$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft File: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft (raw, json) Hash identifier: JiIxn54KuEuO4h0gWDkEbbCylySAEmkjafNhK2b2DEA= Subject key identifier: 86:59:3F:1A:6A:0B:34:D5:93:B5:54:03:96:8D:0B:23:34:1E:9F:F3 Authority key identifier: 28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 Certificate issuer: /CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Certificate serial: 2D5B075AF1D4DE8EB5F1FC1937A4282DB2D0AC24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:59:31 +0000 Manifest this update: Wed 23 Sep 2026 18:54:31 +0000 Manifest next update: Thu 24 Sep 2026 19:42:31 +0000 Files and hashes: 1: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: QbxtuI4YaAQndGClm2TbpKVghRM330ZkzNpAWirg1ig=) 2: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl (hash: r7oxRBlKZ9e5QRf5wZ/IWM6QlNWFL05EQQX9uggVWdo=) 3: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: cqIEZQxU+EZc9SYrpFqE5pS8nDzAxvnkTbzbHwD4B2w=) 4: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: DX9De2RZ1fwPjXYRliJoG3vcnnWQkcrXmm5lY0DlQ8c=) 5: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: 3yzCp4wkI3KfVYe4A0JZd3yJ1CphXPMHC1KQXGZTn24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5b:07:5a:f1:d4:de:8e:b5:f1:fc:19:37:a4:28:2d:b2:d0:ac:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Validity Not Before: Sep 23 18:54:31 2026 GMT Not After : Sep 24 19:42:31 2026 GMT Subject: CN=86593F1A6A0B34D593B55403968D0B23341E9FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:90:b4:9f:91:14:fe:79:58:3a:c3:8a:81:d8: 14:9b:88:5f:0e:8a:86:a7:e1:9b:cd:f1:ed:de:0d: 59:22:10:63:c1:67:58:cc:12:e1:56:6d:12:55:60: c6:f5:87:b5:cf:27:2d:43:a3:38:51:b8:f6:21:1a: 4e:be:0f:da:01:b6:43:57:73:f0:f1:1e:18:0d:60: 3a:59:51:56:70:ff:b8:77:65:ba:06:dc:b4:84:bd: cb:5b:4f:42:c5:35:37:9f:c3:fa:cd:9a:a4:42:ff: 23:43:0f:4c:8b:48:aa:80:bb:39:4b:a7:81:70:7a: 2a:ff:35:57:30:b2:58:67:50:49:9e:fa:61:fe:e7: 4d:0e:98:4e:8f:2b:21:b2:ef:b6:c6:85:31:ad:49: 45:75:0e:a7:2a:cd:67:aa:82:4f:19:5f:6a:08:b9: bb:77:3e:82:74:58:55:92:7b:b1:c7:f4:79:d0:4a: a7:fb:48:5d:30:d6:03:f9:d2:d8:f2:ae:08:3c:01: 35:03:43:bd:b5:a6:3e:71:7d:e5:ea:68:8e:ee:b5: 48:c9:b0:d3:0d:67:32:76:d9:ea:a1:4c:97:f5:6f: 2a:2e:23:fe:ef:73:ac:78:d0:f9:5e:e8:23:59:db: 4c:37:f2:f5:98:a7:5f:82:0b:aa:8f:dc:ec:e2:c8: 92:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:59:3F:1A:6A:0B:34:D5:93:B5:54:03:96:8D:0B:23:34:1E:9F:F3 X509v3 Authority Key Identifier: