$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft File: 28612772543E43335B080C32808B7FDC277E71E4.mft (raw, json) Hash identifier: tMJ2hPNFzLKOlws9EtodDi7mh+fMCufALpaHsSRYJbw= Subject key identifier: AC:E3:FE:BB:84:7A:96:C9:55:1C:94:3E:17:63:C9:34:1B:5C:6A:BC Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Certificate issuer: /CN=28612772543E43335B080C32808B7FDC277E71E4 Certificate serial: 2F82BACC630191D2D2C1B662CB4A1A6DCFC70D1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft Manifest number: 0151 Signing time: Sat 18 Oct 2025 17:51:08 +0000 Manifest this update: Sat 18 Oct 2025 17:46:08 +0000 Manifest next update: Wed 22 Oct 2025 03:51:08 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: eKlNzLcXtNJ6j9o2YNvxo9gNUcarXxr4w6XmmCIYGdU=) 2: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: xGMt/qz2gLSpF2/GLoO76XEkXVnWKO075lHn2nkpucQ=) 3: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: RAlnEnom5DxgyjJGz4HMb0m9LakHmzQTvYvsB15UJ40=) 4: 28612772543E43335B080C32808B7FDC277E71E4.crl (hash: UiVfohCnqNrh1/QHLxl8msvuSDIU8YZwt4/OIIhkoSY=) 5: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: Gn1y+vGI1pMr1RUP5Xcp6ZX24+/thjU5EMlcN69zymE=) 6: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: oosppneRoSbmwD3s+VWSjVI8PDvHs2L2ec3h4IZjW/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:82:ba:cc:63:01:91:d2:d2:c1:b6:62:cb:4a:1a:6d:cf:c7:0d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4 Validity Not Before: Oct 18 17:46:08 2025 GMT Not After : Oct 22 03:51:08 2025 GMT Subject: CN=ACE3FEBB847A96C9551C943E1763C9341B5C6ABC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fd:7f:cf:91:c9:cb:6f:30:47:2a:b4:18:84: 0c:c2:ba:19:28:38:d2:f3:df:81:35:81:1b:5f:e4: 7c:89:6c:a2:4d:ba:95:2b:f3:98:30:0d:28:d8:0b: 71:0e:d0:89:6c:4a:f4:f4:09:13:22:f5:0c:53:f7: 1e:21:27:0f:c9:61:51:17:41:d0:49:6d:d8:ff:16: bd:fa:d8:67:cc:47:3b:70:84:dd:3c:9b:a0:c7:5f: 1d:4b:fe:7b:9d:11:57:b7:9f:f7:b8:f4:db:2e:55: 19:d0:2d:c4:7c:38:16:93:17:76:bc:34:b8:c7:29: 22:df:e7:38:c9:c0:15:0e:7f:f3:94:08:cd:d4:c2: d0:a4:20:5a:2a:22:c5:8c:f6:bd:f0:82:53:8b:1e: 7f:4b:d4:c3:a1:ea:2f:6e:4e:e3:07:2f:43:37:05: 69:17:7c:e7:8e:8c:42:e2:08:32:df:74:8c:2c:69: c5:a5:fd:93:8c:39:48:b8:32:4d:04:dc:ea:98:98: e7:68:ce:0d:7c:bd:29:f2:03:b7:11:96:04:b4:e6: 68:24:fc:39:35:04:dd:7a:40:a2:38:1e:fe:8c:a8: b4:15:29:cd:ac:81:84:7e:f4:ff:e4:e9:8d:1e:cd: 64:79:17:d6:b1:27:67:53:ec:a1:32:cb:cd:a8:f6: 34:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E3:FE:BB:84:7A:96:C9:55:1C:94:3E:17:63:C9:34:1B:5C:6A:BC X509v3 Authority Key Identifier: keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:3e:e5:8b:da:8d:38:ff:6b:1e:79:06:a7:02:3a:33:ff:15: 28:35:86:bb:d7:e1:30:51:a0:c1:d4:e4:a8:d5:bb:9e:38:19: 86:d4:62:e9:46:37:20:82:69:03:49:b3:4d:3e:a0:36:2f:0c: 3a:28:6d:8e:dd:37:4e:f4:bb:7e:05:b5:bb:ed:d7:66:1b:f3: 71:63:4b:10:80:75:43:eb:42:c5:83:43:c8:1e:2c:a7:a2:79: 5d:b6:dc:3f:d3:b8:2f:72:5e:93:f5:e9:78:73:1f:0f:84:e8: 60:16:0e:71:84:a3:0e:79:43:af:08:e5:68:27:02:cd:a0:1b: a7:7c:cf:c9:47:66:fa:67:4e:78:29:6e:e5:b3:d2:e7:bd:00: dc:a0:11:29:78:d1:d7:04:3c:aa:e7:fe:e7:a5:21:eb:49:04: 27:ba:aa:6e:3c:91:37:d7:47:e5:66:91:b0:f5:ab:1f:88:e8: cb:b0:2c:95:de:1b:d9:16:45:f7:df:cb:ec:5b:56:2c:cb:fe: 03:ff:44:0c:6d:73:ec:65:2e:b7:59:5d:76:08:43:23:20:44: 58:5f:75:43:58:4a:9b:80:9e:59:f1:76:f4:a3:83:2f:cc:89: 15:6e:16:13:a2:a5:ed:f5:b3:56:88:af:46:56:ea:6a:05:a2: a2:33:36:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4K6zGMBkdLSwbZiy0oabc/HDRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMy NzdFNzFFNDAeFw0yNTEwMTgxNzQ2MDhaFw0yNTEwMjIwMzUxMDhaMDMxMTAvBgNV BAMTKEFDRTNGRUJCODQ3QTk2Qzk1NTFDOTQzRTE3NjNDOTM0MUI1QzZBQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj/X/PkcnLbzBHKrQYhAzCuhko ONLz34E1gRtf5HyJbKJNupUr85gwDSjYC3EO0IlsSvT0CRMi9QxT9x4hJw/JYVEX QdBJbdj/Fr362GfMRztwhN08m6DHXx1L/nudEVe3n/e49NsuVRnQLcR8OBaTF3a8 NLjHKSLf5zjJwBUOf/OUCM3UwtCkIFoqIsWM9r3wglOLHn9L1MOh6i9uTuMHL0M3 BWkXfOeOjELiCDLfdIwsacWl/ZOMOUi4Mk0E3OqYmOdozg18vSnyA7cRlgS05mgk /Dk1BN16QKI4Hv6MqLQVKc2sgYR+9P/k6Y0ezWR5F9axJ2dT7KEyy82o9jR/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrOP+u4R6lslVHJQ+F2PJNBtcarwwHwYDVR0j BBgwFoAUKGEnclQ+QzNbCAwygIt/3Cd+ceQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8yODYxMjc3MjU0 M0U0MzMzNUIwODBDMzI4MDhCN0ZEQzI3N0U3MUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMyNzdF NzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdG REMyNzdFNzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKc+5YvajTj/ax55BqcCOjP/FSg1hrvX4TBR oMHU5KjVu544GYbUYulGNyCCaQNJs00+oDYvDDoobY7dN070u34Ftbvt12Yb83Fj SxCAdUPrQsWDQ8geLKeieV223D/TuC9yXpP16XhzHw+E6GAWDnGEow55Q68I5Wgn As2gG6d8z8lHZvpnTngpbuWz0ue9ANygESl40dcEPKrn/uelIetJBCe6qm48kTfX R+VmkbD1qx+I6MuwLJXeG9kWRfffy+xbVizL/gP/RAxtc+xlLrdZXXYIQyMgRFhf dUNYSpuAnlnxdvSjgy/MiRVuFhOipe31s1aIr0ZW6moFoqIzNmQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:24 2025 by rpki-client