$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft File: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json) Hash identifier: zMaxps9a9C/TvrDXUpN2QeqzURCyPjnT38F4bjsRAyc= Subject key identifier: 00:CD:EF:24:9F:D6:EE:34:FA:73:5B:CD:8D:5C:FA:55:C4:34:BC:08 Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 3F6618FA7610A73CCBA848A09535664DE41FB1B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft Manifest number: 01B9 Signing time: Wed 07 May 2025 02:02:03 +0000 Manifest this update: Wed 07 May 2025 01:57:03 +0000 Manifest next update: Sat 10 May 2025 03:50:03 +0000 Files and hashes: 1: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: 3q/CQB6AAqmbKR7BJ9ieGoRqrYEVNBUK4VjLkCeS2sQ=) 2: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: xne0Cq1LXYrb0/DpeRsrFAeGbUysSbEdSSRG1O8ZrMs=) 3: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: WAM8LzXIJx5krdWc3hy1Oy3kMn09ylHcJLe1/WPk6IA=) 4: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: p1w0LQdoCKIa254rxXq+SbTJLb+CUs1pBGFDesRwNfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 03:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:66:18:fa:76:10:a7:3c:cb:a8:48:a0:95:35:66:4d:e4:1f:b1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: May 7 01:57:03 2025 GMT Not After : May 10 03:50:03 2025 GMT Subject: CN=00CDEF249FD6EE34FA735BCD8D5CFA55C434BC08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:9a:21:81:c9:34:58:03:8a:89:f5:ab:6c: 1f:34:67:e0:83:4b:4c:9a:76:46:1f:4c:11:ef:a3: 88:df:a7:c4:26:2e:91:69:aa:95:b0:3a:e7:e3:c9: 7f:67:7f:81:62:8b:a6:90:cd:b9:dd:59:ba:cb:2b: d6:0f:77:32:94:0b:e7:9d:b3:6c:dd:21:d1:e1:50: 8a:48:0d:1b:08:aa:1a:9d:e6:e1:99:0a:6a:b4:33: b7:6a:79:ec:6c:62:28:f0:64:ae:d1:4a:ba:3d:ee: e7:c4:ef:9c:8d:b2:db:0d:9d:dc:53:73:3c:71:69: b7:97:7b:f3:80:5a:29:e4:29:74:90:42:fd:e6:34: 45:5d:1e:7b:ca:3f:12:78:82:33:69:4f:c9:05:bf: 78:ef:3c:ce:a6:01:f5:7e:20:88:29:78:6a:79:99: 9b:c9:36:ac:62:3e:50:4a:a8:32:b4:e6:cf:c9:b3: 2b:78:db:f5:7a:5b:32:f6:11:4f:3d:8e:6a:df:50: c3:6b:f3:57:85:9d:95:8b:6d:14:33:02:6d:45:7d: a8:62:02:3b:48:0e:a6:68:11:3e:20:f2:41:16:bb: 5a:ac:4d:f9:5e:bc:0b:62:e3:7c:c2:d0:cc:b4:e0: 5e:6a:9b:d5:f9:b3:49:05:d4:e8:ea:c6:84:35:ef: 3d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CD:EF:24:9F:D6:EE:34:FA:73:5B:CD:8D:5C:FA:55:C4:34:BC:08 X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:82:98:3f:ab:0f:5b:33:93:5e:99:86:36:2b:39:a1:9e:27: b2:a2:b4:4f:07:f0:f6:13:7e:65:34:14:97:59:e1:21:02:30: fb:aa:57:cf:b6:0a:ce:9d:22:aa:bb:75:ac:0c:fa:30:5c:33: 58:5c:0d:88:d8:16:73:e4:ab:5b:f9:9d:50:da:34:28:df:7a: 71:cc:dc:47:4c:1a:1b:ce:32:fb:25:d2:6e:48:80:21:ab:bb: d9:24:d2:aa:b2:fd:da:ac:a3:db:4e:29:d2:3b:47:d1:cc:8c: 92:d6:3d:35:7b:f1:6c:4c:49:46:70:1c:b1:6d:78:99:39:ca: 7e:51:c8:f3:1b:75:29:e2:85:62:7b:31:16:c2:f9:4c:00:28: 96:ad:2a:78:2f:be:12:7e:13:14:da:92:90:1b:9a:66:7e:26: 39:71:bc:de:5b:99:a3:f1:7b:5a:32:5f:5d:8a:0f:d6:4f:2e: ff:6f:f1:d9:d4:41:1d:6f:fb:ff:a8:ec:f4:08:22:97:f3:ce: 05:70:f2:29:40:8e:62:6a:12:07:fb:8c:c0:e1:72:70:ed:9c: 82:67:3e:56:87:7e:f2:4f:bc:03:dc:4e:24:24:cb:d9:e5:4d: c4:b8:2f:68:1c:f7:1e:fb:35:bc:b4:b2:04:2e:35:fd:41:20: f3:42:00:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP2YY+nYQpzzLqEiglTVmTeQfsbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNTA1MDcwMTU3MDNaFw0yNTA1MTAwMzUwMDNaMDMxMTAvBgNV BAMTKDAwQ0RFRjI0OUZENkVFMzRGQTczNUJDRDhENUNGQTU1QzQzNEJDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5s5ohgck0WAOKifWrbB80Z+CD S0yadkYfTBHvo4jfp8QmLpFpqpWwOufjyX9nf4Fii6aQzbndWbrLK9YPdzKUC+ed s2zdIdHhUIpIDRsIqhqd5uGZCmq0M7dqeexsYijwZK7RSro97ufE75yNstsNndxT czxxabeXe/OAWinkKXSQQv3mNEVdHnvKPxJ4gjNpT8kFv3jvPM6mAfV+IIgpeGp5 mZvJNqxiPlBKqDK05s/Jsyt42/V6WzL2EU89jmrfUMNr81eFnZWLbRQzAm1Ffahi AjtIDqZoET4g8kEWu1qsTflevAti43zC0My04F5qm9X5s0kF1OjqxoQ17z0NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAM3vJJ/W7jT6c1vNjVz6VcQ0vAgwHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNF NTA0MzFGMEY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyCmD+rD1szk16ZhjYrOaGeJ7KitE8H8PYT fmU0FJdZ4SECMPuqV8+2Cs6dIqq7dawM+jBcM1hcDYjYFnPkq1v5nVDaNCjfenHM 3EdMGhvOMvsl0m5IgCGru9kk0qqy/dqso9tOKdI7R9HMjJLWPTV78WxMSUZwHLFt eJk5yn5RyPMbdSnihWJ7MRbC+UwAKJatKngvvhJ+ExTakpAbmmZ+JjlxvN5bmaPx e1oyX12KD9ZPLv9v8dnUQR1v+/+o7PQIIpfzzgVw8ilAjmJqEgf7jMDhcnDtnIJn PlaHfvJPvAPcTiQky9nlTcS4L2gc9x77Nby0sgQuNf1BIPNCAB8= -----END CERTIFICATE-----Generated at Thu May 8 06:28:44 2025 by rpki-client