$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft File: 28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft (raw, json) Hash identifier: blQKSW/c6pFaNv0UlkK87w52Xl4GPvNMsK1q9KsNkuQ= Subject key identifier: 6C:7B:0C:E4:51:15:5E:A2:40:47:DF:6A:A6:6B:CD:E1:F8:6B:07:C3 Authority key identifier: 28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC Certificate issuer: /CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC Certificate serial: 63B3A15FA6360A347571322A9BFC90E2A720A876 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft Manifest number: 65 Signing time: Sun 20 Jul 2025 17:52:02 +0000 Manifest this update: Sun 20 Jul 2025 17:47:02 +0000 Manifest next update: Thu 24 Jul 2025 03:05:02 +0000 Files and hashes: 1: 3130332e3135352e3139312e302f32342d3234203d3e20313431303637.roa (hash: sCyLtPxP1W6eDrRKM5zzBxs1T1DM9NmEIRenFAs3CLU=) 2: 3130332e3135352e3139302e302f32342d3234203d3e20313431303637.roa (hash: sz4VmdCTe+rtqXvjcCCv+oeArdLugQ/bUPNEnmt0I5U=) 3: 323430363a373534303a3a2f33322d3332203d3e20313431303637.roa (hash: bv6pC6gX0eRc1LFkXxFUMTO8NK/3ORK3VMfpVTQQLkE=) 4: 28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl (hash: 9Na2/RqX4rp4qSL+fROLd7jJB+NvuBSjmX214Sm1Xw0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 03:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b3:a1:5f:a6:36:0a:34:75:71:32:2a:9b:fc:90:e2:a7:20:a8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC Validity Not Before: Jul 20 17:47:02 2025 GMT Not After : Jul 24 03:05:02 2025 GMT Subject: CN=6C7B0CE451155EA24047DF6AA66BCDE1F86B07C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:bc:39:c7:3c:14:f4:ba:9f:29:74:c3:b9: c2:dd:99:18:1e:0b:16:30:94:1c:f6:85:d2:67:d0: 58:4b:d8:b5:41:66:c3:23:b6:3e:f3:fb:8a:83:e4: bd:35:e0:10:1f:35:b6:ac:fc:9a:10:15:f8:0c:96: 95:7b:31:ad:d3:92:3f:4a:32:20:8b:5b:6f:4a:43: aa:90:65:02:9d:f2:99:0c:ef:a2:57:89:f6:ff:11: b3:87:88:af:ae:96:cb:91:bd:37:c3:a3:2d:c4:50: 2b:be:99:e1:6c:76:5d:da:03:c4:da:af:7b:bc:c1: a4:e0:82:ea:c9:b6:f4:9e:a5:59:7f:64:66:ec:10: ef:23:98:bb:33:ba:8f:ad:9c:ca:9b:3a:d0:5c:75: 76:55:bf:40:7a:c6:af:7c:a4:5c:10:a3:b0:c1:6b: 9d:67:7a:71:f3:0d:74:2e:27:d4:11:11:ac:29:59: 0d:2d:bc:8c:46:9e:bd:7f:a6:3e:bb:35:6a:f5:c3: 4c:39:2c:07:53:77:c4:81:98:c3:04:1c:b7:91:06: 6a:91:36:a5:61:77:15:c0:4f:ee:7b:df:3e:93:45: 75:a1:c7:7c:fb:4f:53:82:9d:2d:e1:84:77:a3:a8: f9:1d:43:a5:07:83:b2:38:25:12:11:b4:7f:7d:33: f0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7B:0C:E4:51:15:5E:A2:40:47:DF:6A:A6:6B:CD:E1:F8:6B:07:C3 X509v3 Authority Key Identifier: