$ rpki-client -vvf rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft File: 3028A8BB1ECF7550222580449D4FA78158DBF42A.mft (raw, json) Hash identifier: /esIvzl3n4SyK3V4jSuNBmWMbybQSHM7B7mlonp2pDM= Subject key identifier: 49:8E:25:02:75:ED:EB:4C:6C:EB:39:78:1B:BF:CD:FA:C9:FA:1B:F5 Authority key identifier: 30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A Certificate issuer: /CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Certificate serial: 108C62DE63B34ECB87D01B6AC4CE22E2AD4DE760 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:46:25 +0000 Manifest this update: Fri 24 Jul 2026 01:41:25 +0000 Manifest next update: Sat 25 Jul 2026 03:11:25 +0000 Files and hashes: 1: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: EAY48hYNH/6TUE1xmrb2C7cSV9ZpqN9x7POku5Es1R0=) 2: 3028A8BB1ECF7550222580449D4FA78158DBF42A.crl (hash: OuWRlRocPaL9gGKCvIi35vSnJ+wvQYGYewks5tS3CBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:8c:62:de:63:b3:4e:cb:87:d0:1b:6a:c4:ce:22:e2:ad:4d:e7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Validity Not Before: Jul 24 01:41:25 2026 GMT Not After : Jul 25 03:11:25 2026 GMT Subject: CN=498E250275EDEB4C6CEB39781BBFCDFAC9FA1BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:67:a3:f6:98:2d:3a:c2:dd:7b:ab:6e:eb: d2:8b:df:05:f2:0d:a4:63:2e:ac:cf:a4:13:4d:ee: fc:3e:dd:3d:c5:1e:cf:fc:e3:7d:2c:60:ba:6d:ca: 95:a2:e1:df:d2:b9:dd:15:90:33:9c:da:d6:d7:9f: 4f:fc:4e:fc:9e:44:ad:a9:02:b0:96:ec:a1:39:11: 80:78:7f:30:5a:a8:ec:3b:39:d6:a7:fb:3f:74:45: 5a:fc:a0:c3:17:12:ec:7f:14:2d:d9:9e:a5:f8:d1: f6:f8:45:be:93:7a:25:e0:75:d0:65:6a:56:da:8f: 89:ff:2e:d8:5e:63:31:4b:dc:f4:96:19:8e:d0:b9: 51:a0:b4:4a:c3:66:db:ef:4c:9c:73:b6:8c:c8:b0: db:4a:54:94:da:6d:5a:e3:53:b3:63:da:f7:d4:9a: a6:67:ae:b6:af:91:6f:e4:d3:fb:91:93:bb:11:2f: 58:d9:2b:f0:81:60:76:7a:68:ff:3f:a9:e4:10:5d: 0b:b0:b4:c7:7e:3b:77:5f:66:9d:2e:19:19:2b:b5: 37:82:1a:ba:5b:a6:ae:73:cc:2f:c2:3d:3a:19:db: 65:a3:f9:0a:f4:db:97:82:15:3d:70:18:a7:df:7d: a5:43:a8:21:55:f1:8b:51:e0:67:1a:76:21:aa:f8: 41:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8E:25:02:75:ED:EB:4C:6C:EB:39:78:1B:BF:CD:FA:C9:FA:1B:F5 X509v3 Authority Key Identifier: keyid:30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:e7:cb:c9:c0:4e:16:19:3f:44:5c:6b:64:15:6c:64:2f:a7: 7c:38:1f:38:b0:a7:0f:e1:d4:03:3f:f7:87:a0:c4:3f:4c:ee: 80:28:f6:98:bc:c1:d1:b6:03:16:5b:dc:69:33:b5:41:f7:31: 89:5e:79:32:0d:16:5b:cf:33:e4:f1:c4:ab:07:5a:d1:60:e3: 9c:bd:88:31:73:96:46:51:5f:97:76:de:a1:3e:88:3a:9e:28: 5b:6e:7c:37:8e:0a:e0:69:80:42:22:b0:ed:97:7c:1c:0b:3e: 92:46:4e:82:c0:7c:98:b1:aa:21:d8:16:5c:39:95:c1:bd:16: 07:bb:0a:c8:f6:2f:38:4b:04:21:04:15:34:1a:99:df:52:a6: a7:28:e6:3c:07:3c:2a:0b:64:da:be:ff:89:9d:4e:e9:15:03: 90:8a:dd:db:a9:6a:e1:83:30:65:02:91:0e:0a:ab:19:c5:33: 7b:cc:01:6a:a2:57:74:ca:6d:e6:ef:21:8c:92:2d:e5:92:24: 98:ab:b6:0f:ed:8c:c0:3a:d2:66:f5:fa:68:d0:c7:b2:f4:4c: 1a:b5:7c:a7:ce:2e:64:1c:87:2e:a7:af:4b:c3:2f:b6:6d:f8: bb:41:d5:69:51:4f:7a:4c:37:70:fc:5c:53:13:4a:42:71:48: 34:da:95:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIxi3mOzTsuH0BtqxM4i4q1N52AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1 OERCRjQyQTAeFw0yNjA3MjQwMTQxMjVaFw0yNjA3MjUwMzExMjVaMDMxMTAvBgNV BAMTKDQ5OEUyNTAyNzVFREVCNEM2Q0VCMzk3ODFCQkZDREZBQzlGQTFCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDGej9pgtOsLde6tu69KL3wXy DaRjLqzPpBNN7vw+3T3FHs/8430sYLptypWi4d/Sud0VkDOc2tbXn0/8TvyeRK2p ArCW7KE5EYB4fzBaqOw7Odan+z90RVr8oMMXEux/FC3ZnqX40fb4Rb6TeiXgddBl albaj4n/LtheYzFL3PSWGY7QuVGgtErDZtvvTJxztozIsNtKVJTabVrjU7Nj2vfU mqZnrravkW/k0/uRk7sRL1jZK/CBYHZ6aP8/qeQQXQuwtMd+O3dfZp0uGRkrtTeC Grpbpq5zzC/CPToZ22Wj+Qr025eCFT1wGKfffaVDqCFV8YtR4GcadiGq+EEFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSY4lAnXt60xs6zl4G7/N+sn6G/UwHwYDVR0j BBgwFoAUMCioux7PdVAiJYBEnU+ngVjb9CowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmZGQ2ZjktYjc5OS00YTk2LTllMmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIx RUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1OERCRjQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDI4QThCQjFFQ0Y3NTUwMjIyNTgwNDQ5RDRGQTc4MTU4REJG NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3 ODE1OERCRjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTny8nAThYZP0Rca2QVbGQvp3w4Hziwpw/h 1AM/94egxD9M7oAo9pi8wdG2AxZb3GkztUH3MYleeTINFlvPM+TxxKsHWtFg45y9 iDFzlkZRX5d23qE+iDqeKFtufDeOCuBpgEIisO2XfBwLPpJGToLAfJixqiHYFlw5 lcG9Fge7Csj2LzhLBCEEFTQamd9Spqco5jwHPCoLZNq+/4mdTukVA5CK3dupauGD MGUCkQ4KqxnFM3vMAWqiV3TKbebvIYySLeWSJJirtg/tjMA60mb1+mjQx7L0TBq1 fKfOLmQchy6nr0vDL7Zt+LtB1WlRT3pMN3D8XFMTSkJxSDTalcw= -----END CERTIFICATE-----Generated at Fri Jul 24 11:16:47 2026 by rpki-client