$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft File: 3028A8BB1ECF7550222580449D4FA78158DBF42A.mft (raw, json) Hash identifier: 6sQp6+efdQC48ovoRxRK4QJV2dZU3TR8/TgJkm03vRk= Subject key identifier: 84:12:77:A6:25:E7:4B:FD:61:63:10:AB:1B:94:38:16:70:A2:94:5D Authority key identifier: 30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A Certificate issuer: /CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Certificate serial: 6844D2D3D0EDB4747FDD4EE3F592D20D44FA8294 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:16:01 +0000 Manifest this update: Wed 23 Sep 2026 20:11:01 +0000 Manifest next update: Thu 24 Sep 2026 22:50:01 +0000 Files and hashes: 1: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: EAY48hYNH/6TUE1xmrb2C7cSV9ZpqN9x7POku5Es1R0=) 2: 3028A8BB1ECF7550222580449D4FA78158DBF42A.crl (hash: vMCcLIi8doIsisP5iqHT6xPlUh2bdjl9YgjblWFvSUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:44:d2:d3:d0:ed:b4:74:7f:dd:4e:e3:f5:92:d2:0d:44:fa:82:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Validity Not Before: Sep 23 20:11:01 2026 GMT Not After : Sep 24 22:50:01 2026 GMT Subject: CN=841277A625E74BFD616310AB1B94381670A2945D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:64:48:74:96:d1:03:c1:4e:df:45:55:47: cb:51:2f:cc:44:8a:40:91:f7:4a:92:1f:82:30:6e: 66:b4:6e:57:3e:62:c3:51:7e:89:26:9b:4e:82:b8: 87:30:56:05:78:fa:f4:f7:5f:44:3a:fb:3a:40:3d: ba:cc:01:47:2d:df:40:53:9c:84:39:b1:d9:86:c2: c1:f9:87:ac:6a:cf:d5:9c:59:90:a1:5f:4a:31:d4: ad:2b:0b:70:bf:c1:2b:bc:17:9e:08:48:cb:64:ae: 01:ce:eb:f4:ef:96:e4:63:20:2f:ed:2a:2f:46:58: 0c:9a:61:55:9d:50:6a:ec:5f:11:72:15:b3:ad:d1: 8a:ce:5d:83:66:59:b2:90:a6:3f:2a:b1:76:dc:53: d7:b5:13:b8:ac:70:c8:79:d5:61:b5:bf:af:20:0b: ee:16:5e:3d:cc:15:ae:28:9a:6f:25:c5:2c:f5:4a: 98:79:3e:e3:cc:b2:a4:94:52:1a:34:78:5a:b5:92: e8:73:18:19:57:d2:ab:d8:90:7c:f1:74:f3:bf:08: 6a:bf:7a:c5:77:31:bc:5c:57:c9:d4:5c:52:31:59: 6c:f8:0b:4b:70:d3:a4:85:60:16:66:a2:80:91:6a: 84:98:cd:bb:c3:31:00:61:72:dd:25:26:fe:1a:3b: 57:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:12:77:A6:25:E7:4B:FD:61:63:10:AB:1B:94:38:16:70:A2:94:5D X509v3 Authority Key Identifier: keyid:30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:41:c9:c3:f5:34:40:db:f6:37:ea:34:9e:55:9a:88:06:aa: 3a:61:85:dc:98:25:e7:fd:dc:2d:f4:60:66:d8:ea:6e:ee:c0: 56:06:82:d2:74:81:26:80:b7:3c:39:d3:ca:9a:4e:05:f4:bc: 01:35:02:80:c0:ab:9c:21:f3:bb:1b:a6:d4:41:de:de:2f:fc: 78:98:01:5b:c5:94:32:a6:c3:67:32:cf:c0:21:48:69:f7:64: c1:18:9e:23:ec:fc:d1:fa:a5:be:3c:a6:e1:e9:77:86:46:3b: b7:c7:7b:94:a0:20:0f:e3:63:1e:56:a8:16:4a:8c:4a:ec:cd: 31:e7:66:ab:b4:0b:07:3a:70:27:1e:a0:6d:15:60:e9:00:a7: ff:0d:ac:4b:0b:87:66:21:01:72:95:0f:51:3d:a3:59:bc:61: 96:04:c4:e9:55:07:38:9d:15:01:e6:4f:fb:ad:0c:c1:f3:4c: 7f:94:a7:64:a7:91:1f:43:43:63:26:9d:01:9c:a6:ab:b3:0e: b0:e0:34:85:36:97:a1:51:65:d7:03:e8:c0:50:4b:d9:ec:cd: d2:16:7b:bd:9a:0c:bc:41:7f:9c:d3:d2:bc:7d:0d:d9:8c:ad: 49:eb:bf:48:36:58:9b:de:2d:4f:94:4b:e4:82:34:2d:75:6d: c8:4b:ce:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaETS09DttHR/3U7j9ZLSDUT6gpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1 OERCRjQyQTAeFw0yNjA5MjMyMDExMDFaFw0yNjA5MjQyMjUwMDFaMDMxMTAvBgNV BAMTKDg0MTI3N0E2MjVFNzRCRkQ2MTYzMTBBQjFCOTQzODE2NzBBMjk0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/GRIdJbRA8FO30VVR8tRL8xE ikCR90qSH4Iwbma0blc+YsNRfokmm06CuIcwVgV4+vT3X0Q6+zpAPbrMAUct30BT nIQ5sdmGwsH5h6xqz9WcWZChX0ox1K0rC3C/wSu8F54ISMtkrgHO6/TvluRjIC/t Ki9GWAyaYVWdUGrsXxFyFbOt0YrOXYNmWbKQpj8qsXbcU9e1E7iscMh51WG1v68g C+4WXj3MFa4omm8lxSz1Sph5PuPMsqSUUho0eFq1kuhzGBlX0qvYkHzxdPO/CGq/ esV3MbxcV8nUXFIxWWz4C0tw06SFYBZmooCRaoSYzbvDMQBhct0lJv4aO1erAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhBJ3piXnS/1hYxCrG5Q4FnCilF0wHwYDVR0j BBgwFoAUMCioux7PdVAiJYBEnU+ngVjb9CowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmZGQ2ZjktYjc5OS00YTk2LTllMmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIx RUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1OERCRjQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDI4QThCQjFFQ0Y3NTUwMjIyNTgwNDQ5RDRGQTc4MTU4REJG NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3 ODE1OERCRjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRBycP1NEDb9jfqNJ5VmogGqjphhdyYJef9 3C30YGbY6m7uwFYGgtJ0gSaAtzw508qaTgX0vAE1AoDAq5wh87sbptRB3t4v/HiY AVvFlDKmw2cyz8AhSGn3ZMEYniPs/NH6pb48puHpd4ZGO7fHe5SgIA/jYx5WqBZK jErszTHnZqu0Cwc6cCceoG0VYOkAp/8NrEsLh2YhAXKVD1E9o1m8YZYExOlVBzid FQHmT/utDMHzTH+Up2SnkR9DQ2MmnQGcpquzDrDgNIU2l6FRZdcD6MBQS9nszdIW e72aDLxBf5zT0rx9DdmMrUnrv0g2WJveLU+US+SCNC11bchLzrU= -----END CERTIFICATE-----Generated at Wed Sep 23 23:16:34 2026 by rpki-client