$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: toazT+4UusrY3YbiYcoXz+fTJz4sYaBhxCwYjlaTwvg= Subject key identifier: 04:A6:40:1E:56:AB:FA:59:16:73:1C:B5:B4:4B:DA:4B:98:D6:B7:74 Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 03EE0D4F1EACC2342B13977CC60AA2FB4A259723 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 037B Signing time: Thu 21 Aug 2025 15:21:10 +0000 Manifest this update: Thu 21 Aug 2025 15:16:10 +0000 Manifest next update: Sun 24 Aug 2025 23:03:10 +0000 Files and hashes: 1: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: nkgXHJ5vIn9/vQDJ4p+3bqA8uvcYzydpLoR2QR3gRRw=) 2: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: IfLnrYHr8VhWeLGRVH7YXECCgrNyz5/5899lYhUxbtk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ee:0d:4f:1e:ac:c2:34:2b:13:97:7c:c6:0a:a2:fb:4a:25:97:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: Aug 21 15:16:10 2025 GMT Not After : Aug 24 23:03:10 2025 GMT Subject: CN=04A6401E56ABFA5916731CB5B44BDA4B98D6B774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:f8:c4:6a:9a:21:3f:b9:75:e5:44:d2:da: 42:4c:2a:f7:38:f8:60:c9:23:cc:cd:1b:a4:42:6f: ac:95:d3:32:5e:d2:00:c6:d3:d6:0d:12:cd:b3:58: 7c:71:f9:11:5b:18:60:5e:e9:8b:f7:0a:e8:05:c0: d7:99:4b:d8:a0:3c:11:5b:7f:e3:89:98:b1:13:d2: b9:7d:5c:17:a6:c3:62:72:08:06:2a:4c:8f:4d:18: 09:58:d3:ae:65:b9:d1:a0:8a:f1:fd:5d:52:f2:ad: 50:d3:05:9a:a1:c7:3f:0c:50:34:bb:db:a1:06:d7: 05:68:ca:2a:45:df:74:e4:5c:f3:5c:c7:1c:e1:26: 54:3a:56:d2:48:a7:31:41:78:36:59:32:16:78:90: 98:c3:ca:49:b3:77:16:3f:24:15:48:1a:3f:66:34: 81:63:00:be:88:65:35:28:ab:f8:83:05:dd:5c:af: 1c:05:25:c3:c9:50:c6:66:08:52:64:80:3c:12:a6: 77:cb:93:92:99:1c:38:38:b7:95:9c:50:54:c5:41: 7c:9a:d0:7c:2f:49:0c:a4:63:4c:86:f6:f0:ef:b3: de:1d:a7:4b:9b:d9:d1:e2:2c:91:ad:78:ce:6d:66: 95:49:a7:67:b4:ec:e6:f3:ee:cb:79:9c:31:d7:9f: 73:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A6:40:1E:56:AB:FA:59:16:73:1C:B5:B4:4B:DA:4B:98:D6:B7:74 X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fc:55:3e:df:11:15:be:a5:69:c2:86:be:5e:52:aa:87:93: a2:08:9d:70:25:5d:f1:8a:23:80:af:21:2a:23:94:bf:0f:d2: c3:7b:be:e9:8c:ae:44:f9:ab:f6:4c:51:9d:9b:95:a5:28:59: 00:1a:f5:c0:eb:f8:ff:8a:e6:7f:d2:9f:f5:5a:1e:ce:80:32: 20:e5:4d:f3:a6:a0:10:69:82:cc:81:ab:cb:65:55:cf:8b:80: de:b9:54:e5:b3:dc:f3:95:b2:8d:0d:cd:f7:8c:a0:74:be:ea: 14:70:22:f7:01:c6:5f:12:26:83:b4:55:78:fe:71:f9:71:4e: 4f:d7:b8:92:5a:4e:f8:2f:43:d0:d4:22:d7:f4:e0:4a:49:f6: 26:68:2d:91:e0:ca:61:3b:ba:93:06:14:8a:14:64:b5:ac:f7: 3f:be:fc:bb:86:b3:88:07:ca:44:b5:04:7b:98:49:e5:2e:e7: 21:57:42:37:dd:3b:13:17:93:cb:e4:21:a4:61:71:56:75:db: 05:7a:eb:34:92:16:0d:50:98:21:aa:ef:fc:98:5c:0a:81:5c: c1:8c:fa:74:1a:da:0f:c7:fb:80:25:70:fd:fc:aa:65:d1:88: 09:43:dc:db:18:a4:96:d2:ea:e5:ae:75:cb:bf:3e:c9:11:3f: aa:f4:b5:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA+4NTx6swjQrE5d8xgqi+0ollyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNTA4MjExNTE2MTBaFw0yNTA4MjQyMzAzMTBaMDMxMTAvBgNV BAMTKDA0QTY0MDFFNTZBQkZBNTkxNjczMUNCNUI0NEJEQTRCOThENkI3NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtfjEapohP7l15UTS2kJMKvc4 +GDJI8zNG6RCb6yV0zJe0gDG09YNEs2zWHxx+RFbGGBe6Yv3CugFwNeZS9igPBFb f+OJmLET0rl9XBemw2JyCAYqTI9NGAlY065ludGgivH9XVLyrVDTBZqhxz8MUDS7 26EG1wVoyipF33TkXPNcxxzhJlQ6VtJIpzFBeDZZMhZ4kJjDykmzdxY/JBVIGj9m NIFjAL6IZTUoq/iDBd1crxwFJcPJUMZmCFJkgDwSpnfLk5KZHDg4t5WcUFTFQXya 0HwvSQykY0yG9vDvs94dp0ub2dHiLJGteM5tZpVJp2e07Obz7st5nDHXn3MhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBKZAHlar+lkWcxy1tEvaS5jWt3QwHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADv8VT7fERW+pWnChr5eUqqHk6IInXAlXfGK I4CvISojlL8P0sN7vumMrkT5q/ZMUZ2blaUoWQAa9cDr+P+K5n/Sn/VaHs6AMiDl TfOmoBBpgsyBq8tlVc+LgN65VOWz3POVso0NzfeMoHS+6hRwIvcBxl8SJoO0VXj+ cflxTk/XuJJaTvgvQ9DUItf04EpJ9iZoLZHgymE7upMGFIoUZLWs9z++/LuGs4gH ykS1BHuYSeUu5yFXQjfdOxMXk8vkIaRhcVZ12wV66zSSFg1QmCGq7/yYXAqBXMGM +nQa2g/H+4AlcP38qmXRiAlD3NsYpJbS6uWudcu/PskRP6r0tQI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:21:21 2025 by rpki-client