:86:CF:0F:D2 X509v3 Authority Key Identifier: keyid:02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:da:fb:9f:65:97:b5:76:ae:87:d2:bd:e7:27:10:2f:08:d5: 02:69:62:95:4f:38:26:7f:40:10:af:7c:fa:3b:c4:6c:24:8c: 37:47:4e:e5:74:18:7b:52:42:0d:f9:bd:e6:a2:87:8a:ce:11: fe:bb:81:9a:ef:cf:05:84:0d:c4:01:31:e9:6c:37:f9:12:0e: 20:85:13:e7:00:49:a9:4d:3a:e5:9c:6b:88:82:a1:df:e8:19: f3:f4:c5:bc:e5:bc:b3:b0:50:fa:6f:24:5f:e8:1f:9a:c2:f9: 57:38:e2:b0:11:a5:f7:c1:61:80:ef:17:ac:56:6a:4e:fa:08: 15:ed:5c:77:d7:cc:7d:5b:be:5b:09:fa:a0:7f:cc:1c:ea:2f: de:8a:73:e9:69:d0:0c:44:19:ef:2a:ec:ac:42:65:d0:48:02: 38:73:3b:83:7e:c0:93:9f:1f:1f:b9:9e:69:31:b6:7f:4c:c0: 31:71:4a:d8:4f:6e:ba:1b:6e:49:f2:e7:b7:40:6f:cb:b0:38: 1f:0a:82:53:11:e6:a4:b2:b4:c4:32:ec:68:7d:9b:61:8c:bb: 45:ff:d6:96:ee:75:fa:8b:30:3c:24:a8:64:1b:2e:de:6a:05: 52:e4:f6:c8:44:30:24:b4:04:98:4c:f9:5f:e7:20:6d:43:1e: bf:cf:65:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2Eo8LfiyygkCmJXAHN4FRnMCzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNBMDdD MjE4QTVBNjAeFw0yNjA5MjQxODE4MjVaFw0yNjA5MjUyMDMyMjVaMDMxMTAvBgNV BAMTKDgxNTVEMzM1QUFCMjMwODc3Mzg2QTk0ODk0NUEyQzQ2ODZDRjBGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUXznEqlxWDCHge09k1kmkv/z9 19pFyH54UhFTYTwE656yY90qcUe0wtylyDcTWnI4eSSIpFnZxbz+RhXMk+JsrqR9 22rdSLW/UrFP94vT9o4g/hhF97/Gb6W1LMcpEAX2ahXWxqjR1LDOxVre/HxB17ob jeqObhQBFIIK5UT97Xomtwh93rKS615yzguzT0HeSrjnX/7IPNtfEc0447eeH0dD BbzSAURs4XLgtwQFNBQn7gVjW7iN13hfyoSBq5/q4+FCz4BTkWS3DKi2ScPw9vSd Z6mhoYTLmKw3LvOH4zmwbZM4BR/z6W/2UZ3A4JlEP/kEB+jONiOoFYk6aoC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgVXTNaqyMIdzhqlIlFosRobPD9IwHwYDVR0j BBgwFoAUAos+olHDpZevVdTbPvQ6B8IYpaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM2YjJiZDctZDdmMS00ODE1LWE2MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1 MUMzQTU5N0FGNTVENERCM0VGNDNBMDdDMjE4QTVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCM0VBMjUxQzNBNTk3QUY1NUQ0REIzRUY0M0EwN0MyMThB NUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNB MDdDMjE4QTVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGja+59ll7V2rofSvecnEC8I1QJpYpVPOCZ/ QBCvfPo7xGwkjDdHTuV0GHtSQg35veaih4rOEf67gZrvzwWEDcQBMelsN/kSDiCF E+cASalNOuWca4iCod/oGfP0xbzlvLOwUPpvJF/oH5rC+Vc44rARpffBYYDvF6xW ak76CBXtXHfXzH1bvlsJ+qB/zBzqL96Kc+lp0AxEGe8q7KxCZdBIAjhzO4N+wJOf Hx+5nmkxtn9MwDFxSthPbrobbkny57dAb8uwOB8KglMR5qSytMQy7Gh9m2GMu0X/ 1pbudfqLMDwkqGQbLt5qBVLk9shEMCS0BJhM+V/nIG1DHr/PZSI= -----END CERTIFICATE-----Generated at Fri Sep 25 09:02:20 2026 by rpki-client