$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft File: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json) Hash identifier: pjyMNb3hRqRTBaM71byz5eSCQt0uHAcWW+fqc2DUTLY= Subject key identifier: 7F:45:BF:FF:7B:C9:5D:DD:FA:25:6F:C1:BA:F4:6A:8E:6A:4E:7B:90 Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 1DE85C4B7DFD656EE2ED27CA572CCEB746350384 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft Manifest number: 01DA Signing time: Mon 21 Jul 2025 04:32:02 +0000 Manifest this update: Mon 21 Jul 2025 04:27:02 +0000 Manifest next update: Thu 24 Jul 2025 09:28:02 +0000 Files and hashes: 1: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: BvB+dwr9bBtzkRyMA8bTepBQEZZlKW8nu8VJsNMkUH8=) 2: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: t4B/eq8AOh4JIkCzcOT+SpN0WxnYYYPczNkJfx4V+XI=) 3: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: jZT+5vS6OcO/JxTUwS6bAKhg3/Kcd3KFFIwe99PQcC8=) 4: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: xne0Cq1LXYrb0/DpeRsrFAeGbUysSbEdSSRG1O8ZrMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 09:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e8:5c:4b:7d:fd:65:6e:e2:ed:27:ca:57:2c:ce:b7:46:35:03:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Jul 21 04:27:02 2025 GMT Not After : Jul 24 09:28:02 2025 GMT Subject: CN=7F45BFFF7BC95DDDFA256FC1BAF46A8E6A4E7B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:de:da:ba:d1:04:15:70:45:eb:c1:ec:68: e9:11:40:a3:aa:5f:bf:6e:6e:f2:0f:46:14:11:4e: e7:a1:b6:87:07:04:22:57:29:61:6d:b7:17:ce:2b: ff:97:d9:02:06:b5:ef:bb:e6:dd:57:ea:d3:f4:d1: 97:f6:e5:4d:c5:9f:03:cc:22:43:cf:27:61:d5:96: 3e:c7:27:e5:60:40:7c:4e:e3:88:0a:60:a2:b3:bb: a5:54:98:e0:e6:4d:17:81:b6:ee:6d:76:18:88:8a: 07:c2:68:af:01:fa:b2:2e:2f:fe:48:67:93:78:89: 3d:fe:c2:76:30:26:0f:a7:7e:8d:07:3c:44:bf:fa: 5a:fe:54:e1:ba:f4:f4:97:73:66:9e:85:e0:76:3b: 83:0b:f5:71:8b:60:4f:e1:37:30:5d:2c:53:82:02: fb:31:3b:c7:3b:ab:40:11:c7:1a:72:ef:d3:de:9e: 78:3a:06:51:d5:1e:45:02:8b:29:d3:c5:52:29:13: 26:00:b9:7b:65:47:1f:d1:45:82:53:c0:96:3c:ca: 5f:e6:41:90:d8:c5:1b:8a:58:c3:f2:8f:a1:c1:a0: bb:79:34:76:5c:d8:1b:29:55:4b:98:a2:15:61:bb: 72:b4:d2:d3:ed:0d:68:98:89:cf:c9:b7:de:36:68: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:45:BF:FF:7B:C9:5D:DD:FA:25:6F:C1:BA:F4:6A:8E:6A:4E:7B:90 X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e8:cc:a2:15:1d:9e:4f:e1:be:f1:07:ae:d8:e0:a2:18:97: 2c:a3:d3:5f:8e:a4:9f:f7:88:90:48:48:8e:2f:ec:b6:6f:e8: c7:36:9f:d9:8b:0d:09:c0:06:2e:20:63:9c:cd:7e:20:f1:16: a3:e1:8c:50:40:85:cb:c6:2b:8e:1c:b2:64:ae:7e:61:4e:b7: 56:5b:54:f1:76:7f:cd:0b:b9:40:ec:7e:a0:6b:cb:b0:ee:7b: 20:e1:bb:96:72:94:f8:ff:22:93:5f:cb:ab:ec:eb:1b:40:ea: e9:2f:0b:14:82:a5:7f:0b:24:93:87:d2:94:ae:06:b2:95:02: e5:5f:f9:f7:0c:63:85:8a:00:52:ff:0c:24:a0:01:24:f5:da: a0:1b:6f:9a:69:89:d6:b0:37:6c:d8:4f:ec:3b:34:dc:19:35: d5:e2:0f:ac:73:58:cd:ab:1e:53:37:6e:b5:5b:92:5d:d3:71: bb:c7:7e:a0:19:ff:1d:f3:03:5a:78:b7:43:fa:a9:95:b5:3c: a4:28:e5:6b:70:6f:c0:b9:b4:71:25:4b:b1:92:5c:75:f7:d1: 9b:47:42:e6:0d:80:94:a0:ea:cf:40:f9:22:b6:24:2c:74:29: 54:89:13:e4:d4:38:04:a8:0d:34:dc:67:77:bd:b8:f7:27:a2: c0:5a:e6:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHehcS339ZW7i7SfKVyzOt0Y1A4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNTA3MjEwNDI3MDJaFw0yNTA3MjQwOTI4MDJaMDMxMTAvBgNV BAMTKDdGNDVCRkZGN0JDOTVERERGQTI1NkZDMUJBRjQ2QThFNkE0RTdCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aN7autEEFXBF68HsaOkRQKOq X79ubvIPRhQRTuehtocHBCJXKWFttxfOK/+X2QIGte+75t1X6tP00Zf25U3FnwPM IkPPJ2HVlj7HJ+VgQHxO44gKYKKzu6VUmODmTReBtu5tdhiIigfCaK8B+rIuL/5I Z5N4iT3+wnYwJg+nfo0HPES/+lr+VOG69PSXc2aeheB2O4ML9XGLYE/hNzBdLFOC AvsxO8c7q0ARxxpy79Penng6BlHVHkUCiynTxVIpEyYAuXtlRx/RRYJTwJY8yl/m QZDYxRuKWMPyj6HBoLt5NHZc2BspVUuYohVhu3K00tPtDWiYic/Jt942aCAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf0W//3vJXd36JW/BuvRqjmpOe5AwHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNF NTA0MzFGMEY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfozKIVHZ5P4b7xB67Y4KIYlyyj01+OpJ/3 iJBISI4v7LZv6Mc2n9mLDQnABi4gY5zNfiDxFqPhjFBAhcvGK44csmSufmFOt1Zb VPF2f80LuUDsfqBry7DueyDhu5ZylPj/IpNfy6vs6xtA6ukvCxSCpX8LJJOH0pSu BrKVAuVf+fcMY4WKAFL/DCSgAST12qAbb5ppidawN2zYT+w7NNwZNdXiD6xzWM2r HlM3brVbkl3TcbvHfqAZ/x3zA1p4t0P6qZW1PKQo5Wtwb8C5tHElS7GSXHX30ZtH QuYNgJSg6s9A+SK2JCx0KVSJE+TUOASoDTTcZ3e9uPcnosBa5mA= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:23 2025 by rpki-client