$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: O5Pz6GnxRZKMVAWs5b+AQcBtNw2jHLBJ1MP3TPXxqDE= Subject key identifier: BD:23:97:A4:FD:70:08:77:C3:8E:A8:18:F4:B6:F0:A1:24:EB:3B:59 Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 375E8685EFBEF217F0B28ED2E9B2E44C4F3DBBD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 0395 Signing time: Sun 19 Oct 2025 09:11:10 +0000 Manifest this update: Sun 19 Oct 2025 09:06:10 +0000 Manifest next update: Wed 22 Oct 2025 20:02:10 +0000 Files and hashes: 1: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: /LgS/x/NGA22+DAiCOZFbx1SQN7xIZv0qeCa0OG17mk=) 2: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: nkgXHJ5vIn9/vQDJ4p+3bqA8uvcYzydpLoR2QR3gRRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:5e:86:85:ef:be:f2:17:f0:b2:8e:d2:e9:b2:e4:4c:4f:3d:bb:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: Oct 19 09:06:10 2025 GMT Not After : Oct 22 20:02:10 2025 GMT Subject: CN=BD2397A4FD700877C38EA818F4B6F0A124EB3B59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:96:80:33:38:9e:e7:48:dd:54:5f:bf:26: c4:fb:b8:d5:66:5a:71:97:f8:ad:7e:f6:47:87:b8: 8b:11:e2:cd:12:c1:d4:0d:94:df:bb:43:5b:05:74: a5:53:de:7b:7f:a2:04:b0:d5:f9:57:6a:f8:2f:36: 35:63:ce:35:5b:94:92:d9:8c:87:b3:55:93:11:85: 26:50:43:a7:f1:01:e4:3f:c6:52:64:c7:cd:f5:b0: 13:87:99:1d:0a:0b:a4:91:f3:74:04:9e:23:c1:47: fa:3f:c8:0b:4c:af:ba:f5:98:97:ba:c2:c7:3f:5f: 60:fa:a1:41:af:5e:cd:e4:ea:89:65:12:9a:53:e4: d1:6e:6c:3a:53:bc:41:5b:2e:29:34:ff:5a:2b:59: 0d:94:13:3c:91:39:65:53:53:d2:28:15:94:90:55: 5d:22:b4:22:61:7c:1c:8c:23:6f:ee:c0:59:b2:2b: 70:27:b4:59:92:68:f7:37:d0:c1:8b:51:61:4f:26: c7:b5:0d:40:92:00:4d:a7:fb:01:90:e4:8a:ad:90: 94:a8:5f:52:c8:7d:78:82:5d:3a:f8:13:88:81:8e: aa:57:ac:18:aa:d0:b0:3b:1c:7d:5d:b0:90:c7:54: a9:2d:3c:06:ba:05:47:89:60:ca:f8:b6:19:f5:12: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:23:97:A4:FD:70:08:77:C3:8E:A8:18:F4:B6:F0:A1:24:EB:3B:59 X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6e:d6:57:1a:99:5c:de:74:ad:cd:56:d7:c3:a5:fb:79:c6: 1b:05:80:af:82:a8:53:3c:2a:96:8c:cb:98:0b:e7:fe:82:46: 76:61:d9:2c:e5:ad:5e:a0:0b:cd:1f:96:a8:ef:53:b0:4c:dd: a6:ec:c3:da:99:43:6a:33:b8:e3:54:28:06:a0:e6:8c:d1:85: b9:58:fa:3c:ac:c4:29:94:e4:66:54:4c:2d:94:c9:58:03:94: c3:18:40:61:97:4f:27:fa:a3:77:d4:eb:7e:4a:32:27:b9:6b: 79:b2:2b:38:7d:e5:a7:e0:4d:ef:5a:4e:6a:ff:fe:c2:ed:ac: 81:83:64:b0:d6:ba:98:9a:0c:6d:4e:e7:f6:22:e5:f8:91:7a: 7d:cb:5d:82:1f:59:53:f1:86:56:44:2b:62:f0:a6:d5:24:f2: 02:dd:d3:5a:bc:a9:83:ed:c6:cb:46:f3:c9:1b:16:68:10:23: 94:fd:cd:01:38:5b:43:ea:af:3d:de:e7:25:c1:37:01:d9:25: c2:65:29:52:6c:aa:64:78:bf:c0:a3:79:8f:52:5c:f7:a6:ae: 52:c4:12:fc:07:6e:bb:7d:58:af:74:34:43:7c:81:04:a3:90: 2d:bf:3f:0d:ed:06:0b:f4:33:c2:08:8e:a6:fd:3b:b9:19:27: 4b:c0:08:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN16Ghe++8hfwso7S6bLkTE89u9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNTEwMTkwOTA2MTBaFw0yNTEwMjIyMDAyMTBaMDMxMTAvBgNV BAMTKEJEMjM5N0E0RkQ3MDA4NzdDMzhFQTgxOEY0QjZGMEExMjRFQjNCNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KZaAMzie50jdVF+/JsT7uNVm WnGX+K1+9keHuIsR4s0SwdQNlN+7Q1sFdKVT3nt/ogSw1flXavgvNjVjzjVblJLZ jIezVZMRhSZQQ6fxAeQ/xlJkx831sBOHmR0KC6SR83QEniPBR/o/yAtMr7r1mJe6 wsc/X2D6oUGvXs3k6ollEppT5NFubDpTvEFbLik0/1orWQ2UEzyROWVTU9IoFZSQ VV0itCJhfByMI2/uwFmyK3AntFmSaPc30MGLUWFPJse1DUCSAE2n+wGQ5IqtkJSo X1LIfXiCXTr4E4iBjqpXrBiq0LA7HH1dsJDHVKktPAa6BUeJYMr4thn1EtEFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvSOXpP1wCHfDjqgY9LbwoSTrO1kwHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1u1lcamVzedK3NVtfDpft5xhsFgK+CqFM8 KpaMy5gL5/6CRnZh2SzlrV6gC80flqjvU7BM3absw9qZQ2ozuONUKAag5ozRhblY +jysxCmU5GZUTC2UyVgDlMMYQGGXTyf6o3fU635KMie5a3myKzh95afgTe9aTmr/ /sLtrIGDZLDWupiaDG1O5/Yi5fiRen3LXYIfWVPxhlZEK2LwptUk8gLd01q8qYPt xstG88kbFmgQI5T9zQE4W0Pqrz3e5yXBNwHZJcJlKVJsqmR4v8CjeY9SXPemrlLE EvwHbrt9WK90NEN8gQSjkC2/Pw3tBgv0M8IIjqb9O7kZJ0vACB8= -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:55 2025 by rpki-client