$ rpki-client -vvf rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft File: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft (raw, json) Hash identifier: P+CRpwBueKCy8roUMQ+V4KzYcZufZXM/mB0qQSDnvnA= Subject key identifier: C7:AF:51:E3:F4:4D:F2:E8:21:3D:33:CE:AD:B8:FB:9B:D5:F4:54:BB Authority key identifier: 28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 Certificate issuer: /CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Certificate serial: 7BDB43952E3F5B97DCBC157699B2718642613105 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:27:34 +0000 Manifest this update: Thu 23 Jul 2026 18:22:34 +0000 Manifest next update: Fri 24 Jul 2026 21:42:34 +0000 Files and hashes: 1: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: IYkMg6+qZ/xVvXBkVi5WzC87htsBExZ9GFp2XLTOPIo=) 2: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl (hash: Akp5rIyry3VZs0SMRn/zllTbZ0zrbY0Ey0BF/xdMT0Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:db:43:95:2e:3f:5b:97:dc:bc:15:76:99:b2:71:86:42:61:31:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Validity Not Before: Jul 23 18:22:34 2026 GMT Not After : Jul 24 21:42:34 2026 GMT Subject: CN=C7AF51E3F44DF2E8213D33CEADB8FB9BD5F454BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:01:50:44:90:cd:f5:73:3f:1c:1c:d1:05:a0: b5:f5:60:10:97:f2:fc:78:f8:b4:f5:0b:f7:e9:f1: 17:26:4b:0b:bc:14:bc:80:6d:4d:63:b7:22:00:ed: 69:02:14:77:05:21:23:fc:48:8b:70:14:25:c1:49: 62:c5:33:a0:1f:17:d6:3d:19:8b:2d:02:e0:3e:6e: 9c:72:04:4c:ea:83:a7:71:e1:37:2f:e1:bb:e3:ac: 84:11:22:40:dd:7c:61:2b:16:1d:a7:e6:44:50:42: 0c:df:31:50:e7:f5:0b:4f:26:7e:a4:17:0c:82:bc: 96:a4:36:0c:12:1f:f6:bd:eb:06:8e:be:0b:87:29: 95:10:69:1f:e8:43:33:96:ee:bc:8d:fd:a8:9d:a6: 08:be:62:e9:96:ab:96:9f:80:82:8e:98:bd:ff:c4: 88:be:d7:1a:ee:8f:6a:82:cb:5d:82:8e:68:61:15: bf:a8:e0:77:92:2f:e3:80:9c:90:21:c6:b6:9c:2c: 52:55:32:8d:fd:98:e8:36:66:2e:50:ba:80:4d:d6: a6:ca:52:03:ec:ea:05:1c:ba:b5:54:00:f7:c2:56: d0:7d:ad:ae:15:ba:ae:85:03:fb:90:4a:98:d4:15: 5a:e8:60:20:b6:68:07:01:df:b1:36:a7:99:6f:36: c7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AF:51:E3:F4:4D:F2:E8:21:3D:33:CE:AD:B8:FB:9B:D5:F4:54:BB X509v3 Authority Key Identifier: keyid:28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d6:60:1d:55:29:ef:48:cd:6e:35:49:3c:c9:92:3f:8b:3f: 1a:35:01:ed:a6:bc:cc:3b:81:99:09:c4:12:4f:8b:87:07:ac: 44:d7:a9:3a:4c:c0:ab:58:bf:f1:b9:41:16:0b:1e:3f:5b:56: fe:0c:25:25:84:f0:d9:e3:22:bf:15:a1:bf:31:e0:bc:d3:0e: 26:db:3b:4a:33:79:37:11:74:6b:de:08:e8:3b:57:16:33:ed: ad:8b:e0:39:b1:cc:38:f9:17:e1:87:46:82:b8:94:58:1d:85: 82:a0:e2:f9:97:fb:23:f6:de:5f:63:e6:ec:91:e5:de:bd:48: 03:09:72:ac:ba:00:60:23:5f:ec:fb:c0:48:d6:c7:36:15:df: 40:96:08:a1:63:2b:ce:2c:d0:57:04:d1:24:d0:cf:07:39:8a: 0f:5c:a6:6e:f3:e8:c4:fc:47:79:5d:57:98:7e:68:ab:5e:38: 74:b0:54:58:e2:47:92:5a:6a:3d:00:83:03:58:21:1d:9b:1d: 49:86:a9:dc:8f:1b:1b:f0:0d:45:7e:66:48:b2:70:1b:9e:dd: e9:aa:25:13:9f:17:40:4f:ec:89:c5:b8:0e:79:3f:f1:01:61: 00:a4:8f:e9:aa:ed:77:18:3f:f5:dc:17:95:3f:e8:93:07:9c: 59:83:a1:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9tDlS4/W5fcvBV2mbJxhkJhMQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBE M0FDRUJEODAeFw0yNjA3MjMxODIyMzRaFw0yNjA3MjQyMTQyMzRaMDMxMTAvBgNV BAMTKEM3QUY1MUUzRjQ0REYyRTgyMTNEMzNDRUFEQjhGQjlCRDVGNDU0QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeAVBEkM31cz8cHNEFoLX1YBCX 8vx4+LT1C/fp8RcmSwu8FLyAbU1jtyIA7WkCFHcFISP8SItwFCXBSWLFM6AfF9Y9 GYstAuA+bpxyBEzqg6dx4Tcv4bvjrIQRIkDdfGErFh2n5kRQQgzfMVDn9QtPJn6k FwyCvJakNgwSH/a96waOvguHKZUQaR/oQzOW7ryN/aidpgi+YumWq5afgIKOmL3/ xIi+1xruj2qCy12CjmhhFb+o4HeSL+OAnJAhxracLFJVMo39mOg2Zi5QuoBN1qbK UgPs6gUcurVUAPfCVtB9ra4Vuq6FA/uQSpjUFVroYCC2aAcB37E2p5lvNsfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx69R4/RN8ughPTPOrbj7m9X0VLswHwYDVR0j BBgwFoAUKPxHOwN5kOGxKyKpuvsZANOs69gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk4OGMwZjItMjgwMC00OGRhLWE4M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0Iw Mzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBEM0FDRUJEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOEZDNDczQjAzNzk5MEUxQjEyQjIyQTlCQUZCMTkwMEQzQUNF QkQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5 MDBEM0FDRUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfWYB1VKe9IzW41STzJkj+LPxo1Ae2mvMw7 gZkJxBJPi4cHrETXqTpMwKtYv/G5QRYLHj9bVv4MJSWE8NnjIr8Vob8x4LzTDibb O0ozeTcRdGveCOg7VxYz7a2L4DmxzDj5F+GHRoK4lFgdhYKg4vmX+yP23l9j5uyR 5d69SAMJcqy6AGAjX+z7wEjWxzYV30CWCKFjK84s0FcE0STQzwc5ig9cpm7z6MT8 R3ldV5h+aKteOHSwVFjiR5Jaaj0AgwNYIR2bHUmGqdyPGxvwDUV+ZkiycBue3emq JROfF0BP7InFuA55P/EBYQCkj+mq7XcYP/XcF5U/6JMHnFmDoc4= -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:26 2026 by rpki-client