$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft File: 3028A8BB1ECF7550222580449D4FA78158DBF42A.mft (raw, json) Hash identifier: hL+x2Xv5z4b46OKWrH7xDov36jQE3/dFPVJXE+eci6I= Subject key identifier: F3:37:01:BA:CD:AC:CE:25:9C:7F:2B:5D:23:7B:38:56:9B:18:45:BF Authority key identifier: 30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A Certificate issuer: /CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Certificate serial: 03DF43DD9D83588F63704F5C54A137478339E0D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 20:50:35 +0000 Manifest this update: Sat 14 Nov 2026 20:45:35 +0000 Manifest next update: Sun 15 Nov 2026 21:32:35 +0000 Files and hashes: 1: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: EAY48hYNH/6TUE1xmrb2C7cSV9ZpqN9x7POku5Es1R0=) 2: 3028A8BB1ECF7550222580449D4FA78158DBF42A.crl (hash: ybA/6xtmwzbgO+KcACb+22O+GNN7mhpu5+5HfbxadkY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:df:43:dd:9d:83:58:8f:63:70:4f:5c:54:a1:37:47:83:39:e0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Validity Not Before: Nov 14 20:45:35 2026 GMT Not After : Nov 15 21:32:35 2026 GMT Subject: CN=F33701BACDACCE259C7F2B5D237B38569B1845BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:0c:2e:87:e4:db:1e:03:65:27:91:91:b2: 51:8b:f7:ab:9e:e2:8b:4d:c3:de:45:6a:9a:4b:93: 3b:a2:38:30:f3:54:47:27:68:4c:6c:17:77:5e:dd: 0b:ec:a9:a1:53:02:e8:68:00:69:ad:f3:ea:f8:ce: d8:45:09:f9:e2:55:42:78:fb:62:7e:f5:55:9b:24: a0:12:ad:69:33:dd:b9:e0:d7:b6:aa:1e:7c:de:06: 29:df:5b:d6:7a:0c:7a:39:a6:b4:03:3b:56:9c:7b: 97:8f:d5:91:8d:f5:48:7c:b8:f6:a1:d0:3b:c4:3e: 23:d2:78:ed:3f:23:eb:ed:a5:53:c8:4f:2b:e6:20: 77:60:e0:9b:01:80:33:d4:b0:4d:cb:13:88:12:68: 23:7c:d1:fe:08:7b:c4:b9:51:8f:2b:00:9b:33:a4: 52:de:59:d9:69:0b:4c:30:e1:91:19:81:f4:05:a2: 87:47:db:6d:e5:56:92:f8:1a:36:0f:16:e7:cb:69: 0c:c0:2e:aa:86:c0:8c:30:a2:a4:24:85:55:1a:4d: 0f:ff:9b:7b:d0:78:8e:98:6b:44:90:73:7c:bc:dd: 42:c5:33:da:6a:46:a6:62:25:b9:df:f9:cc:19:bc: 7b:5f:ea:65:6f:ed:0d:01:e5:ec:20:cf:18:ec:26: ae:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:37:01:BA:CD:AC:CE:25:9C:7F:2B:5D:23:7B:38:56:9B:18:45:BF X509v3 Authority Key Identifier: keyid:30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a5:63:41:69:62:ee:b6:45:39:e7:ce:58:9d:f3:95:fd:26: b2:a7:34:e5:e7:39:e9:e5:ca:ed:22:ef:fb:21:f6:25:1a:6c: 63:14:23:16:5c:97:02:41:fc:13:a6:78:05:a4:19:eb:d7:fb: a1:81:5a:3b:b2:64:30:11:6c:18:62:19:f7:2d:ae:e0:e7:72: 31:dc:b5:d0:62:99:73:5c:12:7b:c4:62:21:6f:be:46:cb:5e: 6f:d7:b7:2f:0f:7f:8a:4e:d7:78:0a:d4:b0:11:d6:84:fb:31: b2:64:13:5f:d4:a6:9e:4f:8e:c9:e0:6b:a4:af:90:e1:6c:53: 79:ea:ef:32:c7:22:65:5e:2e:62:0f:ee:01:da:71:7f:30:94: 5f:99:53:b4:7b:f4:8f:7d:73:c7:73:c1:e8:f5:2f:c0:aa:35: fa:3f:4b:f7:b8:16:c1:9d:f3:b2:e3:31:d6:7f:79:85:f6:42: 82:e8:26:2c:b1:5e:df:c2:88:97:8a:dd:c9:61:31:c4:a0:d5: 9b:1d:ae:bc:17:d0:f1:c4:fc:1e:6e:09:ad:81:c0:63:ad:4f: 0f:2c:5b:48:bd:ca:7a:fe:1a:8c:45:70:ae:08:4e:73:7a:3d: 2e:1d:0b:30:25:9f:a8:74:b5:b3:8c:f2:23:0d:72:a9:08:78: 13:4d:22:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA99D3Z2DWI9jcE9cVKE3R4M54NAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1 OERCRjQyQTAeFw0yNjExMTQyMDQ1MzVaFw0yNjExMTUyMTMyMzVaMDMxMTAvBgNV BAMTKEYzMzcwMUJBQ0RBQ0NFMjU5QzdGMkI1RDIzN0IzODU2OUIxODQ1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4Awuh+TbHgNlJ5GRslGL96ue 4otNw95FappLkzuiODDzVEcnaExsF3de3QvsqaFTAuhoAGmt8+r4zthFCfniVUJ4 +2J+9VWbJKASrWkz3bng17aqHnzeBinfW9Z6DHo5prQDO1ace5eP1ZGN9Uh8uPah 0DvEPiPSeO0/I+vtpVPITyvmIHdg4JsBgDPUsE3LE4gSaCN80f4Ie8S5UY8rAJsz pFLeWdlpC0ww4ZEZgfQFoodH223lVpL4GjYPFufLaQzALqqGwIwwoqQkhVUaTQ// m3vQeI6Ya0SQc3y83ULFM9pqRqZiJbnf+cwZvHtf6mVv7Q0B5ewgzxjsJq5pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8zcBus2sziWcfytdI3s4VpsYRb8wHwYDVR0j BBgwFoAUMCioux7PdVAiJYBEnU+ngVjb9CowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmZGQ2ZjktYjc5OS00YTk2LTllMmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIx RUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1OERCRjQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDI4QThCQjFFQ0Y3NTUwMjIyNTgwNDQ5RDRGQTc4MTU4REJG NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3 ODE1OERCRjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+lY0FpYu62RTnnzlid85X9JrKnNOXnOenl yu0i7/sh9iUabGMUIxZclwJB/BOmeAWkGevX+6GBWjuyZDARbBhiGfctruDncjHc tdBimXNcEnvEYiFvvkbLXm/Xty8Pf4pO13gK1LAR1oT7MbJkE1/Upp5Pjsnga6Sv kOFsU3nq7zLHImVeLmIP7gHacX8wlF+ZU7R79I99c8dzwej1L8CqNfo/S/e4FsGd 87LjMdZ/eYX2QoLoJiyxXt/CiJeK3clhMcSg1ZsdrrwX0PHE/B5uCa2BwGOtTw8s W0i9ynr+GoxFcK4ITnN6PS4dCzAln6h0tbOM8iMNcqkIeBNNIgU= -----END CERTIFICATE-----Generated at Sun Nov 15 00:15:36 2026 by rpki-client