$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft File: 28612772543E43335B080C32808B7FDC277E71E4.mft (raw, json) Hash identifier: 06qk5eLxSN95ERZcP9f7q1CbpocfxXipde2EmfxzlmE= Subject key identifier: 89:D8:C6:9D:3D:73:C2:C3:2F:43:F5:13:03:C2:6E:B3:F5:EC:B9:A0 Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Certificate issuer: /CN=28612772543E43335B080C32808B7FDC277E71E4 Certificate serial: 2B786F5024FB54612F9F073EA5B80333B748186F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft Manifest number: 0137 Signing time: Thu 21 Aug 2025 07:21:08 +0000 Manifest this update: Thu 21 Aug 2025 07:16:08 +0000 Manifest next update: Sun 24 Aug 2025 17:11:08 +0000 Files and hashes: 1: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: RAlnEnom5DxgyjJGz4HMb0m9LakHmzQTvYvsB15UJ40=) 2: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: xGMt/qz2gLSpF2/GLoO76XEkXVnWKO075lHn2nkpucQ=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: Gn1y+vGI1pMr1RUP5Xcp6ZX24+/thjU5EMlcN69zymE=) 4: 28612772543E43335B080C32808B7FDC277E71E4.crl (hash: tKwOpIZ/0e98/QRsIwKCpZI4nNdRCwsPfj/Rw4nFwdo=) 5: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: oosppneRoSbmwD3s+VWSjVI8PDvHs2L2ec3h4IZjW/8=) 6: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: eKlNzLcXtNJ6j9o2YNvxo9gNUcarXxr4w6XmmCIYGdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:78:6f:50:24:fb:54:61:2f:9f:07:3e:a5:b8:03:33:b7:48:18:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4 Validity Not Before: Aug 21 07:16:08 2025 GMT Not After : Aug 24 17:11:08 2025 GMT Subject: CN=89D8C69D3D73C2C32F43F51303C26EB3F5ECB9A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:6a:f9:4e:3a:64:15:bd:ed:e5:04:59:86: 32:1d:6b:8a:ce:58:ca:e1:6c:d6:e8:d4:dc:bf:d6: 48:75:f7:78:a8:a4:45:14:de:65:94:97:30:d5:4c: 50:d9:68:02:13:59:ff:e1:69:51:55:c9:36:7d:0c: 7d:91:43:06:85:42:af:4e:79:4a:ee:47:73:22:71: e5:e1:3f:e9:8e:09:28:34:f1:83:69:92:eb:ab:41: 81:39:c3:7b:34:e6:4b:4f:a7:61:4d:91:12:ae:be: 8c:ff:2a:2a:d9:d2:f0:58:84:44:a5:ba:13:b4:4e: 7b:61:35:46:c9:55:c2:9f:ef:59:53:15:15:fb:ca: 81:d0:51:26:35:c5:ca:ef:2b:5a:2a:30:6f:92:ac: 1d:5c:78:26:41:e5:b7:46:f9:5d:4b:30:24:20:af: 37:b9:bc:00:b5:32:b4:33:bf:29:1f:f8:32:3b:39: 13:de:12:f5:14:15:46:6f:20:a6:ef:da:4c:e7:52: b1:08:0d:9e:47:96:1a:3b:bc:33:3b:4f:33:d3:a0: 00:7a:46:d6:c4:7d:12:7d:79:29:e1:88:cf:fd:2c: 73:93:b0:8c:b4:8b:78:cc:0f:73:3e:3e:32:60:0a: 