$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json) Hash identifier: bgLpCQPUZlYV0Tw43kHeLLKiXxBj5exM0NZWxqFHaRw= Subject key identifier: CB:D5:7D:58:5C:AD:A0:D0:F9:C2:05:C8:1C:81:79:8A:20:0A:DB:FD Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215 Certificate serial: 2AC4E7CD0094EB61D493F1BCEB68323B2696CCEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft Manifest number: 01BF Signing time: Sun 20 Jul 2025 15:21:01 +0000 Manifest this update: Sun 20 Jul 2025 15:16:01 +0000 Manifest next update: Thu 24 Jul 2025 01:49:01 +0000 Files and hashes: 1: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: ywEu3ay7qh4gFQhEr5vcEUO6cBPECmvUBXGW7NPHcdg=) 2: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: BeLsfpL8RzgYNWSnNvLFv9eVxbvW50/eid911Xh0OPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c4:e7:cd:00:94:eb:61:d4:93:f1:bc:eb:68:32:3b:26:96:cc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E2707085C2950AF9267465A3801841D8077215 Validity Not Before: Jul 20 15:16:01 2025 GMT Not After : Jul 24 01:49:01 2025 GMT Subject: CN=CBD57D585CADA0D0F9C205C81C81798A200ADBFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6d:3e:99:f2:7c:29:bf:1e:e3:ae:cf:28:78: 37:af:25:cc:71:31:88:8c:ce:7f:78:0b:db:8f:b8: 80:c9:26:29:05:71:ce:19:f7:d6:a7:cb:54:1f:ef: 52:25:2a:c0:4c:cb:ef:93:f8:a4:b6:f0:bf:be:1b: 6e:36:1f:85:b0:ac:27:ae:63:94:c3:be:83:f1:0c: e7:44:65:8d:2b:d4:21:39:9c:90:f8:e3:65:5d:9c: e7:f4:f7:8e:f5:e9:ac:42:4d:8d:dc:de:36:ad:bb: 46:12:4a:20:8f:f5:62:cd:99:6a:50:69:9b:6e:53: 46:25:80:4a:66:0a:bf:5f:1f:96:a3:c2:d5:4b:e3: 70:03:fb:c0:db:4b:aa:af:af:76:35:48:2d:3e:25: 2e:e1:fc:d2:c5:ba:4c:8d:78:e0:59:3c:b9:0b:4a: 13:19:6c:77:b1:2e:75:06:46:9f:52:ee:2c:00:75: 0b:96:c6:20:16:f5:9d:3a:86:46:d6:f2:41:bd:cb: 49:e9:e2:48:71:68:07:fa:cf:b4:01:51:d3:00:02: ea:77:58:96:27:ba:f0:8b:f8:76:c2:99:cd:5f:19: d6:30:f7:47:99:a0:69:94:45:2e:32:a9:37:01:4b: 88:7f:7c:e1:a6:16:3f:a6:4e:4f:17:3b:df:f9:06: 33:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D5:7D:58:5C:AD:A0:D0:F9:C2:05:C8:1C:81:79:8A:20:0A:DB:FD X509v3 Authority Key Identifier: keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:82:85:ed:07:92:fe:71:5f:75:5c:69:54:fe:ef:bb:ef:dc: ee:f9:73:5f:d9:29:59:91:3a:1d:72:43:44:21:50:2d:3b:1a: 22:c4:b2:6c:fa:4b:18:1e:b1:ab:c4:a7:c4:7c:78:f4:8c:b8: 3b:99:8a:1a:af:50:11:f2:cd:e1:f8:7f:dd:52:ce:b9:17:82: 91:0f:a7:10:4a:d4:dc:78:bb:b2:bf:e9:7f:19:02:1e:5d:3d: 6b:69:9a:35:86:f8:5c:93:58:b9:6e:94:00:ea:b3:2d:56:7a: 54:5e:d4:bc:67:76:7e:7b:0a:7b:c0:f2:c4:e0:6a:da:e2:1f: bd:8f:c4:9c:35:3f:52:33:75:2e:91:dc:7e:05:06:6e:9c:87: 1d:68:8a:3b:1e:bd:9f:b4:0b:66:c2:86:cf:96:75:88:e2:c3: 7b:a5:6b:67:9a:a8:6a:8e:3e:fa:81:f5:26:76:a6:9b:f4:28: d0:a7:98:61:2f:bf:13:f4:3c:4c:f0:c6:5b:78:bd:3c:6b:11: 4f:87:ad:76:60:7c:50:fa:8d:4f:75:3c:8c:4a:90:4d:4c:63: b2:a4:68:45:bb:01:77:93:d2:cd:0c:c7:53:15:97:1c:f1:54: f7:b5:06:4b:a0:1a:c1:ff:15:9a:ab:33:3c:ba:60:47:9e:3c: df:bb:13:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsTnzQCU62HUk/G862gyOyaWzOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE ODA3NzIxNTAeFw0yNTA3MjAxNTE2MDFaFw0yNTA3MjQwMTQ5MDFaMDMxMTAvBgNV BAMTKENCRDU3RDU4NUNBREEwRDBGOUMyMDVDODFDODE3OThBMjAwQURCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgbT6Z8nwpvx7jrs8oeDevJcxx MYiMzn94C9uPuIDJJikFcc4Z99any1Qf71IlKsBMy++T+KS28L++G242H4WwrCeu Y5TDvoPxDOdEZY0r1CE5nJD442VdnOf094716axCTY3c3jatu0YSSiCP9WLNmWpQ aZtuU0YlgEpmCr9fH5ajwtVL43AD+8DbS6qvr3Y1SC0+JS7h/NLFukyNeOBZPLkL ShMZbHexLnUGRp9S7iwAdQuWxiAW9Z06hkbW8kG9y0np4khxaAf6z7QBUdMAAup3 WJYnuvCL+HbCmc1fGdYw90eZoGmURS4yqTcBS4h/fOGmFj+mTk8XO9/5BjNRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy9V9WFytoND5wgXIHIF5iiAK2/0wHwYDVR0j BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1 QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3 NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4 NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOOChe0Hkv5xX3VcaVT+77vv3O75c1/ZKVmR Oh1yQ0QhUC07GiLEsmz6SxgesavEp8R8ePSMuDuZihqvUBHyzeH4f91SzrkXgpEP pxBK1Nx4u7K/6X8ZAh5dPWtpmjWG+FyTWLlulADqsy1WelRe1Lxndn57CnvA8sTg atriH72PxJw1P1IzdS6R3H4FBm6chx1oijsevZ+0C2bChs+WdYjiw3ula2eaqGqO PvqB9SZ2ppv0KNCnmGEvvxP0PEzwxlt4vTxrEU+HrXZgfFD6jU91PIxKkE1MY7Kk aEW7AXeT0s0Mx1MVlxzxVPe1BkugGsH/FZqrMzy6YEeePN+7E+o= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:36 2025 by rpki-client