keyid:28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:dd:30:02:a1:6a:3d:22:86:5d:00:f8:99:5e:3a:1f:1b:b8: d4:88:de:db:15:1b:70:4f:e3:42:6e:40:12:0d:f9:c6:66:07: d4:a7:c8:18:2b:ef:83:66:a1:37:28:62:c7:e4:a3:32:c6:d0: e7:18:7a:a1:5b:8e:e6:c0:d7:be:a9:62:14:c1:33:8c:5d:e6: 46:d2:1c:5a:ba:bc:a8:a4:5a:08:0f:bd:5a:10:b9:99:ef:86: cf:be:b6:98:44:b7:43:eb:d8:90:59:fc:0b:19:62:a2:2b:6c: 8d:30:10:f3:5d:56:37:13:6f:6d:b1:c8:2c:ac:5c:a6:3b:b8: f0:43:58:5e:b6:f7:4a:d5:56:d2:a9:b5:ac:0f:b4:2d:8d:5b: 91:04:5a:6a:a5:94:f4:90:d2:8b:c8:4c:62:be:d4:0c:93:83: a5:97:6d:12:74:73:0b:25:26:f7:50:bb:5f:b3:5f:d5:ec:ab: d3:e8:cd:11:f1:07:d5:bf:16:7e:b2:8b:49:81:82:10:d1:2a: 2b:be:d9:40:47:5b:a5:9d:d9:de:44:50:77:38:b0:35:45:2d: 12:3f:8d:59:c3:b5:67:9b:4c:ec:18:d2:4f:a4:6e:eb:d4:1e: fe:57:6e:59:5b:23:4a:3f:e9:b0:63:ef:36:74:5b:5d:b7:cd: 73:f4:39:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVsHWvHU3o618fwZN6QoLbLQrCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAw MkNENUMyMjAeFw0yNjA5MjMxODU0MzFaFw0yNjA5MjQxOTQyMzFaMDMxMTAvBgNV BAMTKDg2NTkzRjFBNkEwQjM0RDU5M0I1NTQwMzk2OEQwQjIzMzQxRTlGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCekLSfkRT+eVg6w4qB2BSbiF8O ioan4ZvN8e3eDVkiEGPBZ1jMEuFWbRJVYMb1h7XPJy1DozhRuPYhGk6+D9oBtkNX c/DxHhgNYDpZUVZw/7h3ZboG3LSEvctbT0LFNTefw/rNmqRC/yNDD0yLSKqAuzlL p4Fweir/NVcwslhnUEme+mH+500OmE6PKyGy77bGhTGtSUV1DqcqzWeqgk8ZX2oI ubt3PoJ0WFWSe7HH9HnQSqf7SF0w1gP50tjyrgg8ATUDQ721pj5xfeXqaI7utUjJ sNMNZzJ22eqhTJf1byouI/7vc6x40Ple6CNZ20w38vWYp1+CC6qP3OziyJL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhlk/GmoLNNWTtVQDlo0LIzQen/MwHwYDVR0j BBgwFoAUKAUf8ZCtYPKGrmmlwsKnUALNXCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZjOGIzYTktNGVmZi00NjBkLWIwMWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5 MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAwMkNENUMyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODA1MUZGMTkwQUQ2MEYyODZBRTY5QTVDMkMyQTc1MDAyQ0Q1 QzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3 NTAwMkNENUMyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALdMAKhaj0ihl0A+JleOh8buNSI3tsVG3BP 40JuQBIN+cZmB9SnyBgr74NmoTcoYsfkozLG0OcYeqFbjubA176pYhTBM4xd5kbS HFq6vKikWggPvVoQuZnvhs++tphEt0Pr2JBZ/AsZYqIrbI0wEPNdVjcTb22xyCys XKY7uPBDWF6290rVVtKptawPtC2NW5EEWmqllPSQ0ovITGK+1AyTg6WXbRJ0cwsl JvdQu1+zX9Xsq9PozRHxB9W/Fn6yi0mBghDRKiu+2UBHW6Wd2d5EUHc4sDVFLRI/ jVnDtWebTOwY0k+kbuvUHv5XbllbI0o/6bBj7zZ0W123zXP0Occ= -----END CERTIFICATE-----Generated at Thu Sep 24 01:03:20 2026 by rpki-client