$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft File: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json) Hash identifier: K8ncNHtQ0FcG9i+2nNLtl7gvcsW5iEy+Qx8u+1bVuz4= Subject key identifier: 9C:FE:11:41:B1:9A:70:49:08:EC:82:01:78:C7:50:71:57:39:21:B7 Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 41C46F1148F0C9AFB82A98C5C19F187573A3C7EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft Manifest number: 01E8 Signing time: Fri 22 Aug 2025 09:22:05 +0000 Manifest this update: Fri 22 Aug 2025 09:17:05 +0000 Manifest next update: Mon 25 Aug 2025 13:45:05 +0000 Files and hashes: 1: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: BvB+dwr9bBtzkRyMA8bTepBQEZZlKW8nu8VJsNMkUH8=) 2: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: t4B/eq8AOh4JIkCzcOT+SpN0WxnYYYPczNkJfx4V+XI=) 3: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: xne0Cq1LXYrb0/DpeRsrFAeGbUysSbEdSSRG1O8ZrMs=) 4: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: VHJqjt3xbbl3TC246UwXzPn1HP0VDv5vwXEAdPejD3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c4:6f:11:48:f0:c9:af:b8:2a:98:c5:c1:9f:18:75:73:a3:c7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Aug 22 09:17:05 2025 GMT Not After : Aug 25 13:45:05 2025 GMT Subject: CN=9CFE1141B19A704908EC820178C75071573921B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c6:14:b6:d2:3a:3c:56:01:94:c4:db:5d:d6: f9:96:20:a1:56:a7:68:34:8c:2e:0b:1b:21:d0:80: c4:73:67:75:ed:93:c5:0e:90:b3:a5:49:38:9e:c3: 6f:5e:21:7c:cb:d8:d3:ca:5d:75:7d:61:d2:e6:05: d2:82:af:ba:9c:5d:e1:ed:d8:1e:89:eb:c4:4d:46: 39:00:ae:44:80:bd:39:69:1d:49:90:3a:9b:40:20: 9a:11:d2:12:6b:93:11:a4:1c:c6:9e:cf:64:04:dd: c1:56:8d:52:8b:b8:15:03:3e:0b:9c:54:93:55:25: 6b:d1:2f:3e:03:e3:52:8e:2a:25:70:f5:1a:8f:31: 11:30:35:6c:f0:e6:b8:25:a7:1d:d7:08:51:99:60: 23:17:bc:62:0d:9b:ae:af:d9:91:0d:4c:9d:62:e6: b5:b2:60:64:a9:3a:61:8d:a5:86:0b:ba:81:37:ae: 9c:a8:ed:e8:c2:c4:64:e5:e3:be:d1:58:15:8d:12: 99:fb:45:50:83:10:6a:16:b0:9e:32:a8:8f:2a:c8: 49:61:46:cc:ba:7c:88:f7:88:b9:c7:df:4b:60:43: 37:82:6f:b3:6b:a2:c7:d8:f7:d6:5f:7f:13:5f:d5: 4c:30:96:a6:38:78:1d:21:4b:c2:a5:4d:1c:82:a8: 52:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FE:11:41:B1:9A:70:49:08:EC:82:01:78:C7:50:71:57:39:21:B7 X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b3:3f:ae:91:9a:c3:04:24:a5:ba:91:f6:77:d4:8b:92:8b: 8c:d3:82:3d:86:3d:68:b5:6c:18:b4:1a:cc:8a:b7:3e:56:40: 2c:25:9f:2f:58:0b:14:0f:0a:42:4a:93:08:1c:5e:3e:43:77: 19:12:6e:53:75:fd:8c:33:8c:47:56:d7:2d:3e:4c:e1:34:38: f6:80:c3:0d:8f:64:51:b1:0e:d4:06:cd:46:43:f0:5e:a8:ad: 8d:b7:a0:4c:72:b7:c3:0d:71:86:91:9f:8b:07:35:a9:f9:20: 2d:8d:d1:8a:fe:c6:b8:4e:93:d5:0e:08:1d:17:f6:e2:06:f4: 6c:02:ee:b6:f1:e9:3b:94:8b:ef:86:8a:42:fa:e4:81:1c:3d: ba:c1:82:03:bf:47:91:9b:c4:45:84:59:32:12:1a:a2:a3:30: 7a:47:55:09:e6:51:d6:00:f7:e1:5d:5e:5c:bd:53:e3:54:be: a8:3b:ce:91:c1:2d:4e:b2:89:36:85:3f:e4:e8:bd:76:65:f6: a3:2a:bb:9e:bf:8d:7e:22:0c:84:73:b7:5c:36:f5:ba:11:56: 3d:71:42:e3:8a:1f:18:1b:9b:64:dd:95:20:41:ec:6c:a0:39: 22:70:ea:d7:b8:70:c9:27:e5:c1:81:4f:d5:44:d4:3a:f1:32: 72:c7:ac:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQcRvEUjwya+4KpjFwZ8YdXOjx+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNTA4MjIwOTE3MDVaFw0yNTA4MjUxMzQ1MDVaMDMxMTAvBgNV BAMTKDlDRkUxMTQxQjE5QTcwNDkwOEVDODIwMTc4Qzc1MDcxNTczOTIxQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfxhS20jo8VgGUxNtd1vmWIKFW p2g0jC4LGyHQgMRzZ3Xtk8UOkLOlSTiew29eIXzL2NPKXXV9YdLmBdKCr7qcXeHt 2B6J68RNRjkArkSAvTlpHUmQOptAIJoR0hJrkxGkHMaez2QE3cFWjVKLuBUDPguc VJNVJWvRLz4D41KOKiVw9RqPMREwNWzw5rglpx3XCFGZYCMXvGINm66v2ZENTJ1i 5rWyYGSpOmGNpYYLuoE3rpyo7ejCxGTl477RWBWNEpn7RVCDEGoWsJ4yqI8qyElh Rsy6fIj3iLnH30tgQzeCb7NrosfY99ZffxNf1UwwlqY4eB0hS8KlTRyCqFK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnP4RQbGacEkI7IIBeMdQcVc5IbcwHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNF NTA0MzFGMEY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWzP66RmsMEJKW6kfZ31IuSi4zTgj2GPWi1 bBi0GsyKtz5WQCwlny9YCxQPCkJKkwgcXj5DdxkSblN1/YwzjEdW1y0+TOE0OPaA ww2PZFGxDtQGzUZD8F6orY23oExyt8MNcYaRn4sHNan5IC2N0Yr+xrhOk9UOCB0X 9uIG9GwC7rbx6TuUi++GikL65IEcPbrBggO/R5GbxEWEWTISGqKjMHpHVQnmUdYA 9+FdXly9U+NUvqg7zpHBLU6yiTaFP+TovXZl9qMqu56/jX4iDIRzt1w29boRVj1x QuOKHxgbm2TdlSBB7GygOSJw6te4cMkn5cGBT9VE1DrxMnLHrJs= -----END CERTIFICATE-----Generated at Sat Aug 23 12:11:18 2025 by rpki-client