$ rpki-client -vvf rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft File: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft (raw, json) Hash identifier: a16llP22udwJPUz/9neEGO26YVrrzqZZ75leVC1GqzY= Subject key identifier: 4A:20:AD:3F:BD:3A:F7:22:E9:42:13:75:84:4D:2B:03:30:81:22:D0 Authority key identifier: 02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 Certificate issuer: /CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Certificate serial: 544D9E99FBF70046CBB1356DFF8E9EF43E302B0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:10:36 +0000 Manifest this update: Tue 12 May 2026 09:05:36 +0000 Manifest next update: Wed 13 May 2026 09:10:36 +0000 Files and hashes: 1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: BUSB0kLsC7pjKXi5bhLXUPIzYoFZsUEccBkiDUzp6D8=) 2: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl (hash: RPcN2oviZ8egnkSiGdqe4UqeB5ZgDf0CoK/uOitUMbo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4d:9e:99:fb:f7:00:46:cb:b1:35:6d:ff:8e:9e:f4:3e:30:2b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Validity Not Before: May 12 09:05:36 2026 GMT Not After : May 13 09:10:36 2026 GMT Subject: CN=4A20AD3FBD3AF722E9421375844D2B03308122D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:b9:ee:7f:05:a0:03:6d:eb:5f:0c:8d:a4: da:29:92:6f:4e:d5:29:ba:77:be:cb:5f:ad:10:36: 5b:d8:16:06:33:a6:c3:41:f4:18:0f:43:c4:36:02: 89:07:14:c0:02:cd:8b:36:10:81:ab:47:ea:f9:40: 91:bc:17:06:c4:f8:4e:3a:3d:9c:e0:fe:d2:6d:90: ef:37:6d:f5:8c:3c:69:2f:16:5b:56:1d:93:7e:99: 65:9b:d5:dd:5c:bd:c1:01:5b:d5:3a:a5:33:a0:68: 75:b8:0d:da:5b:21:d1:9a:5a:3c:7b:51:02:04:3c: 42:84:ea:2c:48:19:9b:c2:2a:07:72:0a:d5:84:69: 89:46:d2:6e:5f:b6:78:83:6b:aa:eb:3b:14:15:d1: dc:f7:85:88:28:bf:a0:45:be:10:37:6f:1b:2a:31: 3e:b8:97:be:18:56:60:c3:ed:f1:6d:66:ae:75:9c: 0c:b6:f3:2a:69:5f:51:78:e0:55:64:44:64:71:d4: be:b4:20:ea:24:80:b6:f2:df:7c:7f:ec:2d:80:91: b5:48:3b:7c:af:58:47:51:8e:ca:8a:50:d3:bb:2d: f7:fd:98:15:70:98:cb:53:df:00:f7:65:54:61:2b: c0:5a:e2:c6:dc:13:65:fe:c4:88:8e:3f:15:56:36: 4f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:20:AD:3F:BD:3A:F7:22:E9:42:13:75:84:4D:2B:03:30:81:22:D0 X509v3 Authority Key Identifier: keyid:02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:09:09:ea:e2:38:8d:3c:03:9c:47:45:93:26:77:30:9b:3d: dd:d9:00:23:6b:fb:03:eb:7b:67:fe:f7:e6:4b:91:cd:d5:25: 14:7c:fa:68:39:d6:43:df:c1:e5:bc:5c:f8:4d:b3:10:ba:bb: 5a:64:dc:1c:4c:88:8a:56:45:4c:eb:03:61:01:8f:4d:5c:d4: 9a:c3:80:29:ea:75:1a:b3:48:c9:1f:06:68:a0:59:5a:9f:cb: 1f:7a:75:1d:e3:15:63:8f:99:40:db:89:4c:72:31:ea:a1:70: b4:0f:d3:86:b8:d9:67:34:04:55:76:46:e8:28:a5:2a:2f:9b: 17:59:07:06:54:ae:49:21:77:98:8c:04:fa:5c:19:8c:5f:1a: c7:14:ed:55:df:9e:d6:5e:8c:47:6f:1f:22:61:44:d7:b2:14: d6:f9:2e:f2:39:6a:eb:cc:03:c9:e7:09:1a:48:e6:e6:b2:a1: 8a:f5:c7:91:ee:90:ea:6d:e2:1a:8f:1b:e3:a1:0e:ab:37:87: a1:91:d9:5d:8a:3f:c8:e1:38:d2:8f:4e:79:ad:3c:30:b7:ac: 19:66:58:6a:58:69:e6:d4:a5:80:06:6d:0c:b2:bc:4f:6c:3c: e4:98:cd:f4:9d:6b:06:44:13:7a:f0:18:61:ba:e7:cb:4b:55: 2a:c0:7a:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVE2emfv3AEbLsTVt/46e9D4wKwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlD MjQ0MkFEOTAeFw0yNjA1MTIwOTA1MzZaFw0yNjA1MTMwOTEwMzZaMDMxMTAvBgNV BAMTKDRBMjBBRDNGQkQzQUY3MjJFOTQyMTM3NTg0NEQyQjAzMzA4MTIyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//rnufwWgA23rXwyNpNopkm9O 1Sm6d77LX60QNlvYFgYzpsNB9BgPQ8Q2AokHFMACzYs2EIGrR+r5QJG8FwbE+E46 PZzg/tJtkO83bfWMPGkvFltWHZN+mWWb1d1cvcEBW9U6pTOgaHW4DdpbIdGaWjx7 UQIEPEKE6ixIGZvCKgdyCtWEaYlG0m5ftniDa6rrOxQV0dz3hYgov6BFvhA3bxsq MT64l74YVmDD7fFtZq51nAy28yppX1F44FVkRGRx1L60IOokgLby33x/7C2AkbVI O3yvWEdRjsqKUNO7Lff9mBVwmMtT3wD3ZVRhK8Ba4sbcE2X+xIiOPxVWNk8TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSiCtP7069yLpQhN1hE0rAzCBItAwHwYDVR0j BBgwFoAUAotyiY4Lq880cMfonsbh+cJEKtkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg1Y2JkOTUtNTc0Zi00MDViLThiZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4 RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlDMjQ0MkFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCNzI4OThFMEJBQkNGMzQ3MEM3RTg5RUM2RTFGOUMyNDQy QUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUx RjlDMjQ0MkFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMsJCeriOI08A5xHRZMmdzCbPd3ZACNr+wPr e2f+9+ZLkc3VJRR8+mg51kPfweW8XPhNsxC6u1pk3BxMiIpWRUzrA2EBj01c1JrD gCnqdRqzSMkfBmigWVqfyx96dR3jFWOPmUDbiUxyMeqhcLQP04a42Wc0BFV2Rugo pSovmxdZBwZUrkkhd5iMBPpcGYxfGscU7VXfntZejEdvHyJhRNeyFNb5LvI5auvM A8nnCRpI5uayoYr1x5HukOpt4hqPG+OhDqs3h6GR2V2KP8jhONKPTnmtPDC3rBlm WGpYaebUpYAGbQyyvE9sPOSYzfSdawZEE3rwGGG658tLVSrAeoQ= -----END CERTIFICATE-----Generated at Tue May 12 22:49:57 2026 by rpki-client