$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft File: 28341CFDB2B23F14923DA4A736C08A8C17C00046.mft (raw, json) Hash identifier: a0GJtUx5lkA8ujHUYouocGcp/L+wAhwN32IDMlw+it0= Subject key identifier: 73:07:B0:A5:02:91:1F:21:79:DE:E7:3B:93:DA:0E:49:B5:9C:36:26 Authority key identifier: 28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 Certificate issuer: /CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Certificate serial: 7D71FECE8758EB7C4F25E031F0AD453B0E3064B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft Manifest number: 4E Signing time: Wed 25 Mar 2026 01:21:17 +0000 Manifest this update: Wed 25 Mar 2026 01:16:17 +0000 Manifest next update: Sat 28 Mar 2026 04:48:17 +0000 Files and hashes: 1: 28341CFDB2B23F14923DA4A736C08A8C17C00046.crl (hash: PN+skruv52e/sNOZJ5cvlX0BS396tPvax3QteN0MRzU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:71:fe:ce:87:58:eb:7c:4f:25:e0:31:f0:ad:45:3b:0e:30:64:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Validity Not Before: Mar 25 01:16:17 2026 GMT Not After : Mar 28 04:48:17 2026 GMT Subject: CN=7307B0A502911F2179DEE73B93DA0E49B59C3626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:47:f9:09:52:19:3a:38:51:68:af:cc:dd: c3:5f:5d:56:3a:de:7c:cf:d2:e0:51:54:f2:5f:3a: a5:a3:b9:d7:fd:41:7e:fe:03:38:a0:1a:30:a7:da: c5:7c:55:7b:40:53:f3:ac:42:f1:93:bd:7f:26:75: 16:ec:7d:96:e9:5f:1c:f6:82:b6:e7:57:1a:83:d1: 52:61:10:be:69:f8:77:df:e1:24:98:7b:9c:14:72: ef:84:7f:e2:22:55:08:41:ee:c9:e5:20:fc:2b:4b: 40:e3:ab:dd:18:f2:28:2c:80:3d:00:b1:09:15:f9: b6:c4:bb:e0:ff:8f:b8:29:90:0d:9d:ed:2c:ba:09: 73:80:8e:20:b9:3b:f5:cf:42:c3:7b:80:99:e7:7a: a7:57:ed:36:be:90:fe:a3:a0:1e:61:c1:1c:9f:81: 93:96:58:c3:dd:c0:ed:1a:c9:fa:21:2d:02:1c:14: bb:c4:4a:52:4a:26:7a:cb:bb:a6:78:79:dc:82:60: 37:ef:eb:c8:91:67:8c:ac:56:31:5b:b4:0f:e6:c2: c9:1a:ba:45:30:d8:64:92:d0:ea:fc:e8:72:d7:d4: e5:35:2e:9c:52:65:ed:46:c3:4d:3f:67:32:13:e4: 1f:91:73:4c:d8:6c:5f:64:11:7f:b9:06:43:34:b0: 77:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:07:B0:A5:02:91:1F:21:79:DE:E7:3B:93:DA:0E:49:B5:9C:36:26 X509v3 Authority Key Identifier: keyid:28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d1:d4:a2:f1:d0:9e:23:23:07:9c:68:57:4d:75:45:b3:d1: f0:ab:8b:3c:d8:fa:e0:2f:d6:03:a4:9f:bc:65:78:13:58:3a: cd:11:00:f6:32:58:8a:ae:d9:ed:cb:29:de:f6:ad:cb:8f:c7: 9e:0e:bf:e3:d3:63:5d:28:a6:e9:0d:02:eb:26:61:6d:b0:ba: 77:ba:07:f8:00:29:cb:db:a1:7b:85:4e:e1:b6:1e:10:10:af: 25:ab:02:3c:ea:b0:ef:09:fa:25:e9:b4:ec:be:8c:bb:67:f4: f3:35:63:5d:8b:05:fa:dd:6f:d3:94:99:cb:ca:80:b4:c9:d8: 84:bf:50:b2:82:aa:70:29:97:6e:2b:b5:a0:65:b6:04:27:c0: dc:ab:a6:75:dc:59:5f:46:68:96:7a:bf:da:b8:f9:ff:d4:13: 3c:2f:e8:3d:27:92:f5:ae:6f:32:e4:d9:4e:cb:d5:84:be:40: 7b:c8:fd:f7:1b:36:50:6c:82:03:c9:86:c7:e1:0e:65:d5:c6: e1:54:45:4f:0a:f5:bc:44:bc:24:25:05:77:c3:47:27:b7:fb: 0c:f7:e8:a0:16:66:18:93:70:90:49:97:0d:1e:51:11:24:a8: 8f:97:be:aa:af:6c:0f:1e:56:7b:be:75:0e:fc:18:20:a9:06: 5d:89:50:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXH+zodY63xPJeAx8K1FOw4wZLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMx N0MwMDA0NjAeFw0yNjAzMjUwMTE2MTdaFw0yNjAzMjgwNDQ4MTdaMDMxMTAvBgNV BAMTKDczMDdCMEE1MDI5MTFGMjE3OURFRTczQjkzREEwRTQ5QjU5QzM2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUEf5CVIZOjhRaK/M3cNfXVY6 3nzP0uBRVPJfOqWjudf9QX7+AzigGjCn2sV8VXtAU/OsQvGTvX8mdRbsfZbpXxz2 grbnVxqD0VJhEL5p+Hff4SSYe5wUcu+Ef+IiVQhB7snlIPwrS0Djq90Y8igsgD0A sQkV+bbEu+D/j7gpkA2d7Sy6CXOAjiC5O/XPQsN7gJnneqdX7Ta+kP6joB5hwRyf gZOWWMPdwO0ayfohLQIcFLvESlJKJnrLu6Z4edyCYDfv68iRZ4ysVjFbtA/mwska ukUw2GSS0Or86HLX1OU1LpxSZe1Gw00/ZzIT5B+Rc0zYbF9kEX+5BkM0sHfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcwewpQKRHyF53uc7k9oOSbWcNiYwHwYDVR0j BBgwFoAUKDQc/bKyPxSSPaSnNsCKjBfAAEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMC8yODM0MUNGREIy QjIzRjE0OTIzREE0QTczNkMwOEE4QzE3QzAwMDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMxN0Mw MDA0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhB OEMxN0MwMDA0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfR1KLx0J4jIwecaFdNdUWz0fCrizzY+uAv 1gOkn7xleBNYOs0RAPYyWIqu2e3LKd72rcuPx54Ov+PTY10opukNAusmYW2wune6 B/gAKcvboXuFTuG2HhAQryWrAjzqsO8J+iXptOy+jLtn9PM1Y12LBfrdb9OUmcvK gLTJ2IS/ULKCqnApl24rtaBltgQnwNyrpnXcWV9GaJZ6v9q4+f/UEzwv6D0nkvWu bzLk2U7L1YS+QHvI/fcbNlBsggPJhsfhDmXVxuFURU8K9bxEvCQlBXfDRye3+wz3 6KAWZhiTcJBJlw0eUREkqI+XvqqvbA8eVnu+dQ78GCCpBl2JUAQ= -----END CERTIFICATE-----Generated at Thu Mar 26 11:32:44 2026 by rpki-client