$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft File: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft (raw, json) Hash identifier: Mv+NfcA4pVE0gJHIymPO1K0xx13wL7VL3+WzpBYtsbQ= Subject key identifier: 3D:44:D4:81:1F:0C:A9:ED:67:BD:EC:E0:0C:60:CC:B1:F5:31:2E:DE Authority key identifier: 28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 Certificate issuer: /CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Certificate serial: 4D0919D991858B1185AD10263310155C1DB7C75B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 23:13:14 +0000 Manifest this update: Thu 23 Jul 2026 23:08:14 +0000 Manifest next update: Sat 25 Jul 2026 01:41:14 +0000 Files and hashes: 1: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl (hash: 4LlhhoFeNRDLhtDI+kFhllnBXp1ewV4O+fuABEcOwzo=) 2: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: cqIEZQxU+EZc9SYrpFqE5pS8nDzAxvnkTbzbHwD4B2w=) 3: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: QbxtuI4YaAQndGClm2TbpKVghRM330ZkzNpAWirg1ig=) 4: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: DX9De2RZ1fwPjXYRliJoG3vcnnWQkcrXmm5lY0DlQ8c=) 5: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: 3yzCp4wkI3KfVYe4A0JZd3yJ1CphXPMHC1KQXGZTn24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:09:19:d9:91:85:8b:11:85:ad:10:26:33:10:15:5c:1d:b7:c7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Validity Not Before: Jul 23 23:08:14 2026 GMT Not After : Jul 25 01:41:14 2026 GMT Subject: CN=3D44D4811F0CA9ED67BDECE00C60CCB1F5312EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:65:c2:f6:7a:1b:fb:c7:d2:64:f5:6c:68:b7: 22:2b:dd:b2:c5:c2:25:4a:a6:f3:d0:f4:7b:7a:6e: b2:25:c8:20:5e:08:5a:bc:0d:02:4d:1b:5a:35:14: 99:4f:aa:eb:89:9c:b1:ef:95:77:ff:61:61:3e:ca: ba:7d:b9:7d:21:26:43:40:a7:43:2b:6b:7f:40:be: 4e:f9:2d:ec:0e:65:7e:39:b3:7e:4b:a0:ce:d9:8e: a4:5c:a9:f7:2c:c2:68:79:74:52:17:bb:d3:97:a4: 17:13:46:e4:c3:7a:13:68:39:a8:dc:31:de:d2:94: 39:d8:f9:ac:b8:26:b7:31:b4:4b:39:1b:62:c3:b9: ea:5b:8d:91:d1:88:54:52:b4:11:ed:eb:45:61:19: 7b:cc:26:63:66:d2:b3:34:91:22:2d:0c:82:97:25: 67:dc:61:1c:42:87:cf:d8:ca:e5:d7:37:18:c5:1a: 10:03:bc:79:4b:a0:d5:bb:75:b6:64:b7:c1:40:1f: d7:6e:04:30:e2:7d:bd:91:c0:d4:1d:3b:39:23:b4: bb:eb:0a:d9:13:5f:70:23:88:bf:f4:8d:57:1b:1b: 1d:6d:46:3c:57:d4:ab:ec:e2:6e:80:e6:fa:eb:6e: f4:2c:ef:2f:1e:a4:fe:9e:0b:b2:76:21:6c:e2:19: 8d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:44:D4:81:1F:0C:A9:ED:67:BD:EC:E0:0C:60:CC:B1:F5:31:2E:DE X509v3 Authority Key Identifier: keyid:28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:fd:63:31:f2:9e:62:ca:6e:59:e2:59:a8:a6:7c:a2:a5:cd: 81:25:29:b8:0f:0a:d4:6e:ee:38:de:a0:cf:b0:16:eb:9a:ad: e9:43:88:cf:57:d0:32:e7:1f:df:ed:1d:45:10:70:74:05:6c: cf:b8:63:d6:55:35:89:f8:ca:ca:46:aa:0b:7b:5b:b4:dc:f0: 7c:44:4f:01:93:3d:6f:48:1a:6f:b0:f6:e4:2a:61:05:fe:6c: 33:9f:93:26:a7:54:8e:68:4c:39:7d:7b:e4:7b:05:2f:b0:de: 24:e3:e8:b0:14:d6:de:bb:11:87:2d:74:f1:3e:22:65:60:60: 35:f2:5b:31:f0:2c:9f:cc:25:64:0e:74:36:1d:ef:a3:16:cd: 0e:9f:30:99:bc:8b:79:cb:b9:13:ff:3a:cb:c4:05:19:07:0d: 76:c5:20:37:46:28:e9:21:81:e2:98:08:52:db:a0:59:44:01: 47:2d:64:ab:17:e7:b9:05:ba:f0:d7:63:9c:02:3d:30:d5:96: f3:9a:8e:02:f0:e7:22:3d:ae:a2:76:95:7c:3c:cb:57:e5:31: f7:53:ac:de:fb:af:07:31:42:80:01:1f:5c:cf:46:12:04:be: 22:fd:b4:e8:71:a2:17:4a:21:fa:0a:46:d6:cd:31:06:bc:af: ec:c7:65:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQkZ2ZGFixGFrRAmMxAVXB23x1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAw MkNENUMyMjAeFw0yNjA3MjMyMzA4MTRaFw0yNjA3MjUwMTQxMTRaMDMxMTAvBgNV BAMTKDNENDRENDgxMUYwQ0E5RUQ2N0JERUNFMDBDNjBDQ0IxRjUzMTJFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNZcL2ehv7x9Jk9WxotyIr3bLF wiVKpvPQ9Ht6brIlyCBeCFq8DQJNG1o1FJlPquuJnLHvlXf/YWE+yrp9uX0hJkNA p0Mra39Avk75LewOZX45s35LoM7ZjqRcqfcswmh5dFIXu9OXpBcTRuTDehNoOajc Md7SlDnY+ay4JrcxtEs5G2LDuepbjZHRiFRStBHt60VhGXvMJmNm0rM0kSItDIKX JWfcYRxCh8/YyuXXNxjFGhADvHlLoNW7dbZkt8FAH9duBDDifb2RwNQdOzkjtLvr CtkTX3AjiL/0jVcbGx1tRjxX1Kvs4m6A5vrrbvQs7y8epP6eC7J2IWziGY1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPUTUgR8Mqe1nvezgDGDMsfUxLt4wHwYDVR0j BBgwFoAUKAUf8ZCtYPKGrmmlwsKnUALNXCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZjOGIzYTktNGVmZi00NjBkLWIwMWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5 MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAwMkNENUMyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODA1MUZGMTkwQUQ2MEYyODZBRTY5QTVDMkMyQTc1MDAyQ0Q1 QzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3 NTAwMkNENUMyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFz9YzHynmLKblniWaimfKKlzYElKbgPCtRu 7jjeoM+wFuuarelDiM9X0DLnH9/tHUUQcHQFbM+4Y9ZVNYn4yspGqgt7W7Tc8HxE TwGTPW9IGm+w9uQqYQX+bDOfkyanVI5oTDl9e+R7BS+w3iTj6LAU1t67EYctdPE+ ImVgYDXyWzHwLJ/MJWQOdDYd76MWzQ6fMJm8i3nLuRP/OsvEBRkHDXbFIDdGKOkh geKYCFLboFlEAUctZKsX57kFuvDXY5wCPTDVlvOajgLw5yI9rqJ2lXw8y1flMfdT rN77rwcxQoABH1zPRhIEviL9tOhxohdKIfoKRtbNMQa8r+zHZU0= -----END CERTIFICATE-----Generated at Fri Jul 24 14:34:44 2026 by rpki-client