$ rpki-client -vvf rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft File: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft (raw, json) Hash identifier: iUe+ph1otLsYt8FvoCKYw17JX+xKC8myzRPOn2chkDk= Subject key identifier: 2D:5D:32:1A:AD:6B:DD:72:72:E2:9F:61:B4:CA:04:37:6F:00:92:ED Authority key identifier: 82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F Certificate issuer: /CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Certificate serial: 56D959DCA728B49D291446185193C981406F0B70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 06:01:44 +0000 Manifest this update: Fri 24 Jul 2026 05:56:44 +0000 Manifest next update: Sat 25 Jul 2026 08:48:44 +0000 Files and hashes: 1: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: dcn7JjA5cMl377hf4qH/uXB97TvgtDVrGSS8WaneiPA=) 2: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl (hash: WCtLI2axjsZ3ky5l68CKOH/dkdS0cHhLd4GCavbRtT4=) 3: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: sAJt4KOFRGK6/p9H5qEjBboJGlbpIE0n8tuPpLq/ACA=) 4: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: J9Ppr3YgZsd8hgKwRlpPASzO8XUT6qbE4ua4z+T5rRI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d9:59:dc:a7:28:b4:9d:29:14:46:18:51:93:c9:81:40:6f:0b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Validity Not Before: Jul 24 05:56:44 2026 GMT Not After : Jul 25 08:48:44 2026 GMT Subject: CN=2D5D321AAD6BDD7272E29F61B4CA04376F0092ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:8e:bd:12:e9:c7:b9:21:dd:17:4f:2a:2b: 41:98:81:a6:44:94:b2:eb:2f:95:ab:33:3a:c4:40: c4:51:2d:fd:ea:0c:e8:52:d3:c3:c8:f6:38:22:d5: ac:0e:05:f6:a1:c2:56:c2:7a:b3:cb:f6:ea:64:ca: a0:ad:d8:5a:3a:93:3c:50:66:10:73:00:75:ca:d6: e3:50:28:eb:bd:d1:56:b1:31:00:2a:09:0e:d2:94: ba:a0:77:75:aa:f2:1e:1d:87:1f:66:ba:bf:7d:f7: d6:ee:20:10:fa:f4:d3:80:ab:76:28:97:aa:3c:3d: 73:c8:e5:f4:07:74:2f:e6:ac:bf:f0:5f:59:96:08: 94:53:bf:c2:ec:d8:32:ba:5d:a2:3c:3d:8d:e9:1c: 3c:b7:f6:86:67:14:25:33:84:3f:dc:34:d9:6e:da: ef:e2:dc:8e:69:d5:ea:28:3a:69:71:6e:47:1c:b9: 8a:59:70:db:d5:59:00:a5:13:84:26:66:55:e0:6f: e2:98:b2:0f:83:17:f7:0c:86:83:e9:51:44:e9:11: 0f:10:d8:56:b7:4c:91:78:ab:80:4a:86:83:5f:1f: 2e:21:f0:ba:4a:31:c2:d2:db:51:65:94:25:f7:61: 19:c8:5b:d3:c4:4e:1d:99:53:19:55:52:21:63:71: 99:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5D:32:1A:AD:6B:DD:72:72:E2:9F:61:B4:CA:04:37:6F:00:92:ED X509v3 Authority Key Identifier: keyid:82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:62:11:6c:9b:22:ea:c3:d9:73:19:ad:68:43:16:0d:33:dd: c1:ea:e0:f3:24:4e:2f:63:1b:73:b6:57:51:6b:bb:e9:55:4d: b6:14:86:07:db:9c:08:9f:f3:66:dc:66:95:87:a4:f2:a4:5f: 60:29:61:59:9f:41:c9:68:24:e1:75:d5:a0:1f:d9:1f:cd:1b: d9:46:32:20:62:0b:be:63:b3:49:92:76:3d:a9:20:8b:4f:e6: a7:cb:b1:bc:b3:56:e1:2e:f7:16:c1:8a:4a:bc:84:8f:61:49: 91:50:ba:9c:21:86:71:2d:80:8b:ce:4e:36:e0:ac:5f:80:a4: f3:f4:2c:d1:e9:b8:fc:c5:ba:1e:7d:40:77:cf:00:aa:37:74: ff:e1:e7:79:66:33:a7:30:a4:98:e3:88:ca:e2:4f:77:bb:98: d4:e4:84:49:33:e0:7d:86:e5:bf:74:61:02:21:9d:2d:8e:6c: dd:64:d7:a8:36:c1:79:a6:0f:c8:e1:3b:8e:83:05:2e:81:db: 7d:d9:43:d5:0e:26:95:14:5b:40:f9:ab:74:97:7e:e2:36:f6: 44:66:5b:24:a4:12:2a:db:9e:ac:3e:32:51:d2:7a:cd:23:bf: 02:09:2e:b2:5f:cd:76:f1:b0:ea:2b:29:20:f1:8d:94:0c:fb: b4:43:0d:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtlZ3KcotJ0pFEYYUZPJgUBvC3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVB MUM0MEY2RjAeFw0yNjA3MjQwNTU2NDRaFw0yNjA3MjUwODQ4NDRaMDMxMTAvBgNV BAMTKDJENUQzMjFBQUQ2QkRENzI3MkUyOUY2MUI0Q0EwNDM3NkYwMDkyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxno69EunHuSHdF08qK0GYgaZE lLLrL5WrMzrEQMRRLf3qDOhS08PI9jgi1awOBfahwlbCerPL9upkyqCt2Fo6kzxQ ZhBzAHXK1uNQKOu90VaxMQAqCQ7SlLqgd3Wq8h4dhx9mur9999buIBD69NOAq3Yo l6o8PXPI5fQHdC/mrL/wX1mWCJRTv8Ls2DK6XaI8PY3pHDy39oZnFCUzhD/cNNlu 2u/i3I5p1eooOmlxbkccuYpZcNvVWQClE4QmZlXgb+KYsg+DF/cMhoPpUUTpEQ8Q 2Fa3TJF4q4BKhoNfHy4h8LpKMcLS21FllCX3YRnIW9PETh2ZUxlVUiFjcZmxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULV0yGq1r3XJy4p9htMoEN28Aku0wHwYDVR0j BBgwFoAUgotiPppEPot+ldSli14pZaHED28wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFmMGY0MjMtM2JlZC00OTM4LTlmODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5 QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVBMUM0MEY2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjhCNjIzRTlBNDQzRThCN0U5NUQ0QTU4QjVFMjk2NUExQzQw RjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5 NjVBMUM0MEY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdiEWybIurD2XMZrWhDFg0z3cHq4PMkTi9j G3O2V1Fru+lVTbYUhgfbnAif82bcZpWHpPKkX2ApYVmfQcloJOF11aAf2R/NG9lG MiBiC75js0mSdj2pIItP5qfLsbyzVuEu9xbBikq8hI9hSZFQupwhhnEtgIvOTjbg rF+ApPP0LNHpuPzFuh59QHfPAKo3dP/h53lmM6cwpJjjiMriT3e7mNTkhEkz4H2G 5b90YQIhnS2ObN1k16g2wXmmD8jhO46DBS6B233ZQ9UOJpUUW0D5q3SXfuI29kRm WySkEirbnqw+MlHSes0jvwIJLrJfzXbxsOorKSDxjZQM+7RDDcQ= -----END CERTIFICATE-----Generated at Fri Jul 24 09:30:33 2026 by rpki-client