$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft File: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft (raw, json) Hash identifier: nrIRDvmMAm4CfJaOQdR7eWlWIx8MLCiDAnPMBRum6c0= Subject key identifier: 95:F9:7F:EB:CF:1C:0C:AC:10:7B:4D:5A:37:D4:6B:02:FA:EE:B5:CA Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 4F3F0BCA13DADA4A3B32E216009427172A407A51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft Manifest number: 012E Signing time: Sat 23 Aug 2025 11:53:55 +0000 Manifest this update: Sat 23 Aug 2025 11:48:55 +0000 Manifest next update: Tue 26 Aug 2025 16:56:55 +0000 Files and hashes: 1: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: zEnS7MUIR/K5UV+N9UMD9HrZThlFZltdIGvWRa0yVIA=) 2: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl (hash: RfM8c7JIFJbb8NCTsQEg8/wBRAdXFeAw5g8PdsI5rf4=) 3: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: OdSsxC/IcH64+HH1xsnqnpx/lq2eSJJ+N7LMBhOTgSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 16:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3f:0b:ca:13:da:da:4a:3b:32:e2:16:00:94:27:17:2a:40:7a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Aug 23 11:48:55 2025 GMT Not After : Aug 26 16:56:55 2025 GMT Subject: CN=95F97FEBCF1C0CAC107B4D5A37D46B02FAEEB5CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:96:d5:42:37:b9:14:aa:a0:c6:e5:35:19: 84:4e:4a:12:86:6f:5b:89:23:46:c6:f0:b7:ae:3e: 5b:b3:bd:40:64:47:60:ca:58:e3:a5:9f:01:26:fe: 06:44:4a:37:5c:99:b3:de:7c:37:e9:37:32:49:0a: 70:79:0f:07:e7:c7:1a:37:ec:e3:b8:34:55:85:e8: 39:87:bb:73:d4:01:5f:93:0f:64:17:ce:9f:01:8f: cc:4a:93:61:6f:72:2d:72:5b:c9:ed:05:94:85:d1: f5:73:ec:09:f4:fc:5d:b0:6c:39:b6:54:5e:fe:c4: 73:3f:fc:e6:f3:1a:0d:e8:9d:39:b6:81:83:36:1f: 8e:34:63:ee:ed:d6:18:11:55:2a:83:97:e9:e2:7a: 99:9f:dd:e4:79:e5:b9:80:6a:e4:53:d4:ca:73:df: ae:32:fe:35:54:ed:bc:60:e0:68:2d:a7:a7:db:48: 33:f2:4f:ba:98:32:c6:c4:85:83:78:63:8d:35:de: 14:e3:e2:1f:09:d3:1b:7b:3b:fa:e8:41:93:7d:a6: ba:f9:4e:d6:5d:00:f5:21:0c:04:8d:64:c3:c6:f8: c1:b3:59:b7:f3:fd:40:b8:97:11:48:8d:fd:90:ef: 1c:99:cb:56:73:e0:9b:b3:f0:fb:11:00:d2:38:e7: cc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F9:7F:EB:CF:1C:0C:AC:10:7B:4D:5A:37:D4:6B:02:FA:EE:B5:CA X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:06:25:77:f9:6e:24:68:f0:76:a2:7c:43:41:0a:a1:8c:93: c4:8e:31:31:92:76:1e:c5:5a:b7:57:b2:20:ff:24:d8:9a:f3: f9:48:42:7e:63:5e:07:d3:8d:a2:d0:86:e2:5b:51:b0:c7:eb: 0f:d6:fb:54:09:07:02:8d:1d:42:1b:70:09:02:1e:6c:98:5d: 01:9f:ac:fc:61:7d:89:01:8e:92:b4:9a:c8:98:36:34:d1:03: aa:d2:dd:84:cd:f1:d5:4c:04:da:4a:a2:b6:6f:5c:2d:d4:e9: b5:e1:60:d1:f1:ca:18:13:7d:91:a3:22:55:c3:f5:33:c0:98: bb:94:6d:41:23:16:dc:10:0f:f2:00:10:5d:48:1e:3e:db:80: 51:82:1b:87:bf:59:60:26:bb:f7:6d:ff:83:84:b3:e3:e6:83: 12:f9:f4:1b:1b:3c:6b:3b:c4:96:e0:da:53:d9:5b:5d:9a:63: c8:85:1f:38:f4:bf:68:eb:a8:74:6f:d3:39:89:6d:3a:f5:6f: 4e:7d:72:cb:1a:11:de:3b:ae:26:e7:8f:45:7c:63:53:57:da: 1d:78:45:2c:03:7e:77:cb:cb:ee:6e:2b:81:4f:bd:f6:39:37: b1:da:0f:0c:3a:f9:fb:f7:6e:cf:13:f9:db:e3:8b:95:88:42: b4:8e:5e:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTz8LyhPa2ko7MuIWAJQnFypAelEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNTA4MjMxMTQ4NTVaFw0yNTA4MjYxNjU2NTVaMDMxMTAvBgNV BAMTKDk1Rjk3RkVCQ0YxQzBDQUMxMDdCNEQ1QTM3RDQ2QjAyRkFFRUI1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoWZbVQje5FKqgxuU1GYROShKG b1uJI0bG8LeuPluzvUBkR2DKWOOlnwEm/gZESjdcmbPefDfpNzJJCnB5Dwfnxxo3 7OO4NFWF6DmHu3PUAV+TD2QXzp8Bj8xKk2Fvci1yW8ntBZSF0fVz7An0/F2wbDm2 VF7+xHM//ObzGg3onTm2gYM2H440Y+7t1hgRVSqDl+niepmf3eR55bmAauRT1Mpz 364y/jVU7bxg4Ggtp6fbSDPyT7qYMsbEhYN4Y4013hTj4h8J0xt7O/roQZN9prr5 TtZdAPUhDASNZMPG+MGzWbfz/UC4lxFIjf2Q7xyZy1Zz4Juz8PsRANI458yXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlfl/688cDKwQe01aN9RrAvrutcowHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2 N2ItOWI4ODI1YjVjZDVmLzAvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0 OTdCMzZGM0FENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAGJXf5biRo8HaifENBCqGMk8SOMTGSdh7F WrdXsiD/JNia8/lIQn5jXgfTjaLQhuJbUbDH6w/W+1QJBwKNHUIbcAkCHmyYXQGf rPxhfYkBjpK0msiYNjTRA6rS3YTN8dVMBNpKorZvXC3U6bXhYNHxyhgTfZGjIlXD 9TPAmLuUbUEjFtwQD/IAEF1IHj7bgFGCG4e/WWAmu/dt/4OEs+PmgxL59BsbPGs7 xJbg2lPZW12aY8iFHzj0v2jrqHRv0zmJbTr1b059cssaEd47ribnj0V8Y1NX2h14 RSwDfnfLy+5uK4FPvfY5N7HaDww6+fv3bs8T+dvji5WIQrSOXrc= -----END CERTIFICATE-----Generated at Sat Aug 23 16:03:50 2025 by rpki-client