$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft File: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft (raw, json) Hash identifier: +X3T94sbloo3beaUJjNN7qbug9Mrzv5qhYTCLciUntQ= Subject key identifier: AF:E1:5D:4F:E4:AE:06:B3:C2:B2:3B:DD:05:A5:DE:A4:73:DA:EE:B4 Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 7E20C015024848F3433571D59B668AACD39E7F17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft Manifest number: 0147 Signing time: Mon 20 Oct 2025 03:32:06 +0000 Manifest this update: Mon 20 Oct 2025 03:27:06 +0000 Manifest next update: Thu 23 Oct 2025 08:18:06 +0000 Files and hashes: 1: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: OdSsxC/IcH64+HH1xsnqnpx/lq2eSJJ+N7LMBhOTgSQ=) 2: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: zEnS7MUIR/K5UV+N9UMD9HrZThlFZltdIGvWRa0yVIA=) 3: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl (hash: 2dBNGBRgE9CTdiiRHQAJU4XXGhM8EX/3aLH4pwb+j/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:20:c0:15:02:48:48:f3:43:35:71:d5:9b:66:8a:ac:d3:9e:7f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Oct 20 03:27:06 2025 GMT Not After : Oct 23 08:18:06 2025 GMT Subject: CN=AFE15D4FE4AE06B3C2B23BDD05A5DEA473DAEEB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:9e:17:fa:1a:f1:04:12:86:63:72:cf:48: 15:ae:df:71:48:54:6f:7f:f9:45:99:34:d5:21:33: 75:82:a3:6d:65:ab:cf:1d:7b:a1:ec:44:ba:6d:69: b6:7b:ea:37:93:13:59:84:d4:89:f1:c8:c1:f2:90: 01:59:5e:94:44:47:30:5b:b2:69:94:80:a1:c3:a1: da:d8:06:ac:c7:f7:21:3f:e4:d3:d6:25:a1:0f:5b: 7a:17:b8:22:33:ae:78:27:ae:31:8b:85:5c:5e:65: 19:f8:06:8e:71:07:25:b4:0e:f5:c9:1f:b2:af:70: d7:d7:8f:61:f9:b3:d6:da:18:a7:66:a6:c5:75:13: c7:b4:bc:e7:f5:39:13:0c:0e:5d:ed:3a:b4:3f:6a: dd:a0:b6:c6:91:52:d9:03:99:ff:4d:90:40:1d:83: 61:cb:53:7e:61:c5:b8:13:b2:16:1e:b3:5a:28:17: c1:1c:5b:5f:02:b5:87:57:60:c1:af:b5:84:a5:62: a0:9e:e2:a2:97:bf:59:8e:fd:b9:4d:82:ca:a6:5c: 7e:8c:21:54:0f:11:96:fe:30:c4:e1:50:a0:ab:04: 8c:95:fa:e5:13:aa:c6:4d:6d:99:13:cb:05:4d:94: cc:fd:fe:b2:de:34:91:d6:d9:1a:53:ff:b4:a2:f1: 48:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E1:5D:4F:E4:AE:06:B3:C2:B2:3B:DD:05:A5:DE:A4:73:DA:EE:B4 X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:05:0c:7b:ab:50:c1:6c:e4:40:4b:ad:52:38:6b:36:81:7d: 71:21:27:07:7d:21:39:90:9f:8f:f7:5a:b8:c8:00:cb:d2:64: 81:93:ab:e5:02:aa:5f:d4:8a:50:c2:82:13:6c:4c:07:be:96: 72:cf:9a:d2:ca:a1:fe:a6:69:ae:1f:e9:9b:f6:a3:78:00:72: a6:6e:67:35:b7:bf:f2:b2:e6:1d:38:71:48:15:97:6b:fe:0c: 4a:b7:9e:fa:63:0e:bc:ec:ea:2c:33:26:95:2a:19:a1:a7:a2: 97:46:03:89:71:c6:16:a5:7f:fb:7f:b9:ab:2b:df:ca:f1:1e: 68:25:84:dc:ef:c4:54:e7:83:39:2c:32:7d:f0:70:d2:92:7f: 66:c0:16:06:34:4e:c4:52:e2:8a:6a:73:bd:2e:c1:a6:29:fe: 0c:92:c8:12:96:92:98:26:57:f2:05:b2:8b:b0:02:f1:ee:ff: e0:f3:0f:1b:e6:f0:86:a7:7c:7f:85:ff:35:72:26:91:a9:0d: 3e:02:3e:a8:b7:83:b0:f4:54:02:a8:85:17:8f:23:dd:81:15: 25:f3:71:df:6b:71:e4:36:69:6d:ba:f0:02:c5:f1:60:df:bc: b4:0d:95:2c:56:91:10:91:06:2c:92:d0:ce:f8:8b:07:51:9c: 25:78:0a:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfiDAFQJISPNDNXHVm2aKrNOefxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNTEwMjAwMzI3MDZaFw0yNTEwMjMwODE4MDZaMDMxMTAvBgNV BAMTKEFGRTE1RDRGRTRBRTA2QjNDMkIyM0JERDA1QTVERUE0NzNEQUVFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJzp4X+hrxBBKGY3LPSBWu33FI VG9/+UWZNNUhM3WCo21lq88de6HsRLptabZ76jeTE1mE1InxyMHykAFZXpRERzBb smmUgKHDodrYBqzH9yE/5NPWJaEPW3oXuCIzrngnrjGLhVxeZRn4Bo5xByW0DvXJ H7KvcNfXj2H5s9baGKdmpsV1E8e0vOf1ORMMDl3tOrQ/at2gtsaRUtkDmf9NkEAd g2HLU35hxbgTshYes1ooF8EcW18CtYdXYMGvtYSlYqCe4qKXv1mO/blNgsqmXH6M IVQPEZb+MMThUKCrBIyV+uUTqsZNbZkTywVNlMz9/rLeNJHW2RpT/7Si8UiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr+FdT+SuBrPCsjvdBaXepHPa7rQwHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2 N2ItOWI4ODI1YjVjZDVmLzAvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0 OTdCMzZGM0FENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwFDHurUMFs5EBLrVI4azaBfXEhJwd9ITmQ n4/3WrjIAMvSZIGTq+UCql/UilDCghNsTAe+lnLPmtLKof6maa4f6Zv2o3gAcqZu ZzW3v/Ky5h04cUgVl2v+DEq3nvpjDrzs6iwzJpUqGaGnopdGA4lxxhalf/t/uasr 38rxHmglhNzvxFTngzksMn3wcNKSf2bAFgY0TsRS4opqc70uwaYp/gySyBKWkpgm V/IFsouwAvHu/+DzDxvm8IanfH+F/zVyJpGpDT4CPqi3g7D0VAKohRePI92BFSXz cd9rceQ2aW268ALF8WDfvLQNlSxWkRCRBiyS0M74iwdRnCV4Cro= -----END CERTIFICATE-----Generated at Tue Oct 21 00:58:35 2025 by rpki-client