$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft File: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft (raw, json) Hash identifier: alUob+Z4i9hyKIZnG4aC9l3NFAAHVK23wvuoZjvPtDU= Subject key identifier: 4E:0C:3D:41:90:CC:A7:1D:61:9D:2A:DB:21:22:BB:D2:06:06:B8:EF Authority key identifier: 02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 Certificate issuer: /CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Certificate serial: 554DD57F31783AE40DE41D8DD72C3A8D40156EA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:19:33 +0000 Manifest this update: Fri 24 Jul 2026 00:14:33 +0000 Manifest next update: Sat 25 Jul 2026 04:06:33 +0000 Files and hashes: 1: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl (hash: kXW3L2BmOOzwiU+Jq/tZgZwara/hDoaWuto+Od2i+SA=) 2: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: N8zhnsK8z7VxJNfcfyiLUZPoMiisc/2RHnWBqlz/4MI=) 3: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: OyG3mFe6SrJhcLOwFyBCeuQpeyeUH09cXSgAgqZj+fA=) 4: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: OZMHHHmslz7MYh9R9Ib0RjlOxsJyDimPwwAqaL88/ng=) 5: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: GtQhQt5lC+popSxKBpEXClSBs/pxIHaZp5GFBcVq7Ds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4d:d5:7f:31:78:3a:e4:0d:e4:1d:8d:d7:2c:3a:8d:40:15:6e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Validity Not Before: Jul 24 00:14:33 2026 GMT Not After : Jul 25 04:06:33 2026 GMT Subject: CN=4E0C3D4190CCA71D619D2ADB2122BBD20606B8EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7d:71:7b:03:6e:b3:ac:da:f5:2c:22:38:99: c0:22:23:6c:b1:e6:cf:14:7e:d5:03:b6:66:92:f2: 17:51:24:5d:6d:af:1e:c1:2f:59:e4:be:e5:9a:b9: bb:ba:78:2e:b5:35:ee:0e:e7:13:b5:3a:ea:6a:02: 4c:1c:33:90:5d:81:38:d9:5e:11:43:3e:39:48:b9: 09:f3:8f:cc:49:3b:25:2f:3d:86:70:88:99:71:10: ae:89:6f:81:76:41:2d:1f:1c:cd:b9:ba:08:94:43: 28:36:dc:7a:a4:e6:c8:dd:93:96:40:c1:45:9b:5d: 82:a0:2d:7f:af:c6:f5:4e:56:2f:22:89:f9:95:3d: 81:8c:0a:3b:b5:2d:be:af:d6:d9:aa:2e:5b:08:b3: 17:b1:10:ee:9e:0b:b9:1d:76:8b:81:e7:dd:81:f8: 7e:01:51:63:1e:6a:02:be:78:6a:fa:5d:36:e8:5c: 27:a6:b1:1e:46:79:fb:e2:b3:06:47:8f:09:60:ab: 4a:37:5b:6d:f7:45:7b:5e:f9:b3:10:57:c8:76:d2: 45:e6:40:d4:11:7a:23:86:03:f2:d2:61:d1:2e:e6: 0c:e2:15:43:a4:05:81:f0:6e:dd:2c:44:a3:df:82: ee:49:c2:6d:39:5c:a5:dc:05:3b:a8:55:b5:84:fe: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0C:3D:41:90:CC:A7:1D:61:9D:2A:DB:21:22:BB:D2:06:06:B8:EF X509v3 Authority Key