$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft File: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft (raw, json) Hash identifier: HdbLi/AqITmze1P1aQYThhAodQp5SZHqfi+p/ff7Sjg= Subject key identifier: ED:84:38:34:48:51:50:96:3A:12:AE:CC:03:14:1B:FD:81:D6:85:81 Authority key identifier: 28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 Certificate issuer: /CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Certificate serial: 6011724017D1476BF984EA5985A49F2AC3A11F06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:17:06 +0000 Manifest this update: Tue 12 May 2026 06:12:06 +0000 Manifest next update: Wed 13 May 2026 10:11:06 +0000 Files and hashes: 1: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: cqIEZQxU+EZc9SYrpFqE5pS8nDzAxvnkTbzbHwD4B2w=) 2: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: 3yzCp4wkI3KfVYe4A0JZd3yJ1CphXPMHC1KQXGZTn24=) 3: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl (hash: CFPk2lrMQz9QvVg+an+Do1x8Uc/SwjmmI1c/6bhhw0g=) 4: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: QbxtuI4YaAQndGClm2TbpKVghRM330ZkzNpAWirg1ig=) 5: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: DX9De2RZ1fwPjXYRliJoG3vcnnWQkcrXmm5lY0DlQ8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:11:72:40:17:d1:47:6b:f9:84:ea:59:85:a4:9f:2a:c3:a1:1f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Validity Not Before: May 12 06:12:06 2026 GMT Not After : May 13 10:11:06 2026 GMT Subject: CN=ED843834485150963A12AECC03141BFD81D68581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:44:2d:f4:7a:51:b3:9b:ba:3f:21:bd:ab: 89:de:c5:a4:1a:66:3f:3b:08:91:59:41:e0:26:bc: 5c:2e:99:21:82:3b:47:0d:12:e9:c3:4e:d3:fe:4b: 48:7e:a9:fe:cd:01:16:b1:d0:ec:a0:f6:cb:5f:ea: 76:6b:fd:fb:95:43:ce:57:38:7c:2b:02:43:f1:fc: b1:cd:91:8d:ec:21:66:e8:d5:66:09:ed:54:ac:a6: dd:cd:6e:b4:54:5c:f0:9d:75:20:61:89:68:6c:62: 95:d0:77:0d:21:7d:a2:af:f3:3b:32:6f:e5:b7:62: db:a7:3a:1c:e0:59:81:85:a1:68:da:e1:62:87:74: 3c:79:c1:57:2f:c8:23:54:61:5b:4a:f8:f4:66:95: 29:32:92:39:e5:b3:30:79:3a:99:49:38:b2:40:2f: 4c:03:52:39:07:9e:f5:9a:d6:7e:75:ff:a3:53:c5: ca:24:38:d8:4d:36:5a:28:fc:40:57:71:6f:71:18: ef:dc:71:c7:bc:c9:c1:28:00:a1:df:c1:0d:da:09: 2b:61:54:d5:3b:5e:7f:cb:09:de:12:ed:8b:9e:9d: 5d:ad:18:af:f6:bb:9d:13:6c:de:dd:04:45:31:0f: 43:44:06:1b:88:74:0d:69:e4:d9:51:fc:15:2c:65: 5e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:84:38:34:48:51:50:96:3A:12:AE:CC:03:14:1B:FD:81:D6:85:81 X509v3 Authority Key Identifier: keyid:28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:22:7c:6d:27:7a:ab:f7:63:35:c6:68:13:4e:60:e5:f0:a1: ce:d8:da:0f:dd:bb:7d:b0:26:0f:46:97:31:3c:01:97:dd:53: cb:67:4f:5b:eb:b1:f5:cc:11:a7:4b:fe:db:03:7a:6b:d8:c8: 03:a9:65:c0:6b:a4:5a:14:73:92:44:0f:16:64:ad:9a:4b:db: e0:a1:b7:7d:1d:21:e1:7e:49:12:ab:34:91:83:bd:cd:82:e5: f9:f7:77:48:00:2b:b4:87:65:41:3b:f8:4e:95:30:a7:e4:77: 8f:c5:eb:20:d8:39:47:cb:89:a2:39:b6:de:ab:4b:69:00:ed: d5:9a:b2:40:e5:69:4f:37:ef:5f:66:08:0e:68:1b:44:22:25: 8c:9b:13:55:ce:73:65:22:b1:df:7e:fb:05:96:de:b4:4c:8b: e5:3e:e6:cc:b5:d1:84:19:0a:9f:43:90:90:e3:8d:66:1e:65: 6c:36:ae:c6:87:6c:1f:8c:de:ee:63:d8:04:b3:26:b4:45:3e: 84:1f:dc:49:7d:a9:b3:fb:29:92:6e:70:e5:72:dd:03:db:e6: 34:37:40:4d:fd:ab:41:c0:d7:25:33:57:51:3b:59:1e:ab:e6: 9f:e0:66:c1:5c:33:84:89:5b:b6:e0:54:4a:f6:a4:02:4a:e5: 68:96:d0:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBFyQBfRR2v5hOpZhaSfKsOhHwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAw MkNENUMyMjAeFw0yNjA1MTIwNjEyMDZaFw0yNjA1MTMxMDExMDZaMDMxMTAvBgNV BAMTKEVEODQzODM0NDg1MTUwOTYzQTEyQUVDQzAzMTQxQkZEODFENjg1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNv0Qt9HpRs5u6PyG9q4nexaQa Zj87CJFZQeAmvFwumSGCO0cNEunDTtP+S0h+qf7NARax0Oyg9stf6nZr/fuVQ85X OHwrAkPx/LHNkY3sIWbo1WYJ7VSspt3NbrRUXPCddSBhiWhsYpXQdw0hfaKv8zsy b+W3YtunOhzgWYGFoWja4WKHdDx5wVcvyCNUYVtK+PRmlSkykjnlszB5OplJOLJA L0wDUjkHnvWa1n51/6NTxcokONhNNloo/EBXcW9xGO/ccce8ycEoAKHfwQ3aCSth VNU7Xn/LCd4S7YuenV2tGK/2u50TbN7dBEUxD0NEBhuIdA1p5NlR/BUsZV7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7YQ4NEhRUJY6Eq7MAxQb/YHWhYEwHwYDVR0j BBgwFoAUKAUf8ZCtYPKGrmmlwsKnUALNXCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZjOGIzYTktNGVmZi00NjBkLWIwMWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5 MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAwMkNENUMyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODA1MUZGMTkwQUQ2MEYyODZBRTY5QTVDMkMyQTc1MDAyQ0Q1 QzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3 NTAwMkNENUMyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUifG0neqv3YzXGaBNOYOXwoc7Y2g/du32w Jg9GlzE8AZfdU8tnT1vrsfXMEadL/tsDemvYyAOpZcBrpFoUc5JEDxZkrZpL2+Ch t30dIeF+SRKrNJGDvc2C5fn3d0gAK7SHZUE7+E6VMKfkd4/F6yDYOUfLiaI5tt6r S2kA7dWaskDlaU83719mCA5oG0QiJYybE1XOc2Uisd9++wWW3rRMi+U+5sy10YQZ Cp9DkJDjjWYeZWw2rsaHbB+M3u5j2ASzJrRFPoQf3El9qbP7KZJucOVy3QPb5jQ3 QE39q0HA1yUzV1E7WR6r5p/gZsFcM4SJW7bgVEr2pAJK5WiW0NU= -----END CERTIFICATE-----Generated at Tue May 12 22:50:44 2026 by rpki-client