$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft File: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json) Hash identifier: /h1pOFYAsRSGBfB4ojF/T76dil9ctXmP4yXsYYadIKE= Subject key identifier: A7:FB:B8:31:72:4E:AA:81:FB:7C:46:05:5C:22:F6:EE:47:98:46:52 Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 052B108F408EE4E2DE7330EE74B9B288232DF741 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft Manifest number: 01D0 Signing time: Sat 28 Jun 2025 11:02:02 +0000 Manifest this update: Sat 28 Jun 2025 10:57:02 +0000 Manifest next update: Tue 01 Jul 2025 21:09:02 +0000 Files and hashes: 1: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: MKU81Ry+V8mZRP8zvAa6oWXO79tUvMvnxYZ1YhSm2EE=) 2: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: t4B/eq8AOh4JIkCzcOT+SpN0WxnYYYPczNkJfx4V+XI=) 3: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: xne0Cq1LXYrb0/DpeRsrFAeGbUysSbEdSSRG1O8ZrMs=) 4: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: BvB+dwr9bBtzkRyMA8bTepBQEZZlKW8nu8VJsNMkUH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2b:10:8f:40:8e:e4:e2:de:73:30:ee:74:b9:b2:88:23:2d:f7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Jun 28 10:57:02 2025 GMT Not After : Jul 1 21:09:02 2025 GMT Subject: CN=A7FBB831724EAA81FB7C46055C22F6EE47984652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:44:ac:f9:1c:8e:8d:95:77:d6:ac:3a:35: a3:0d:3f:a1:a0:69:a5:64:c4:1e:c9:5f:25:b3:a2: d6:69:31:b4:36:ef:40:cf:8b:60:fa:04:e5:cd:60: 59:d6:36:c8:92:7a:2d:d1:7a:44:3b:d4:a2:6f:e8: fd:51:75:96:53:a8:0d:8c:25:98:d2:37:83:ad:c7: 68:c4:47:f6:3b:bf:ee:28:e9:71:d2:f3:35:73:7d: f4:02:b3:53:3a:1e:41:22:8e:c1:39:79:ef:f3:de: d7:b5:31:71:1c:ea:21:87:ef:ed:c1:53:d1:9d:3c: bd:f9:ae:d8:a2:59:f0:20:5f:0d:36:ac:8e:21:86: e3:33:0b:33:0f:b2:4c:71:bc:62:4d:20:18:79:3b: 3c:29:af:38:bd:7c:42:9a:9f:b9:45:cc:c7:ba:ae: b4:55:54:ca:1d:60:98:8e:df:45:a7:af:d7:6e:ad: 53:0f:31:f9:4c:f7:c3:a6:f4:08:53:6f:95:46:5c: 3d:0c:be:0a:40:7e:a2:93:ef:7e:5c:8a:63:2d:15: f7:fd:62:b2:8b:1d:4d:d7:26:6f:68:bd:c0:84:a7: f2:cb:5b:b7:54:23:0e:c4:82:af:2e:eb:a3:a0:8e: 31:37:80:5a:ae:f8:8d:ad:85:38:d8:3b:86:13:7b: 3d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FB:B8:31:72:4E:AA:81:FB:7C:46:05:5C:22:F6:EE:47:98:46:52 X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:66:b9:02:b5:fc:a2:fe:68:ad:1c:60:20:76:8d:a0:b6:24: a0:e9:72:96:df:20:e2:7d:4c:a3:39:e6:09:bf:39:d4:33:fc: 45:7c:2b:c5:9c:67:d6:02:bb:f5:48:5b:12:4d:27:3b:e3:33: 25:f1:9b:7a:5a:a4:26:23:ed:b6:ec:34:e1:bd:68:3d:7e:50: 0c:e5:00:30:b1:6e:5d:2e:df:a0:92:c6:4f:de:2b:78:f2:6c: 33:e8:45:67:cc:07:56:1c:4a:c7:94:b4:44:ba:42:57:29:47: 17:bd:38:83:98:37:b5:d5:69:5e:d6:c3:f2:47:89:b5:b6:38: 2d:8b:42:b2:7b:5a:f4:11:4a:28:38:ca:a3:f7:be:75:da:ec: aa:8a:4c:7c:f7:66:54:b1:1f:21:b0:a2:ac:44:c7:0e:f0:06: 5d:90:3f:99:1d:31:53:e4:f0:52:10:f6:38:ad:f2:d9:81:ea: ac:7c:c1:d8:30:dc:63:cb:15:a4:5a:dd:be:84:9d:24:e1:82: 2e:f6:9c:47:c1:b3:67:9c:68:04:33:e3:6a:38:b4:fc:54:ca: 4f:1c:ad:c5:8e:8e:c4:97:66:1c:d3:84:d3:93:7a:8b:9e:02: b5:c1:f1:41:9c:15:5b:43:09:7a:99:50:ea:ec:9b:7c:78:31: 05:60:1b:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSsQj0CO5OLeczDudLmyiCMt90EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNTA2MjgxMDU3MDJaFw0yNTA3MDEyMTA5MDJaMDMxMTAvBgNV BAMTKEE3RkJCODMxNzI0RUFBODFGQjdDNDYwNTVDMjJGNkVFNDc5ODQ2NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpR0Ss+RyOjZV31qw6NaMNP6Gg aaVkxB7JXyWzotZpMbQ270DPi2D6BOXNYFnWNsiSei3RekQ71KJv6P1RdZZTqA2M JZjSN4Otx2jER/Y7v+4o6XHS8zVzffQCs1M6HkEijsE5ee/z3te1MXEc6iGH7+3B U9GdPL35rtiiWfAgXw02rI4hhuMzCzMPskxxvGJNIBh5Ozwprzi9fEKan7lFzMe6 rrRVVModYJiO30Wnr9durVMPMflM98Om9AhTb5VGXD0MvgpAfqKT735cimMtFff9 YrKLHU3XJm9ovcCEp/LLW7dUIw7Egq8u66OgjjE3gFqu+I2thTjYO4YTez2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp/u4MXJOqoH7fEYFXCL27keYRlIwHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNF NTA0MzFGMEY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFmuQK1/KL+aK0cYCB2jaC2JKDpcpbfIOJ9 TKM55gm/OdQz/EV8K8WcZ9YCu/VIWxJNJzvjMyXxm3papCYj7bbsNOG9aD1+UAzl ADCxbl0u36CSxk/eK3jybDPoRWfMB1YcSseUtES6QlcpRxe9OIOYN7XVaV7Ww/JH ibW2OC2LQrJ7WvQRSig4yqP3vnXa7KqKTHz3ZlSxHyGwoqxExw7wBl2QP5kdMVPk 8FIQ9jit8tmB6qx8wdgw3GPLFaRa3b6EnSThgi72nEfBs2ecaAQz42o4tPxUyk8c rcWOjsSXZhzThNOTeoueArXB8UGcFVtDCXqZUOrsm3x4MQVgGyo= -----END CERTIFICATE-----Generated at Sun Jun 29 22:42:54 2025 by rpki-client