keyid:28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b1:2c:70:13:4f:cf:df:64:fd:4c:f2:55:90:2f:fb:3f:38: fa:fa:ea:5d:05:40:c7:ea:53:5a:ea:85:e2:96:2a:ae:f8:b8: 09:f9:b3:ae:5b:c1:b0:d4:d2:19:73:42:96:35:ca:d8:ec:26: 18:db:4a:aa:7a:26:4d:20:2e:8b:c2:f5:02:c4:e4:ce:73:91: 5a:2b:5a:6e:90:c5:3a:90:2a:b7:6e:34:74:9c:2d:cb:82:dc: 1d:fb:cb:7b:55:a9:e0:bb:9e:ad:dc:f2:57:e8:c9:c0:6a:aa: f3:7c:57:e3:c1:82:28:88:90:cb:e4:70:5a:3f:13:57:d3:c4: 42:a5:cb:b5:96:79:1a:c7:be:b6:f7:8d:4a:1c:66:4d:76:62: 5a:ee:d9:68:cb:f6:1a:ac:39:31:51:48:3c:22:d8:cf:5a:a4: 6d:a8:d9:e4:ea:97:f2:0a:a7:a6:e5:d3:84:23:3d:98:4b:3e: f9:90:11:50:97:f3:4d:37:7a:f8:46:7c:d1:42:6e:59:82:bd: 3c:40:7e:86:cc:56:fa:51:44:01:87:9b:9f:94:31:ad:7c:80: 76:bd:99:80:9a:5a:3d:3d:c4:9d:dd:df:c8:e2:22:81:e2:49: 5b:7d:40:0d:22:6f:c5:ae:37:be:f4:91:aa:de:8b:19:28:a7: 4b:fa:7c:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7OhX6Y2CjR1cTIqm/yQ4qcgqHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhCMzA1QzY2MzM2QzQzM0FCNjAxQkE2RjBCMzUyRTZD NTdFOUJFQzAeFw0yNTA3MjAxNzQ3MDJaFw0yNTA3MjQwMzA1MDJaMDMxMTAvBgNV BAMTKDZDN0IwQ0U0NTExNTVFQTI0MDQ3REY2QUE2NkJDREUxRjg2QjA3QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5rw5xzwU9LqfKXTDucLdmRge CxYwlBz2hdJn0FhL2LVBZsMjtj7z+4qD5L014BAfNbas/JoQFfgMlpV7Ma3Tkj9K MiCLW29KQ6qQZQKd8pkM76JXifb/EbOHiK+ulsuRvTfDoy3EUCu+meFsdl3aA8Ta r3u8waTggurJtvSepVl/ZGbsEO8jmLszuo+tnMqbOtBcdXZVv0B6xq98pFwQo7DB a51nenHzDXQuJ9QREawpWQ0tvIxGnr1/pj67NWr1w0w5LAdTd8SBmMMEHLeRBmqR NqVhdxXAT+573z6TRXWhx3z7T1OCnS3hhHejqPkdQ6UHg7I4JRIRtH99M/BlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbHsM5FEVXqJAR99qpmvN4fhrB8MwHwYDVR0j BBgwFoAUKLMFxmM2xDOrYBum8LNS5sV+m+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjZlOWI1MS1iZDg3LTQ5MDUtOWJmNC1hODQ4YTQ0ZTViYTUvMC8yOEIzMDVDNjYz MzZDNDMzQUI2MDFCQTZGMEIzNTJFNkM1N0U5QkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhCMzA1QzY2MzM2QzQzM0FCNjAxQkE2RjBCMzUyRTZDNTdF OUJFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGI2ZTliNTEtYmQ4Ny00OTA1LTli ZjQtYTg0OGE0NGU1YmE1LzAvMjhCMzA1QzY2MzM2QzQzM0FCNjAxQkE2RjBCMzUy RTZDNTdFOUJFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKxLHATT8/fZP1M8lWQL/s/OPr66l0FQMfq U1rqheKWKq74uAn5s65bwbDU0hlzQpY1ytjsJhjbSqp6Jk0gLovC9QLE5M5zkVor Wm6QxTqQKrduNHScLcuC3B37y3tVqeC7nq3c8lfoycBqqvN8V+PBgiiIkMvkcFo/ E1fTxEKly7WWeRrHvrb3jUocZk12Ylru2WjL9hqsOTFRSDwi2M9apG2o2eTql/IK p6bl04QjPZhLPvmQEVCX8003evhGfNFCblmCvTxAfobMVvpRRAGHm5+UMa18gHa9 mYCaWj09xJ3d38jiIoHiSVt9QA0ib8WuN770kareixkop0v6fKg= -----END CERTIFICATE-----Generated at Mon Jul 21 23:16:25 2025 by rpki-client