$ rpki-client -vvf rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft File: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft (raw, json) Hash identifier: HM1KdQ+oYrSebDJ1kQQ2XyRPTiaFO6m/5G9dxBdduP4= Subject key identifier: 45:FE:20:5F:75:39:CE:93:2D:85:8E:2E:F1:D8:DD:F8:25:0B:58:07 Authority key identifier: 02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 Certificate issuer: /CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Certificate serial: 1B6975EE772B5BDD3FB08E2A22A4A4E9486E4C2F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 09:46:55 +0000 Manifest this update: Thu 23 Jul 2026 09:41:55 +0000 Manifest next update: Fri 24 Jul 2026 12:21:55 +0000 Files and hashes: 1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: BUSB0kLsC7pjKXi5bhLXUPIzYoFZsUEccBkiDUzp6D8=) 2: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl (hash: N7KvZ1hmUD6Oe7l9tHXba+ns7slOKxkOjATW6eRV5Zo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:69:75:ee:77:2b:5b:dd:3f:b0:8e:2a:22:a4:a4:e9:48:6e:4c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Validity Not Before: Jul 23 09:41:55 2026 GMT Not After : Jul 24 12:21:55 2026 GMT Subject: CN=45FE205F7539CE932D858E2EF1D8DDF8250B5807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:73:b8:90:36:b5:6a:b6:5b:ce:0f:cf:70:b1: c1:d1:63:08:a2:2e:0c:a9:67:47:05:c4:66:4b:e1: d4:ea:3b:c7:d6:d9:bf:e0:99:62:de:9b:ae:2b:17: 05:f7:7b:f9:84:19:28:f8:13:e9:7f:5a:66:38:aa: ec:b4:be:d5:a1:e4:00:31:07:fa:e5:61:7d:1c:c9: fa:f0:a3:5b:3a:8d:ea:70:1f:69:91:98:9c:ce:f3: e2:a5:5a:e9:82:db:8b:70:ae:df:04:cd:0f:4a:89: ac:fc:5a:4b:01:a4:bf:f1:57:32:dc:e2:be:6c:88: 3f:62:a0:e6:1f:18:36:2f:45:ed:f5:0c:d5:26:f2: 70:db:47:da:25:82:72:5b:8b:07:7e:62:ea:60:75: d2:f1:55:76:1d:6a:6d:f2:08:3b:82:93:c3:04:c0: 62:06:1c:4e:5a:93:cf:f1:35:92:e1:66:d8:db:99: 46:7a:98:49:18:37:78:a8:fc:40:ce:e3:65:43:90: f4:51:dd:56:4f:1c:56:1c:55:b2:82:1b:64:db:0f: 69:b9:eb:5b:cf:31:69:51:e1:8a:c8:d0:00:b5:e2: 1c:bb:55:0b:70:3d:ed:a6:1b:9b:e1:70:27:17:3b: 97:fb:f4:f7:89:2c:93:be:44:28:5e:c9:1c:7a:db: 14:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FE:20:5F:75:39:CE:93:2D:85:8E:2E:F1:D8:DD:F8:25:0B:58:07 X509v3 Authority Key Identifier: keyid:02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f8:1d:3b:39:ab:48:1e:28:b2:93:30:19:5a:d0:95:6f:cc: 2e:f5:54:3e:51:48:f8:b9:40:ff:a6:a7:0e:5e:b3:b8:27:e1: ad:d7:87:51:29:15:9a:34:cb:5b:97:27:17:fa:0a:f8:d0:e4: 92:90:d8:1f:cb:cd:06:40:d3:6b:29:4c:04:4d:b4:66:dd:f7: 77:70:3b:d4:5e:a1:2c:9b:ae:83:ae:6a:7c:33:b7:46:6b:9d: 28:39:de:a9:3a:5f:09:82:0f:61:f0:02:3a:8d:6e:1e:40:2d: 45:70:22:33:b0:61:12:d8:43:6e:88:37:1d:d1:7b:f0:9d:cd: 75:08:cc:c0:95:82:46:2a:7b:49:14:c0:ef:4f:33:9d:2c:37: 74:67:d7:b9:22:11:36:c3:35:37:fe:ff:e3:c6:8c:b4:56:47: 51:33:e5:eb:4c:f5:05:27:e2:cd:20:48:87:14:a5:ca:c0:95: cb:4b:0c:78:de:58:86:d5:67:ae:63:2d:04:72:2c:92:7a:4f: e6:0b:8c:55:b0:ac:e4:28:6e:6e:4e:b7:c5:dc:c1:22:55:93: 7a:b4:57:ad:d8:16:d5:05:f0:36:f5:59:19:b8:49:3f:40:1b: 66:7b:8c:cb:59:de:bc:a7:bd:ce:b2:74:5b:2f:44:e9:e8:16: 3b:c9:5b:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG2l17ncrW90/sI4qIqSk6UhuTC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlD MjQ0MkFEOTAeFw0yNjA3MjMwOTQxNTVaFw0yNjA3MjQxMjIxNTVaMDMxMTAvBgNV BAMTKDQ1RkUyMDVGNzUzOUNFOTMyRDg1OEUyRUYxRDhEREY4MjUwQjU4MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCac7iQNrVqtlvOD89wscHRYwii LgypZ0cFxGZL4dTqO8fW2b/gmWLem64rFwX3e/mEGSj4E+l/WmY4quy0vtWh5AAx B/rlYX0cyfrwo1s6jepwH2mRmJzO8+KlWumC24twrt8EzQ9Kiaz8WksBpL/xVzLc 4r5siD9ioOYfGDYvRe31DNUm8nDbR9olgnJbiwd+YupgddLxVXYdam3yCDuCk8ME wGIGHE5ak8/xNZLhZtjbmUZ6mEkYN3io/EDO42VDkPRR3VZPHFYcVbKCG2TbD2m5 61vPMWlR4YrI0AC14hy7VQtwPe2mG5vhcCcXO5f79PeJLJO+RCheyRx62xTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURf4gX3U5zpMthY4u8djd+CULWAcwHwYDVR0j BBgwFoAUAotyiY4Lq880cMfonsbh+cJEKtkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg1Y2JkOTUtNTc0Zi00MDViLThiZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4 RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlDMjQ0MkFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCNzI4OThFMEJBQkNGMzQ3MEM3RTg5RUM2RTFGOUMyNDQy QUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUx RjlDMjQ0MkFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGz4HTs5q0geKLKTMBla0JVvzC71VD5RSPi5 QP+mpw5es7gn4a3Xh1EpFZo0y1uXJxf6CvjQ5JKQ2B/LzQZA02spTARNtGbd93dw O9ReoSybroOuanwzt0ZrnSg53qk6XwmCD2HwAjqNbh5ALUVwIjOwYRLYQ26INx3R e/CdzXUIzMCVgkYqe0kUwO9PM50sN3Rn17kiETbDNTf+/+PGjLRWR1Ez5etM9QUn 4s0gSIcUpcrAlctLDHjeWIbVZ65jLQRyLJJ6T+YLjFWwrOQobm5Ot8XcwSJVk3q0 V63YFtUF8Db1WRm4ST9AG2Z7jMtZ3rynvc6ydFsvROnoFjvJW6s= -----END CERTIFICATE-----Generated at Fri Jul 24 04:02:39 2026 by rpki-client