Identifier: keyid:02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:46:84:97:ca:8e:d7:08:e2:77:76:ec:86:17:fd:1b:64:17: dd:6e:7f:fb:7d:f5:89:e4:5e:f7:d6:72:7d:90:bb:1a:84:d7: 02:09:d9:e0:88:c5:a1:28:4f:62:d5:48:91:1d:12:bf:22:d7: 72:f3:7b:21:ac:18:00:c5:22:13:03:9b:3f:6a:9e:17:1b:94: c6:e3:00:08:8d:9e:1c:a7:48:7b:a3:83:df:7d:b5:e7:ad:ac: c6:4c:30:49:c2:cc:13:d9:d8:07:40:85:e1:cd:02:85:2a:ed: 4d:43:80:97:a3:47:bd:6f:f9:1f:d8:a2:ed:e7:be:90:75:0d: 88:62:4b:e3:f1:66:16:6e:39:23:a4:65:16:b7:9b:e7:cc:5c: dd:3b:2c:0a:98:e1:5e:a0:1a:90:18:9b:59:9b:0d:5e:cb:a2: 0f:2c:a9:03:f4:a8:40:09:25:17:b3:c5:af:f3:80:90:10:95: 85:5c:d3:46:df:d4:60:ce:60:1d:6f:54:aa:7b:6d:9f:c7:cc: d1:90:5e:2f:48:dc:f5:93:26:07:fd:55:ca:7f:46:49:02:98: e9:5a:5f:e2:bf:60:82:64:60:37:a3:95:ab:72:c4:cb:4b:b7: e4:2a:be:16:35:d1:2d:c3:2e:88:ba:63:26:ce:2e:e8:7f:03: 8f:f5:a4:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVU3VfzF4OuQN5B2N1yw6jUAVbqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNBMDdD MjE4QTVBNjAeFw0yNjA3MjQwMDE0MzNaFw0yNjA3MjUwNDA2MzNaMDMxMTAvBgNV BAMTKDRFMEMzRDQxOTBDQ0E3MUQ2MTlEMkFEQjIxMjJCQkQyMDYwNkI4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDafXF7A26zrNr1LCI4mcAiI2yx 5s8UftUDtmaS8hdRJF1trx7BL1nkvuWaubu6eC61Ne4O5xO1OupqAkwcM5BdgTjZ XhFDPjlIuQnzj8xJOyUvPYZwiJlxEK6Jb4F2QS0fHM25ugiUQyg23Hqk5sjdk5ZA wUWbXYKgLX+vxvVOVi8iifmVPYGMCju1Lb6v1tmqLlsIsxexEO6eC7kddouB592B +H4BUWMeagK+eGr6XTboXCemsR5GefviswZHjwlgq0o3W233RXte+bMQV8h20kXm QNQReiOGA/LSYdEu5gziFUOkBYHwbt0sRKPfgu5Jwm05XKXcBTuoVbWE/r0ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTgw9QZDMpx1hnSrbISK70gYGuO8wHwYDVR0j BBgwFoAUAos+olHDpZevVdTbPvQ6B8IYpaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM2YjJiZDctZDdmMS00ODE1LWE2MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1 MUMzQTU5N0FGNTVENERCM0VGNDNBMDdDMjE4QTVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCM0VBMjUxQzNBNTk3QUY1NUQ0REIzRUY0M0EwN0MyMThB NUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNB MDdDMjE4QTVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZGhJfKjtcI4nd27IYX/RtkF91uf/t99Ynk XvfWcn2QuxqE1wIJ2eCIxaEoT2LVSJEdEr8i13LzeyGsGADFIhMDmz9qnhcblMbj AAiNnhynSHujg999teetrMZMMEnCzBPZ2AdAheHNAoUq7U1DgJejR71v+R/You3n vpB1DYhiS+PxZhZuOSOkZRa3m+fMXN07LAqY4V6gGpAYm1mbDV7Log8sqQP0qEAJ JRezxa/zgJAQlYVc00bf1GDOYB1vVKp7bZ/HzNGQXi9I3PWTJgf9Vcp/RkkCmOla X+K/YIJkYDejlatyxMtLt+QqvhY10S3DLoi6YybOLuh/A4/1pGk= -----END CERTIFICATE-----Generated at Fri Jul 24 17:27:08 2026 by rpki-client