$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft File: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json) Hash identifier: SyjkGGlPw2ouUEHFcFBusujoswnJpIfSmFnaXYo9E0s= Subject key identifier: 9D:6A:E0:DF:99:28:65:F9:C4:8A:A8:E6:99:18:EA:57:EF:10:DF:EF Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 33AA84A669B944BEA94B02B7D3F06B80A50DA8BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft Manifest number: 0256 Signing time: Wed 25 Mar 2026 01:12:20 +0000 Manifest this update: Wed 25 Mar 2026 01:07:20 +0000 Manifest next update: Sat 28 Mar 2026 09:52:20 +0000 Files and hashes: 1: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: 79HlO+LSLY3tmhIbxY08KatYQ7yRtRdViTkMJQak98w=) 2: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: nfbRSnlG//ZRSW6EOv/DCvXGN1H1XD0xJADQSEpFd9M=) 3: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: MPudzKySsSwLObwaZ/xpDjLSKfPN6oVVaSdEF4pvG8U=) 4: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: mUWK0YKe3566Wh5cI0OkdARZoIJpWF4UZkK4KY+Au0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:aa:84:a6:69:b9:44:be:a9:4b:02:b7:d3:f0:6b:80:a5:0d:a8:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Mar 25 01:07:20 2026 GMT Not After : Mar 28 09:52:20 2026 GMT Subject: CN=9D6AE0DF992865F9C48AA8E69918EA57EF10DFEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:23:5e:0a:49:bf:74:47:4e:0f:05:6f:50: 19:b9:30:37:26:a7:7d:9d:28:25:ea:14:e8:07:bd: f2:cd:de:a0:49:a9:aa:a8:18:37:28:97:78:04:9e: 66:84:a9:e8:1e:3d:c4:95:5b:22:fb:8a:69:0e:4a: 4f:56:95:b2:26:21:ee:6d:6e:96:69:a5:3b:c9:07: dd:eb:00:87:29:71:f8:31:0c:f2:b9:e8:e9:b1:51: 45:af:63:59:b1:10:4b:04:d2:a0:3e:4f:f2:d0:1c: c8:18:48:a7:39:17:37:07:b8:30:10:e3:10:b7:6f: d9:45:e0:5f:93:e2:7e:9b:57:b9:5a:82:2d:8b:d3: 2e:87:83:44:4b:de:df:86:35:d0:00:f9:b1:d0:f7: 1e:f6:d1:57:d8:f5:8f:68:23:22:29:d3:ea:b6:fb: 9a:68:78:94:9a:b6:87:ad:97:4d:d7:53:da:d8:4c: da:0d:78:cb:bf:82:e4:e6:14:29:e8:b7:37:3d:fb: 52:d2:61:d3:82:28:40:c8:f2:4e:44:34:95:a8:d4: 4d:ee:0f:35:e5:fb:af:e9:2e:e6:88:6f:4b:3f:d0: 34:49:c7:b1:98:e8:78:3a:7e:23:1e:43:99:8e:0c: 45:31:fa:a9:92:ad:50:2d:e9:bb:ca:0b:6e:d0:c3: 59:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6A:E0:DF:99:28:65:F9:C4:8A:A8:E6:99:18:EA:57:EF:10:DF:EF X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4a:5b:59:05:6e:59:32:e1:26:91:48:ad:4b:2a:9a:e1:c2: 5a:93:37:6f:2c:0f:33:a0:64:d3:ef:c1:7b:26:a1:5a:ce:42: 56:12:82:53:39:bc:6d:f2:a5:80:8c:98:36:cb:fa:bf:22:e6: f5:83:70:d4:a1:a5:ac:c3:b4:dd:95:2f:72:84:b5:21:9c:a2: 1d:5c:dc:bb:6c:1c:dc:35:fe:4c:1d:3f:29:6e:f0:78:be:0e: 74:c9:ab:64:72:13:d7:02:a8:eb:bd:71:a7:72:c1:43:9b:ad: b9:25:54:a3:2b:51:3b:34:1b:06:de:2d:9d:42:46:cf:59:b2: da:c6:d0:35:99:f0:1b:39:57:43:57:d1:c8:54:61:8b:c1:ed: 5c:ee:55:fd:10:3b:92:02:b5:12:d7:fb:1e:5b:33:1a:6c:c2: 62:7f:42:64:c2:9f:16:9b:12:eb:60:b9:50:4e:4f:49:f9:ab: d2:e7:9a:3d:2a:1b:c6:ce:18:83:89:9e:aa:5a:08:47:c3:61: 83:ee:ff:e3:24:4f:c7:7c:bb:f9:29:c9:9e:49:a9:7a:eb:fd: ae:0e:59:34:52:0d:b5:02:34:f0:e6:95:c0:5d:b0:af:5f:14: 47:f3:2d:9e:d6:66:46:13:0a:ba:57:57:f5:47:3a:f9:de:ff: 6a:cb:f4:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6qEpmm5RL6pSwK30/BrgKUNqLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNjAzMjUwMTA3MjBaFw0yNjAzMjgwOTUyMjBaMDMxMTAvBgNV BAMTKDlENkFFMERGOTkyODY1RjlDNDhBQThFNjk5MThFQTU3RUYxMERGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtyNeCkm/dEdODwVvUBm5MDcm p32dKCXqFOgHvfLN3qBJqaqoGDcol3gEnmaEqegePcSVWyL7imkOSk9WlbImIe5t bpZppTvJB93rAIcpcfgxDPK56OmxUUWvY1mxEEsE0qA+T/LQHMgYSKc5FzcHuDAQ 4xC3b9lF4F+T4n6bV7lagi2L0y6Hg0RL3t+GNdAA+bHQ9x720VfY9Y9oIyIp0+q2 +5poeJSatoetl03XU9rYTNoNeMu/guTmFCnotzc9+1LSYdOCKEDI8k5ENJWo1E3u DzXl+6/pLuaIb0s/0DRJx7GY6Hg6fiMeQ5mODEUx+qmSrVAt6bvKC27Qw1kpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnWrg35koZfnEiqjmmRjqV+8Q3+8wHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNF NTA0MzFGMEY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBKW1kFblky4SaRSK1LKprhwlqTN28sDzOg ZNPvwXsmoVrOQlYSglM5vG3ypYCMmDbL+r8i5vWDcNShpazDtN2VL3KEtSGcoh1c 3LtsHNw1/kwdPylu8Hi+DnTJq2RyE9cCqOu9cadywUObrbklVKMrUTs0GwbeLZ1C Rs9ZstrG0DWZ8Bs5V0NX0chUYYvB7VzuVf0QO5ICtRLX+x5bMxpswmJ/QmTCnxab EutguVBOT0n5q9Lnmj0qG8bOGIOJnqpaCEfDYYPu/+MkT8d8u/kpyZ5JqXrr/a4O WTRSDbUCNPDmlcBdsK9fFEfzLZ7WZkYTCrpXV/VHOvne/2rL9C0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:02:33 2026 by rpki-client