$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft File: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft (raw, json) Hash identifier: WYbHqY1KRPiIQXPhv+0kHsGr+RQ4BkGRN89782wT53E= Subject key identifier: BF:CE:C2:89:71:A3:F8:DB:3A:4A:50:24:8A:00:BC:9B:E2:3F:F5:E0 Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 60906BE4E0D33D9497776E936267CBD5A55F5F0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft Manifest number: 0116 Signing time: Mon 30 Jun 2025 17:42:03 +0000 Manifest this update: Mon 30 Jun 2025 17:37:03 +0000 Manifest next update: Thu 03 Jul 2025 22:44:03 +0000 Files and hashes: 1: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: OdSsxC/IcH64+HH1xsnqnpx/lq2eSJJ+N7LMBhOTgSQ=) 2: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl (hash: L2f7Q9fonJkpnqABkU6XQ6OUeqbaCIdj42kJLLG42zg=) 3: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: zEnS7MUIR/K5UV+N9UMD9HrZThlFZltdIGvWRa0yVIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 22:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:90:6b:e4:e0:d3:3d:94:97:77:6e:93:62:67:cb:d5:a5:5f:5f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Jun 30 17:37:03 2025 GMT Not After : Jul 3 22:44:03 2025 GMT Subject: CN=BFCEC28971A3F8DB3A4A50248A00BC9BE23FF5E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:de:01:64:7c:7a:bc:59:9c:16:7a:7d:11: a3:bc:92:33:58:3d:8e:ca:38:61:e1:2d:b9:4a:d8: d2:ee:af:fb:79:1e:f5:7d:6a:fc:10:b5:22:75:61: 01:88:85:c7:76:cb:a8:c3:89:cd:b5:52:3d:79:36: af:58:9b:d2:e1:50:13:ed:75:31:68:fe:28:49:ea: c3:cf:2d:1e:ea:9c:20:ce:aa:73:c5:e5:7d:2b:ef: b4:de:08:cc:b6:01:24:4c:91:49:b7:d3:d4:6b:9a: b6:7b:88:63:95:5a:20:f4:ff:56:38:45:cd:9b:e1: eb:7e:6d:2e:e6:d1:e2:b9:8d:de:26:e8:8e:1c:1e: b6:be:e6:4c:c2:5e:7d:fe:62:08:08:df:bc:92:73: 36:52:1a:d4:ac:90:d9:48:cd:e8:fd:f9:cf:17:e3: b5:12:05:22:d1:b2:39:6b:95:db:40:54:6f:8a:0c: c4:d9:c8:a8:da:1b:51:c6:2f:07:83:8b:47:a3:d7: 4a:43:50:6d:66:e5:99:ed:8f:fe:de:f6:e5:4d:dd: 2d:7a:4c:74:77:57:39:83:81:90:2b:56:5a:40:e0: fd:34:de:f0:bb:1c:b6:83:88:4e:4d:ef:a0:6c:ab: a6:06:49:a0:96:e2:fa:d1:06:0a:bc:2b:12:4b:da: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CE:C2:89:71:A3:F8:DB:3A:4A:50:24:8A:00:BC:9B:E2:3F:F5:E0 X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:5e:2e:54:da:d0:42:99:22:03:1a:30:65:a3:dd:c4:47:70: 11:e1:e1:bb:e0:8b:ad:6e:77:63:51:8e:93:00:99:f1:6f:73: 11:12:88:8b:17:31:6c:48:b9:ea:b5:ee:e3:0a:58:53:e2:a8: f1:25:33:b1:24:99:e8:5d:dd:05:26:5e:d0:67:33:9c:d1:29: dc:a4:6f:fb:00:7a:09:01:27:d9:b3:f9:a9:0f:50:1b:4d:d9: 8b:18:bd:d9:e3:d1:0e:eb:b7:3b:7b:93:9a:4c:34:eb:2f:db: bb:c9:5e:38:6f:f1:4a:ed:13:04:e5:0a:53:d0:5f:4a:ee:ec: 9b:6c:41:7e:bb:a4:23:d5:72:b0:fc:40:54:68:22:b9:70:51: 26:c9:7e:69:d9:2e:17:19:26:70:46:98:ec:e9:82:06:d5:12: b2:0b:34:40:f1:d7:09:1a:40:d8:38:5c:b8:52:fb:c9:07:12: 25:f6:a1:7e:77:82:92:42:c9:64:4e:bd:2e:b2:49:06:ad:af: 3d:2b:ff:80:63:2e:13:86:fd:20:8f:cf:8f:73:da:b0:d7:c2: 73:ca:27:99:59:42:80:72:2b:1f:98:83:7d:6c:14:5b:a7:1f: 56:be:3f:b1:67:49:dc:08:98:c0:41:d9:8d:6a:f5:df:82:9d: 8e:d4:6c:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJBr5ODTPZSXd26TYmfL1aVfXw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNTA2MzAxNzM3MDNaFw0yNTA3MDMyMjQ0MDNaMDMxMTAvBgNV BAMTKEJGQ0VDMjg5NzFBM0Y4REIzQTRBNTAyNDhBMDBCQzlCRTIzRkY1RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LN4BZHx6vFmcFnp9EaO8kjNY PY7KOGHhLblK2NLur/t5HvV9avwQtSJ1YQGIhcd2y6jDic21Uj15Nq9Ym9LhUBPt dTFo/ihJ6sPPLR7qnCDOqnPF5X0r77TeCMy2ASRMkUm309RrmrZ7iGOVWiD0/1Y4 Rc2b4et+bS7m0eK5jd4m6I4cHra+5kzCXn3+YggI37ySczZSGtSskNlIzej9+c8X 47USBSLRsjlrldtAVG+KDMTZyKjaG1HGLweDi0ej10pDUG1m5Zntj/7e9uVN3S16 THR3VzmDgZArVlpA4P003vC7HLaDiE5N76Bsq6YGSaCW4vrRBgq8KxJL2uM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv87CiXGj+Ns6SlAkigC8m+I/9eAwHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2 N2ItOWI4ODI1YjVjZDVmLzAvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0 OTdCMzZGM0FENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJeLlTa0EKZIgMaMGWj3cRHcBHh4bvgi61u d2NRjpMAmfFvcxESiIsXMWxIueq17uMKWFPiqPElM7Ekmehd3QUmXtBnM5zRKdyk b/sAegkBJ9mz+akPUBtN2YsYvdnj0Q7rtzt7k5pMNOsv27vJXjhv8UrtEwTlClPQ X0ru7JtsQX67pCPVcrD8QFRoIrlwUSbJfmnZLhcZJnBGmOzpggbVErILNEDx1wka QNg4XLhS+8kHEiX2oX53gpJCyWROvS6ySQatrz0r/4BjLhOG/SCPz49z2rDXwnPK J5lZQoByKx+Yg31sFFunH1a+P7FnSdwImMBB2Y1q9d+CnY7UbMY= -----END CERTIFICATE-----Generated at Wed Jul 2 00:00:57 2025 by rpki-client