$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft File: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft (raw, json) Hash identifier: hsFr3LHO950pTRiIqinkUgFl3yYlUY2RTwiZVIpLVss= Subject key identifier: 34:14:E8:8E:E3:80:C9:81:11:A0:39:68:C8:C8:17:DB:C6:A1:A3:EB Authority key identifier: 28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 Certificate issuer: /CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Certificate serial: 4452E85CF3CC843EDA46C37A17CBC9AEB796AA44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 07:35:02 +0000 Manifest this update: Thu 24 Sep 2026 07:30:02 +0000 Manifest next update: Fri 25 Sep 2026 09:17:02 +0000 Files and hashes: 1: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: IYkMg6+qZ/xVvXBkVi5WzC87htsBExZ9GFp2XLTOPIo=) 2: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl (hash: kJAQqhoaf0p1XlsMecJGnNxcICK41NCyGQvkHNRID4Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:52:e8:5c:f3:cc:84:3e:da:46:c3:7a:17:cb:c9:ae:b7:96:aa:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Validity Not Before: Sep 24 07:30:02 2026 GMT Not After : Sep 25 09:17:02 2026 GMT Subject: CN=3414E88EE380C98111A03968C8C817DBC6A1A3EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:f4:5c:59:47:42:8e:af:2d:7f:07:47:14: 69:3c:27:4e:99:36:e3:97:be:22:28:b5:d8:2c:cb: 4f:6e:ca:0d:cf:34:e4:d6:d3:92:46:ea:68:ec:fc: ac:9d:11:e5:6a:a0:81:26:82:f3:ef:e1:bc:72:49: a9:72:5f:c3:91:f0:92:53:b4:71:ce:d6:c2:8b:8d: b1:de:8d:2f:2e:18:45:90:8c:46:e7:67:c8:9d:56: d3:75:5f:87:a6:50:9d:6f:3a:e5:cc:9c:88:df:67: 69:be:95:2b:46:2d:a7:e1:f2:50:84:22:80:53:12: 25:c5:72:bd:85:a4:e5:ca:df:49:65:2a:22:40:c3: 7b:a3:ec:ba:fb:7c:8f:32:14:de:e2:40:58:5a:15: f2:41:60:eb:90:a5:5c:6a:aa:3b:0b:14:00:c5:81: 5e:43:c7:c2:1f:01:89:0d:b3:25:5c:e0:e4:1b:da: 2b:77:69:22:3c:6a:d4:d0:16:5d:19:9d:ec:d3:33: 12:b2:57:00:ce:12:3d:e7:ac:c7:a7:b2:be:2f:d8: b2:ef:6c:ab:c8:56:30:90:17:4f:d3:ed:e9:0e:a8: f2:32:e6:4a:0b:4b:d7:64:86:4f:23:e2:b8:88:ce: 81:63:b6:59:93:3c:a7:0f:ed:31:aa:9a:4a:2e:b3: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:14:E8:8E:E3:80:C9:81:11:A0:39:68:C8:C8:17:DB:C6:A1:A3:EB X509v3 Authority Key Identifier: keyid:28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:8e:1d:17:70:27:18:c3:83:90:b5:80:80:de:02:bf:a3:47: d2:90:6e:6f:8a:97:18:42:70:27:fa:36:90:ec:ad:e3:91:e7: 25:9f:ee:1c:fb:2f:fc:de:c2:9e:a5:2a:b5:a9:c1:6f:9b:e3: ad:52:78:d6:a1:df:05:fa:a9:70:84:41:ef:f3:d1:fd:bf:e0: a4:3d:47:76:9b:ee:87:44:72:7d:ca:90:fe:d6:7c:6e:44:3b: fd:7a:6a:3f:26:95:25:80:73:fe:52:b5:c1:71:3d:20:97:e3: b0:65:95:4a:29:35:d6:36:70:16:06:69:45:3b:11:e5:4f:66: f6:d2:86:e2:a4:d3:d5:d3:7a:07:7c:3b:48:02:ad:3f:2a:13: ad:e9:1c:7d:eb:27:56:fc:53:c4:fd:09:61:fc:4a:60:c0:2c: 0d:90:fe:c4:25:3a:e9:02:e1:47:fe:e3:2f:0f:92:98:52:62: 2f:fb:a2:c3:8a:6e:57:aa:fb:7d:fb:cf:89:f5:7d:7c:a5:ad: 0d:e9:70:89:30:53:22:20:f7:2b:d5:a4:4f:bf:69:81:c6:e5: 0d:bb:63:a4:32:04:a2:c7:63:14:b4:7d:b1:8c:7f:93:c6:34: 5a:7b:dd:fd:07:36:eb:0e:16:8b:cf:a7:10:a8:52:55:6b:a0: 2f:c2:49:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURFLoXPPMhD7aRsN6F8vJrreWqkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBE M0FDRUJEODAeFw0yNjA5MjQwNzMwMDJaFw0yNjA5MjUwOTE3MDJaMDMxMTAvBgNV BAMTKDM0MTRFODhFRTM4MEM5ODExMUEwMzk2OEM4QzgxN0RCQzZBMUEzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqIvRcWUdCjq8tfwdHFGk8J06Z NuOXviIotdgsy09uyg3PNOTW05JG6mjs/KydEeVqoIEmgvPv4bxySalyX8OR8JJT tHHO1sKLjbHejS8uGEWQjEbnZ8idVtN1X4emUJ1vOuXMnIjfZ2m+lStGLafh8lCE IoBTEiXFcr2FpOXK30llKiJAw3uj7Lr7fI8yFN7iQFhaFfJBYOuQpVxqqjsLFADF gV5Dx8IfAYkNsyVc4OQb2it3aSI8atTQFl0ZnezTMxKyVwDOEj3nrMensr4v2LLv bKvIVjCQF0/T7ekOqPIy5koLS9dkhk8j4riIzoFjtlmTPKcP7TGqmkous1NVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNBTojuOAyYERoDloyMgX28aho+swHwYDVR0j BBgwFoAUKPxHOwN5kOGxKyKpuvsZANOs69gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk4OGMwZjItMjgwMC00OGRhLWE4M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0Iw Mzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBEM0FDRUJEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOEZDNDczQjAzNzk5MEUxQjEyQjIyQTlCQUZCMTkwMEQzQUNF QkQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5 MDBEM0FDRUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACOHRdwJxjDg5C1gIDeAr+jR9KQbm+KlxhC cCf6NpDsreOR5yWf7hz7L/zewp6lKrWpwW+b461SeNah3wX6qXCEQe/z0f2/4KQ9 R3ab7odEcn3KkP7WfG5EO/16aj8mlSWAc/5StcFxPSCX47BllUopNdY2cBYGaUU7 EeVPZvbShuKk09XTegd8O0gCrT8qE63pHH3rJ1b8U8T9CWH8SmDALA2Q/sQlOukC 4Uf+4y8PkphSYi/7osOKbleq+337z4n1fXylrQ3pcIkwUyIg9yvVpE+/aYHG5Q27 Y6QyBKLHYxS0fbGMf5PGNFp73f0HNusOFovPpxCoUlVroC/CSUA= -----END CERTIFICATE-----Generated at Thu Sep 24 23:33:33 2026 by rpki-client