8a:6f:8b:08:78:5b:41:07:ac:9f:ba:e0:f5:c4:da: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D8:C6:9D:3D:73:C2:C3:2F:43:F5:13:03:C2:6E:B3:F5:EC:B9:A0 X509v3 Authority Key Identifier: keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:82:68:bd:35:69:7a:bf:e4:d0:9e:78:79:04:f9:ae:6c:12: 4f:fe:fc:35:3a:d1:45:6d:a0:ca:bf:66:86:7b:6f:49:a4:85: 99:d5:08:e4:c3:9c:ef:cf:90:10:3d:0b:64:a1:ad:00:ee:ea: 26:de:a1:c4:ba:1f:38:1c:44:58:ae:d4:14:cd:cb:4b:b1:b1: 13:53:5e:0c:ad:2e:52:05:6b:0b:dd:41:99:56:49:d6:3e:60: e3:42:48:a1:56:65:01:a8:7c:d8:67:80:bc:7f:0f:a2:d8:f2: bf:6f:21:47:37:34:a4:4f:fb:e0:09:92:30:d6:8a:47:52:07: 1d:74:fe:16:69:13:ec:85:14:27:af:e5:e1:60:16:5a:02:b7: b9:7a:c7:ba:4a:09:7e:3c:8d:de:bd:a3:36:aa:a7:12:db:52: 43:3d:80:a8:ce:59:c7:2d:92:0a:56:46:e4:b2:1b:a9:46:ab: e5:e3:13:7c:75:87:33:cd:fb:15:c0:fb:5a:3f:21:10:83:87: 41:a1:ef:e5:2b:1a:70:6d:30:05:a9:a5:bf:03:3a:3e:b3:43: cd:85:06:61:f0:a3:3c:fc:2e:31:d9:14:ee:70:68:59:e2:c1: 3e:73:81:f7:db:51:ef:82:c0:31:3d:73:8f:14:b3:5a:c7:9e: b5:8d:2f:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3hvUCT7VGEvnwc+pbgDM7dIGG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMy NzdFNzFFNDAeFw0yNTA4MjEwNzE2MDhaFw0yNTA4MjQxNzExMDhaMDMxMTAvBgNV BAMTKDg5RDhDNjlEM0Q3M0MyQzMyRjQzRjUxMzAzQzI2RUIzRjVFQ0I5QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSS2r5TjpkFb3t5QRZhjIda4rO WMrhbNbo1Ny/1kh193iopEUU3mWUlzDVTFDZaAITWf/haVFVyTZ9DH2RQwaFQq9O eUruR3MiceXhP+mOCSg08YNpkuurQYE5w3s05ktPp2FNkRKuvoz/KirZ0vBYhESl uhO0TnthNUbJVcKf71lTFRX7yoHQUSY1xcrvK1oqMG+SrB1ceCZB5bdG+V1LMCQg rze5vAC1MrQzvykf+DI7ORPeEvUUFUZvIKbv2kznUrEIDZ5Hlho7vDM7TzPToAB6 RtbEfRJ9eSnhiM/9LHOTsIy0i3jMD3M+PjJgCopviwh4W0EHrJ+64PXE2vlRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUidjGnT1zwsMvQ/UTA8Jus/XsuaAwHwYDVR0j BBgwFoAUKGEnclQ+QzNbCAwygIt/3Cd+ceQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8yODYxMjc3MjU0 M0U0MzMzNUIwODBDMzI4MDhCN0ZEQzI3N0U3MUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMyNzdF NzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdG REMyNzdFNzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+CaL01aXq/5NCeeHkE+a5sEk/+/DU60UVt oMq/ZoZ7b0mkhZnVCOTDnO/PkBA9C2ShrQDu6ibeocS6HzgcRFiu1BTNy0uxsRNT XgytLlIFawvdQZlWSdY+YONCSKFWZQGofNhngLx/D6LY8r9vIUc3NKRP++AJkjDW ikdSBx10/hZpE+yFFCev5eFgFloCt7l6x7pKCX48jd69ozaqpxLbUkM9gKjOWcct kgpWRuSyG6lGq+XjE3x1hzPN+xXA+1o/IRCDh0Gh7+UrGnBtMAWppb8DOj6zQ82F BmHwozz8LjHZFO5waFniwT5zgffbUe+CwDE9c48Us1rHnrWNL+I= -----END CERTIFICATE-----Generated at Sat Aug 23 13:36:41 2025 by rpki-client