$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: ISGl89+twgCDnjguvGdTRbpPia51zcFSTGX1qRRzW00= Subject key identifier: 93:6E:8E:A5:00:3E:2E:50:17:E8:C8:85:5F:1E:CE:84:F3:2F:FA:26 Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 4BCA3991E9DE7E5C5CF8CE53D93B2CDD2476EAEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 034D Signing time: Fri 09 May 2025 08:51:08 +0000 Manifest this update: Fri 09 May 2025 08:46:08 +0000 Manifest next update: Mon 12 May 2025 18:23:08 +0000 Files and hashes: 1: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: +OfyUKd9ah3XpdJZgBKLIUwPhedhMt0DHdPOmM0Y/1k=) 2: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: lWrS2QpUAKIauEC7UJGsaSkfkAk28NouZWL+DJtRIfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 18:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ca:39:91:e9:de:7e:5c:5c:f8:ce:53:d9:3b:2c:dd:24:76:ea:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: May 9 08:46:08 2025 GMT Not After : May 12 18:23:08 2025 GMT Subject: CN=936E8EA5003E2E5017E8C8855F1ECE84F32FFA26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:2f:68:f5:62:23:cc:d2:77:b0:b0:2f:68: 00:a0:d4:d2:7a:54:1b:a2:9b:fa:db:e5:b6:af:a4: e8:ad:61:92:a4:b7:78:01:fa:5e:87:76:0c:77:e3: e3:5e:33:74:d0:26:e0:72:7c:aa:86:22:d8:34:24: 59:de:d6:e1:43:7d:50:24:9e:7e:b1:39:a6:28:52: 31:6e:b5:99:1c:16:3f:8e:e9:f2:ed:19:5e:54:4d: 5c:49:f4:75:40:b3:b2:a2:a9:48:2b:4c:d1:c5:db: e0:a1:ff:13:f7:25:fe:6b:de:26:93:e2:09:34:95: bf:8f:de:8b:4a:88:7f:df:3e:80:a0:62:68:d4:04: 4e:c5:ca:e3:7c:56:ca:8c:a1:9c:3a:4a:7c:5b:4b: 00:96:85:29:63:96:60:9f:73:8d:0e:0a:38:e6:fa: c8:e4:0f:63:39:29:4f:12:55:82:ca:4a:48:0b:4c: 86:54:62:cf:60:ad:06:f2:97:92:86:75:30:d0:86: 70:59:cf:77:2b:9e:cf:67:b1:25:50:ac:be:06:25: 91:07:b7:e5:ce:e6:af:90:2b:c8:b2:3d:f4:bf:0c: 0f:17:2d:f4:e4:8c:63:b2:e7:9a:e7:d4:7d:7d:27: 78:f5:30:c6:e0:f1:f9:7e:c8:d5:d8:cd:f4:c6:03: 0e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6E:8E:A5:00:3E:2E:50:17:E8:C8:85:5F:1E:CE:84:F3:2F:FA:26 X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:57:93:98:47:33:8f:69:47:9f:54:46:02:3f:9d:cf:fb:fe: b0:b0:4e:29:21:d4:89:f6:6c:f6:de:72:23:0a:3a:92:9b:c9: a6:09:78:91:36:79:b4:73:24:d8:cd:41:2d:98:6d:38:e6:e5: 83:91:19:c9:e2:a7:10:3c:76:f0:d4:28:b4:99:e7:dc:ce:f3: 84:e9:dc:ae:25:e8:b7:77:cd:95:f2:79:3b:95:fd:bc:ea:0b: f3:0e:a4:ad:55:42:09:2a:f5:cc:7d:f9:8e:11:25:f3:c2:9e: 50:62:97:d2:ee:df:95:ef:d6:6e:00:4c:c4:77:9b:c9:a2:37: 12:69:98:d9:1c:77:be:48:d3:d9:45:cd:6e:c1:3f:e0:f5:96: 65:01:3c:6b:29:1e:84:12:3d:9c:00:2e:b7:4d:f2:fa:fa:cd: 51:02:9d:b8:f5:17:28:ec:92:7b:b9:73:58:0b:ad:7a:0e:0a: b7:fb:f9:6a:80:94:43:d4:92:98:84:d8:32:dd:22:10:37:e6: 49:b5:4d:fc:04:d4:40:21:68:91:b7:d7:9f:3d:2d:b6:06:37: 86:3b:fc:77:7f:b0:cc:79:53:fc:d9:b9:2e:3c:f6:e1:0f:8e: 07:46:3d:15:1d:34:bc:12:cf:55:53:06:7e:92:3a:cb:6f:12: 22:bb:ea:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS8o5keneflxc+M5T2Tss3SR26uowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNTA1MDkwODQ2MDhaFw0yNTA1MTIxODIzMDhaMDMxMTAvBgNV BAMTKDkzNkU4RUE1MDAzRTJFNTAxN0U4Qzg4NTVGMUVDRTg0RjMyRkZBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Hi9o9WIjzNJ3sLAvaACg1NJ6 VBuim/rb5bavpOitYZKkt3gB+l6Hdgx34+NeM3TQJuByfKqGItg0JFne1uFDfVAk nn6xOaYoUjFutZkcFj+O6fLtGV5UTVxJ9HVAs7KiqUgrTNHF2+Ch/xP3Jf5r3iaT 4gk0lb+P3otKiH/fPoCgYmjUBE7FyuN8VsqMoZw6SnxbSwCWhSljlmCfc40OCjjm +sjkD2M5KU8SVYLKSkgLTIZUYs9grQbyl5KGdTDQhnBZz3crns9nsSVQrL4GJZEH t+XO5q+QK8iyPfS/DA8XLfTkjGOy55rn1H19J3j1MMbg8fl+yNXYzfTGAw6BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk26OpQA+LlAX6MiFXx7OhPMv+iYwHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5Xk5hHM49pR59URgI/nc/7/rCwTikh1In2 bPbeciMKOpKbyaYJeJE2ebRzJNjNQS2YbTjm5YORGcnipxA8dvDUKLSZ59zO84Tp 3K4l6Ld3zZXyeTuV/bzqC/MOpK1VQgkq9cx9+Y4RJfPCnlBil9Lu35Xv1m4ATMR3 m8miNxJpmNkcd75I09lFzW7BP+D1lmUBPGspHoQSPZwALrdN8vr6zVECnbj1Fyjs knu5c1gLrXoOCrf7+WqAlEPUkpiE2DLdIhA35km1TfwE1EAhaJG31589LbYGN4Y7 /Hd/sMx5U/zZuS489uEPjgdGPRUdNLwSz1VTBn6SOstvEiK76mY= -----END CERTIFICATE-----Generated at Sun May 11 04:31:08 2025 by rpki-client