$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft File: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json) Hash identifier: bncjpbta+2m4vRYAglLJUU/DkBm2Qt9dMkALC+rEkF8= Subject key identifier: 17:A4:65:A4:9E:C2:22:F7:79:B9:1D:D5:92:27:18:E0:87:57:1E:71 Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 1CAB522689EF6EA139FD70DE8EED51BFCEC671D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft Manifest number: 0202 Signing time: Sun 19 Oct 2025 08:52:04 +0000 Manifest this update: Sun 19 Oct 2025 08:47:04 +0000 Manifest next update: Wed 22 Oct 2025 13:12:04 +0000 Files and hashes: 1: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: xne0Cq1LXYrb0/DpeRsrFAeGbUysSbEdSSRG1O8ZrMs=) 2: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: 67ED15Wggk91jqHX5TU94hgMxOWt1zNq0xbaz+lnXjE=) 3: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: BvB+dwr9bBtzkRyMA8bTepBQEZZlKW8nu8VJsNMkUH8=) 4: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: t4B/eq8AOh4JIkCzcOT+SpN0WxnYYYPczNkJfx4V+XI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ab:52:26:89:ef:6e:a1:39:fd:70:de:8e:ed:51:bf:ce:c6:71:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Oct 19 08:47:04 2025 GMT Not After : Oct 22 13:12:04 2025 GMT Subject: CN=17A465A49EC222F779B91DD5922718E087571E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:73:63:46:20:44:67:45:12:c3:4e:2d:32: 4a:7c:c8:ac:55:e0:36:18:ea:ba:90:11:ae:d9:d2: ac:52:22:51:8e:82:84:a6:8c:17:6d:6b:1c:b3:ca: 76:97:73:0e:78:6a:dd:50:ce:5f:10:fb:5d:a7:e4: 8a:5f:9f:37:f9:9d:32:00:74:6b:38:69:07:09:4b: a5:78:be:c0:86:e3:0f:b4:0a:60:7d:4b:08:81:85: 21:f5:da:51:12:c4:6e:d6:3f:82:9d:25:8a:80:22: 4b:1d:c4:af:eb:a5:51:67:d2:b2:36:c4:a2:b1:da: d4:b9:a6:15:51:d3:9b:ce:36:29:4e:3f:d2:1b:a8: 56:b0:66:a4:83:03:c3:b9:cc:29:0b:67:d5:9c:9b: f9:0e:f1:85:f0:26:03:04:65:b5:42:2a:7d:fd:d0: 59:00:7f:90:36:d5:f9:92:08:52:54:b9:55:c1:55: 59:79:6d:8d:2b:ae:de:31:d6:36:3a:e3:6d:c8:04: 93:e9:55:3c:cf:f0:f4:96:c9:87:87:5a:4b:80:0c: 05:7b:67:c0:de:ae:9b:d5:fa:63:5a:e2:2b:76:c2: 6a:7d:9b:da:78:8e:13:1c:2d:c4:2f:2b:30:0d:3f: 9c:9c:be:ac:e3:f1:fb:e6:51:1b:c4:2a:8c:43:13: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A4:65:A4:9E:C2:22:F7:79:B9:1D:D5:92:27:18:E0:87:57:1E:71 X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:88:7c:cd:b5:96:82:cb:dc:c8:ce:09:88:40:5f:1f:26:42: 66:54:79:6f:12:a3:a0:75:7c:43:03:eb:c1:4c:88:b4:c8:6c: 1a:94:ea:91:80:da:ee:ef:dc:76:ac:ca:48:bd:0d:f4:06:15: 89:65:07:d5:1c:01:6d:47:35:bb:01:fd:26:bb:f5:ac:44:60: 81:73:3f:71:49:ca:09:4f:98:f7:c8:47:25:23:23:4e:bc:a8: c9:47:c7:e0:32:58:53:41:bb:b5:1c:f8:fd:11:b3:54:e3:15: de:ba:4b:70:f4:e3:15:bb:ba:88:03:1d:32:72:3a:3e:5d:79: 76:2a:aa:be:d1:84:53:47:7a:61:b2:de:f5:db:37:42:e6:e0: 5e:2e:f1:4d:12:0d:91:ed:8e:15:a4:ba:e7:0c:0c:c0:21:c6: de:b7:e8:db:22:38:cb:f8:a0:ff:12:9b:da:d5:29:6b:44:ff: f1:24:4f:ea:b9:3a:48:85:dc:59:64:c4:8d:ee:08:2c:a4:e0: 5f:f8:2d:37:46:8f:53:77:84:51:3f:11:b4:cd:2b:7d:eb:bd: ee:39:5c:c3:ca:8b:34:82:df:75:88:c4:cf:13:47:ca:ef:7b: 76:0d:56:90:a9:8b:f6:b7:cb:5d:3d:3c:74:88:69:25:07:22: ea:cf:c0:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHKtSJonvbqE5/XDeju1Rv87GcdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNTEwMTkwODQ3MDRaFw0yNTEwMjIxMzEyMDRaMDMxMTAvBgNV BAMTKDE3QTQ2NUE0OUVDMjIyRjc3OUI5MURENTkyMjcxOEUwODc1NzFFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+U3NjRiBEZ0USw04tMkp8yKxV 4DYY6rqQEa7Z0qxSIlGOgoSmjBdtaxyzynaXcw54at1Qzl8Q+12n5Ipfnzf5nTIA dGs4aQcJS6V4vsCG4w+0CmB9SwiBhSH12lESxG7WP4KdJYqAIksdxK/rpVFn0rI2 xKKx2tS5phVR05vONilOP9IbqFawZqSDA8O5zCkLZ9Wcm/kO8YXwJgMEZbVCKn39 0FkAf5A21fmSCFJUuVXBVVl5bY0rrt4x1jY6423IBJPpVTzP8PSWyYeHWkuADAV7 Z8DerpvV+mNa4it2wmp9m9p4jhMcLcQvKzANP5ycvqzj8fvmURvEKoxDE4BjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF6RlpJ7CIvd5uR3VkicY4IdXHnEwHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNF NTA0MzFGMEY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWIfM21loLL3MjOCYhAXx8mQmZUeW8So6B1 fEMD68FMiLTIbBqU6pGA2u7v3Hasyki9DfQGFYllB9UcAW1HNbsB/Sa79axEYIFz P3FJyglPmPfIRyUjI068qMlHx+AyWFNBu7Uc+P0Rs1TjFd66S3D04xW7uogDHTJy Oj5deXYqqr7RhFNHemGy3vXbN0Lm4F4u8U0SDZHtjhWkuucMDMAhxt636NsiOMv4 oP8Sm9rVKWtE//EkT+q5OkiF3FlkxI3uCCyk4F/4LTdGj1N3hFE/EbTNK33rve45 XMPKizSC33WIxM8TR8rve3YNVpCpi/a3y109PHSIaSUHIurPwIc= -----END CERTIFICATE-----Generated at Mon Oct 20 22:46:36 2025 by rpki-client