$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft File: 28612772543E43335B080C32808B7FDC277E71E4.mft (raw, json) Hash identifier: 6qVfg7x5PEGEf/Fnz9NloPDnY7d1f/GMryv80+emljM= Subject key identifier: E4:8D:6E:FB:E6:81:A5:76:BB:15:47:52:D8:71:3C:DE:B1:87:82:01 Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Certificate issuer: /CN=28612772543E43335B080C32808B7FDC277E71E4 Certificate serial: 46B822DA576AF3A1F089D1013EDB65650D8681B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft Manifest number: 0197 Signing time: Wed 25 Mar 2026 13:01:17 +0000 Manifest this update: Wed 25 Mar 2026 12:56:17 +0000 Manifest next update: Sat 28 Mar 2026 16:43:17 +0000 Files and hashes: 1: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: RAlnEnom5DxgyjJGz4HMb0m9LakHmzQTvYvsB15UJ40=) 2: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: xGMt/qz2gLSpF2/GLoO76XEkXVnWKO075lHn2nkpucQ=) 3: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: oosppneRoSbmwD3s+VWSjVI8PDvHs2L2ec3h4IZjW/8=) 4: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: eKlNzLcXtNJ6j9o2YNvxo9gNUcarXxr4w6XmmCIYGdU=) 5: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: Gn1y+vGI1pMr1RUP5Xcp6ZX24+/thjU5EMlcN69zymE=) 6: 28612772543E43335B080C32808B7FDC277E71E4.crl (hash: fs2JLar7UpqyIP6Zsti8RYte6LuPTnzHvTW4n97wk+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b8:22:da:57:6a:f3:a1:f0:89:d1:01:3e:db:65:65:0d:86:81:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4 Validity Not Before: Mar 25 12:56:17 2026 GMT Not After : Mar 28 16:43:17 2026 GMT Subject: CN=E48D6EFBE681A576BB154752D8713CDEB1878201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:24:97:d9:2a:2b:cf:ce:c1:19:df:1d:e1:bb: 8c:86:9b:da:33:c6:7c:52:1c:f5:4f:9c:34:f7:14: d5:63:4f:9d:01:68:28:5f:66:84:4b:09:b6:6d:29: a6:2d:40:e6:39:57:37:c4:3d:32:72:a3:50:3c:d4: 01:55:9b:78:d1:f1:7f:26:4c:d9:df:53:7b:17:8f: fe:06:be:14:fe:ac:07:e9:92:3d:5d:fa:7f:84:cc: c7:ec:35:4e:4c:fd:93:50:cc:f7:c7:9a:e8:ed:4b: f3:b4:f6:f3:fe:1c:3f:2b:16:77:6b:f5:9e:64:9e: 8f:9b:fc:6c:f4:07:24:ac:3e:f9:f8:77:42:11:a9: 8d:6e:1b:5a:06:b7:a3:ce:50:c7:bd:0f:95:b3:9c: 0e:7f:ae:c5:15:f9:09:ab:db:fc:68:5a:26:43:64: 44:99:e1:8b:d5:49:a0:d0:3b:77:21:2a:b8:6f:6e: ca:0e:e8:aa:c7:61:1c:41:25:02:cc:30:74:2e:5b: 9b:16:30:47:60:6d:42:2d:18:27:a3:f0:38:30:2e: dc:84:14:c0:43:e7:e2:82:f0:f8:58:26:69:32:87: d5:dd:1b:13:f9:c5:a0:e3:3b:94:c5:af:13:7b:02: f6:8a:fc:84:8e:b3:4f:a0:2f:74:d6:69:87:e5:a2: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8D:6E:FB:E6:81:A5:76:BB:15:47:52:D8:71:3C:DE:B1:87:82:01 X509v3 Authority Key Identifier: keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:8a:ea:38:ec:d2:cf:4f:5b:26:91:24:5b:68:07:01:4e:0d: 08:8f:9e:0a:5d:ad:4d:8f:06:06:1b:a4:12:02:39:d2:b4:a7: 10:a6:e9:76:c5:fe:6c:6c:31:fa:6f:e4:ec:df:e5:ad:d3:4f: e4:80:08:32:da:a6:1d:99:15:e9:5e:25:45:a3:a0:33:3b:f7: 4e:79:82:80:4e:3b:2f:ca:51:ee:34:73:29:e6:d2:0b:8a:b2: 35:36:a0:ad:36:d5:bf:29:80:96:fc:7d:4a:c3:c2:b9:04:95: 57:db:02:78:49:f9:60:46:66:c1:fc:a2:52:84:3b:8c:15:10: 9a:2a:65:d5:d3:6d:4e:01:6e:84:4c:61:68:1d:a9:cc:f3:15: a4:5e:e5:cc:3a:2f:fb:c5:55:9d:4e:33:80:33:8a:e1:81:1b: 37:02:b2:9d:d9:d2:75:b8:e0:30:96:96:fe:aa:00:b2:de:aa: 55:66:17:fd:bf:72:66:ae:8f:ca:8e:f7:bd:28:3f:96:06:4b: 86:4b:e0:ff:3f:33:f9:ff:7c:8c:61:93:77:ab:4f:c8:71:6a: 54:98:de:76:a4:96:65:94:fd:d9:64:7a:91:12:ba:5d:a2:d7: fa:1c:b8:3b:e4:77:56:1d:f7:c9:07:55:be:38:d0:a9:82:11: de:6a:63:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURrgi2ldq86HwidEBPttlZQ2GgbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMy NzdFNzFFNDAeFw0yNjAzMjUxMjU2MTdaFw0yNjAzMjgxNjQzMTdaMDMxMTAvBgNV BAMTKEU0OEQ2RUZCRTY4MUE1NzZCQjE1NDc1MkQ4NzEzQ0RFQjE4NzgyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXJJfZKivPzsEZ3x3hu4yGm9oz xnxSHPVPnDT3FNVjT50BaChfZoRLCbZtKaYtQOY5VzfEPTJyo1A81AFVm3jR8X8m TNnfU3sXj/4GvhT+rAfpkj1d+n+EzMfsNU5M/ZNQzPfHmujtS/O09vP+HD8rFndr 9Z5kno+b/Gz0BySsPvn4d0IRqY1uG1oGt6POUMe9D5WznA5/rsUV+Qmr2/xoWiZD ZESZ4YvVSaDQO3chKrhvbsoO6KrHYRxBJQLMMHQuW5sWMEdgbUItGCej8DgwLtyE FMBD5+KC8PhYJmkyh9XdGxP5xaDjO5TFrxN7AvaK/ISOs0+gL3TWaYfloiFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5I1u++aBpXa7FUdS2HE83rGHggEwHwYDVR0j BBgwFoAUKGEnclQ+QzNbCAwygIt/3Cd+ceQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8yODYxMjc3MjU0 M0U0MzMzNUIwODBDMzI4MDhCN0ZEQzI3N0U3MUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMyNzdF NzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdG REMyNzdFNzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOK6jjs0s9PWyaRJFtoBwFODQiPngpdrU2P BgYbpBICOdK0pxCm6XbF/mxsMfpv5Ozf5a3TT+SACDLaph2ZFeleJUWjoDM79055 goBOOy/KUe40cynm0guKsjU2oK021b8pgJb8fUrDwrkElVfbAnhJ+WBGZsH8olKE O4wVEJoqZdXTbU4BboRMYWgdqczzFaRe5cw6L/vFVZ1OM4AziuGBGzcCsp3Z0nW4 4DCWlv6qALLeqlVmF/2/cmauj8qO970oP5YGS4ZL4P8/M/n/fIxhk3erT8hxalSY 3naklmWU/dlkepESul2i1/ocuDvkd1Yd98kHVb440KmCEd5qY2I= -----END CERTIFICATE-----Generated at Thu Mar 26 21:05:04 2026 by rpki-client