$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft File: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft (raw, json) Hash identifier: RMG+7ZsFw0bjfcYKkCwBjcAV7pT1PRRKbJQPoNU8Ozo= Subject key identifier: A2:FD:05:BF:CF:FE:A1:86:58:B8:94:11:D0:5C:23:99:AF:FD:55:C0 Authority key identifier: 02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 Certificate issuer: /CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Certificate serial: 591A7EDEAF13DAE41464792D999761FA1033DDAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:54:06 +0000 Manifest this update: Thu 24 Sep 2026 10:49:06 +0000 Manifest next update: Fri 25 Sep 2026 11:14:06 +0000 Files and hashes: 1: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl (hash: 3TFlZwnhR6eqZeYgEqirU83YDnsEfed2eT7arA4td7s=) 2: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: BUSB0kLsC7pjKXi5bhLXUPIzYoFZsUEccBkiDUzp6D8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1a:7e:de:af:13:da:e4:14:64:79:2d:99:97:61:fa:10:33:dd:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Validity Not Before: Sep 24 10:49:06 2026 GMT Not After : Sep 25 11:14:06 2026 GMT Subject: CN=A2FD05BFCFFEA18658B89411D05C2399AFFD55C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:59:bb:36:bc:26:b2:1f:3b:dd:e5:23:b5: d6:50:fc:05:5e:4a:ff:68:ef:4e:a7:4a:ce:54:07: 22:c8:e7:49:61:fa:5b:b6:1c:d8:2a:06:cd:46:e4: e2:c9:2c:67:df:6b:23:c8:bf:3a:51:17:69:ee:f2: 4c:16:13:b7:5c:2b:39:46:ae:0e:8a:27:65:b3:f5: f4:11:53:a4:ef:33:54:4e:c8:3c:8a:14:17:e1:ca: a7:a1:ab:81:33:9b:3d:37:b9:23:35:35:db:af:5f: 38:ef:a1:ab:af:81:20:ac:c9:9f:7e:78:f1:53:e5: 14:96:a1:5a:2c:92:db:23:75:f2:30:e7:68:fd:1a: 82:1c:37:e5:3c:b2:a6:ad:dc:27:b0:52:2c:41:c0: 94:77:e2:16:af:9f:3c:d4:33:12:28:05:d0:57:fe: d7:be:3e:82:ed:ba:4f:29:01:c7:49:da:53:e5:41: 14:63:de:92:2d:e5:31:ea:10:44:2c:ad:33:f4:44: 14:a6:48:b8:bd:2e:ed:c1:d0:b1:26:21:7a:85:44: cc:59:dc:8c:57:65:ed:fc:c4:12:82:ce:f1:9e:3e: 21:7e:8a:a2:65:1e:a1:7a:38:92:b5:86:bc:36:80: 9a:9e:24:cb:ca:a1:cf:cc:a2:53:31:a8:05:c7:30: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FD:05:BF:CF:FE:A1:86:58:B8:94:11:D0:5C:23:99:AF:FD:55:C0 X509v3 Authority Key Identifier: keyid:02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:85:87:b9:68:c7:03:19:ac:e8:2c:37:2e:d9:5c:5e:f9:23: ce:8b:02:c4:19:5e:08:b9:ca:b9:d0:1d:4f:56:26:5d:a4:d3: fc:59:72:4b:07:e1:08:a6:a2:1d:59:a9:b5:33:ef:4a:0e:e8: d2:7c:83:5f:06:18:62:cc:1d:42:dc:c0:83:b0:d8:6b:ee:c4: b8:5c:a6:d4:48:81:33:92:ed:54:c3:c8:c2:37:fc:79:51:55: 15:a4:42:0f:f8:9d:44:bf:52:f8:2c:32:88:79:2c:e7:47:85: 8c:9e:21:d0:02:98:62:f2:85:8b:f6:4c:51:83:39:97:17:75: da:7b:a6:70:73:60:1b:2e:97:91:7b:b8:25:e7:02:5b:66:99: 53:1e:34:5d:9f:2a:85:c6:4b:63:df:c9:58:03:60:0b:04:58: 75:16:0a:c0:f5:88:1d:e8:34:d9:b9:0e:64:bb:10:9b:d6:1c: a6:d9:d8:a7:fc:3e:cb:03:27:15:80:e0:19:11:bf:21:c8:b6: 47:29:a1:40:b5:ce:5b:ac:24:5a:16:93:98:6d:d5:38:04:24: 08:03:24:d0:a1:77:f4:50:f5:a1:38:17:33:26:43:43:66:33: 6b:05:d3:1b:b9:7d:39:cc:4b:b5:ef:b1:89:e4:2e:4c:b8:46: b4:9a:d0:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRp+3q8T2uQUZHktmZdh+hAz3a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlD MjQ0MkFEOTAeFw0yNjA5MjQxMDQ5MDZaFw0yNjA5MjUxMTE0MDZaMDMxMTAvBgNV BAMTKEEyRkQwNUJGQ0ZGRUExODY1OEI4OTQxMUQwNUMyMzk5QUZGRDU1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyFm7Nrwmsh873eUjtdZQ/AVe Sv9o706nSs5UByLI50lh+lu2HNgqBs1G5OLJLGffayPIvzpRF2nu8kwWE7dcKzlG rg6KJ2Wz9fQRU6TvM1ROyDyKFBfhyqehq4Ezmz03uSM1NduvXzjvoauvgSCsyZ9+ ePFT5RSWoVosktsjdfIw52j9GoIcN+U8sqat3CewUixBwJR34havnzzUMxIoBdBX /te+PoLtuk8pAcdJ2lPlQRRj3pIt5THqEEQsrTP0RBSmSLi9Lu3B0LEmIXqFRMxZ 3IxXZe38xBKCzvGePiF+iqJlHqF6OJK1hrw2gJqeJMvKoc/MolMxqAXHMOdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUov0Fv8/+oYZYuJQR0Fwjma/9VcAwHwYDVR0j BBgwFoAUAotyiY4Lq880cMfonsbh+cJEKtkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg1Y2JkOTUtNTc0Zi00MDViLThiZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4 RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlDMjQ0MkFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCNzI4OThFMEJBQkNGMzQ3MEM3RTg5RUM2RTFGOUMyNDQy QUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUx RjlDMjQ0MkFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuFh7loxwMZrOgsNy7ZXF75I86LAsQZXgi5 yrnQHU9WJl2k0/xZcksH4Qimoh1ZqbUz70oO6NJ8g18GGGLMHULcwIOw2GvuxLhc ptRIgTOS7VTDyMI3/HlRVRWkQg/4nUS/UvgsMoh5LOdHhYyeIdACmGLyhYv2TFGD OZcXddp7pnBzYBsul5F7uCXnAltmmVMeNF2fKoXGS2PfyVgDYAsEWHUWCsD1iB3o NNm5DmS7EJvWHKbZ2Kf8PssDJxWA4BkRvyHItkcpoUC1zlusJFoWk5ht1TgEJAgD JNChd/RQ9aE4FzMmQ0NmM2sF0xu5fTnMS7XvsYnkLky4RrSa0B4= -----END CERTIFICATE-----Generated at Fri Sep 25 04:02:32 2026 by rpki-client