$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft File: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft (raw, json) Hash identifier: rE6gKxZFzyhjA6Iq2ciZBIRf6/Ox+xtKUHSCVE1n/d8= Subject key identifier: 3B:47:9F:55:AA:C5:B8:45:DD:1F:E7:47:69:87:10:70:41:22:8C:B4 Authority key identifier: 02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 Certificate issuer: /CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Certificate serial: 797502D68D3F59B12B70659C613A496352181F48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 03:14:16 +0000 Manifest this update: Fri 25 Sep 2026 03:09:16 +0000 Manifest next update: Sat 26 Sep 2026 04:18:16 +0000 Files and hashes: 1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: BUSB0kLsC7pjKXi5bhLXUPIzYoFZsUEccBkiDUzp6D8=) 2: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl (hash: dpmUZFZ0ia62eMNCqhdAlPBxcYH0apqFoQw2Nbm67YE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:75:02:d6:8d:3f:59:b1:2b:70:65:9c:61:3a:49:63:52:18:1f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Validity Not Before: Sep 25 03:09:16 2026 GMT Not After : Sep 26 04:18:16 2026 GMT Subject: CN=3B479F55AAC5B845DD1FE7476987107041228CB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:0c:e4:a1:de:06:d5:0b:2f:da:94:86:dd: e7:14:72:5e:c2:67:73:b4:0c:ee:d3:e1:73:87:fb: 47:50:2e:d6:6e:7d:d7:4c:9e:69:19:d2:a0:c4:c4: 1f:95:fe:9b:e6:5f:6e:a1:a4:1d:55:ee:93:65:a5: c2:b1:c1:11:02:c0:2d:3a:dc:ae:a6:b2:da:fd:65: dc:a3:fa:aa:62:27:25:f8:fa:bc:e7:78:63:77:fd: e1:dc:d6:cd:85:e2:1d:92:6d:2b:98:49:bb:ec:ba: 13:47:9a:c2:6d:6b:65:bc:2b:a3:2f:f7:9d:33:b7: 27:06:2b:13:10:45:cf:c7:02:ba:00:f4:a8:09:db: cd:9e:1b:7a:a3:06:c9:c9:1a:65:57:56:95:52:b8: 19:d2:a9:e9:17:94:21:d0:8c:f7:f5:1c:97:29:1e: 74:7a:08:e0:09:e7:7d:e2:9e:dc:87:9c:20:45:7b: c6:22:c8:4c:b4:89:e5:1a:de:33:99:54:ba:0e:07: 65:3b:da:7f:3b:b5:1c:82:26:2b:cb:8d:4a:47:e0: eb:8b:81:3f:83:f0:7b:8d:16:0b:08:66:33:a5:34: 53:7c:1b:56:77:3e:74:4f:cc:91:53:e5:84:f4:3c: c7:9d:f6:05:42:21:17:3b:b5:08:22:3d:3c:3e:bf: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:47:9F:55:AA:C5:B8:45:DD:1F:E7:47:69:87:10:70:41:22:8C:B4 X509v3 Authority Key Identifier: keyid:02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:63:ed:08:c7:36:38:ea:02:8e:96:55:97:94:29:f0:e4:e3: 43:21:ea:f1:b7:88:12:3b:58:3c:2b:08:c3:9a:dc:d8:20:6f: bc:5f:14:63:49:15:66:99:d5:bd:c0:dd:03:cd:d2:c4:8e:7d: 92:88:67:f2:15:31:dc:7c:25:72:04:f4:9e:4e:60:26:41:27: 70:d1:37:fc:63:a6:89:01:f5:c0:1c:96:33:36:b6:e7:a8:58: a2:73:db:85:c6:03:a1:7b:53:ac:0f:aa:19:bf:c4:e5:54:90: ba:07:d4:b7:6f:9e:37:e7:59:a0:3e:d8:fe:ab:0d:58:05:b3: c6:5f:4c:27:83:48:4d:28:68:71:63:34:0d:a6:c1:00:62:ac: 59:f9:d0:83:95:bc:bd:c5:96:0e:49:5f:d9:b6:6e:90:c1:6c: db:85:c9:55:38:44:18:3b:91:44:12:ae:e1:76:1a:0c:b9:15: ad:a7:91:51:c9:e8:fb:10:0b:85:8a:f4:aa:4c:78:85:f8:8a: 6a:45:77:52:ac:57:bf:79:d9:95:e9:48:13:0e:e5:35:38:00: ba:ff:4b:b4:3d:28:af:9c:b4:30:50:8a:d7:a4:ad:34:97:44: 09:58:43:75:c4:bc:4e:73:e3:81:0b:af:b3:b3:0e:a8:9f:99: c8:53:d8:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXUC1o0/WbErcGWcYTpJY1IYH0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlD MjQ0MkFEOTAeFw0yNjA5MjUwMzA5MTZaFw0yNjA5MjYwNDE4MTZaMDMxMTAvBgNV BAMTKDNCNDc5RjU1QUFDNUI4NDVERDFGRTc0NzY5ODcxMDcwNDEyMjhDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxiQzkod4G1Qsv2pSG3ecUcl7C Z3O0DO7T4XOH+0dQLtZufddMnmkZ0qDExB+V/pvmX26hpB1V7pNlpcKxwRECwC06 3K6mstr9Zdyj+qpiJyX4+rzneGN3/eHc1s2F4h2SbSuYSbvsuhNHmsJta2W8K6Mv 950ztycGKxMQRc/HAroA9KgJ282eG3qjBsnJGmVXVpVSuBnSqekXlCHQjPf1HJcp HnR6COAJ533intyHnCBFe8YiyEy0ieUa3jOZVLoOB2U72n87tRyCJivLjUpH4OuL gT+D8HuNFgsIZjOlNFN8G1Z3PnRPzJFT5YT0PMed9gVCIRc7tQgiPTw+v5RfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO0efVarFuEXdH+dHaYcQcEEijLQwHwYDVR0j BBgwFoAUAotyiY4Lq880cMfonsbh+cJEKtkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg1Y2JkOTUtNTc0Zi00MDViLThiZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4 RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlDMjQ0MkFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCNzI4OThFMEJBQkNGMzQ3MEM3RTg5RUM2RTFGOUMyNDQy QUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUx RjlDMjQ0MkFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1j7QjHNjjqAo6WVZeUKfDk40Mh6vG3iBI7 WDwrCMOa3Nggb7xfFGNJFWaZ1b3A3QPN0sSOfZKIZ/IVMdx8JXIE9J5OYCZBJ3DR N/xjpokB9cAcljM2tueoWKJz24XGA6F7U6wPqhm/xOVUkLoH1LdvnjfnWaA+2P6r DVgFs8ZfTCeDSE0oaHFjNA2mwQBirFn50IOVvL3Flg5JX9m2bpDBbNuFyVU4RBg7 kUQSruF2Ggy5Fa2nkVHJ6PsQC4WK9KpMeIX4impFd1KsV7952ZXpSBMO5TU4ALr/ S7Q9KK+ctDBQitekrTSXRAlYQ3XEvE5z44ELr7OzDqifmchT2PM= -----END CERTIFICATE-----Generated at Fri Sep 25 08:36:18 2026 by rpki-client