$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: piYdsEiGEUnCE979Bx/0whFS3433mx60pADUvcKQIj0= Subject key identifier: 00:B5:26:27:56:55:43:D9:12:7D:0E:0A:D0:13:C9:97:23:2E:B1:54 Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 7648F27033EF5648A7BEE9E7584FD203A0A49B0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 03DA Signing time: Mon 23 Mar 2026 20:21:22 +0000 Manifest this update: Mon 23 Mar 2026 20:16:22 +0000 Manifest next update: Fri 27 Mar 2026 08:19:22 +0000 Files and hashes: 1: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: nkgXHJ5vIn9/vQDJ4p+3bqA8uvcYzydpLoR2QR3gRRw=) 2: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: GgLnDosorOXfKtReDhXzfOEHu7UguDsE/lliDMe9b64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 09:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:48:f2:70:33:ef:56:48:a7:be:e9:e7:58:4f:d2:03:a0:a4:9b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: Mar 23 20:16:22 2026 GMT Not After : Mar 27 08:19:22 2026 GMT Subject: CN=00B52627565543D9127D0E0AD013C997232EB154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6a:4d:29:2e:96:22:39:b6:36:f9:bb:c4:1e: 9e:87:dc:c9:57:dd:4e:66:22:1f:48:04:f5:66:41: 3f:a9:13:6e:9e:3d:a9:19:6f:76:70:0c:04:c5:d1: 24:84:77:fe:25:00:f4:de:67:0f:75:7f:ad:fd:e0: 57:0f:80:4a:11:b6:70:88:68:69:74:84:aa:59:98: ed:d1:bc:80:24:98:58:b9:6d:b2:9e:ab:df:aa:93: 56:eb:46:28:af:e5:31:e7:f7:db:97:c8:fd:8b:36: c5:27:6f:97:a9:82:dd:d3:78:ae:a6:90:59:2f:c2: b5:05:2f:31:a8:f3:36:76:de:96:38:1f:44:1c:1f: 06:33:63:4a:72:d3:72:4a:ee:dc:fb:00:d5:41:93: dd:5c:59:e6:d9:64:20:ba:9b:fb:ef:04:5a:4b:26: 59:72:d2:54:61:ca:2c:f6:28:71:a2:37:d1:de:9a: e7:41:e5:1b:c4:8f:95:65:85:65:8b:71:1c:2f:34: 95:bc:3b:1c:df:77:8a:ba:92:2d:bf:c0:a8:0f:eb: 42:e3:96:0e:1e:ec:d0:a3:5f:7e:1c:8e:81:b2:85: b2:a3:3a:2c:ba:50:bc:7e:56:06:8f:fd:fe:e2:9f: d5:bb:fe:29:69:73:7e:84:14:aa:41:eb:6e:ea:e1: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B5:26:27:56:55:43:D9:12:7D:0E:0A:D0:13:C9:97:23:2E:B1:54 X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e8:78:c0:59:a0:12:1b:b1:2d:86:9c:9a:36:9b:27:0e:f3: d1:80:6c:9d:5d:2a:a6:b7:4d:52:59:e8:33:9b:93:fa:cf:97: 88:9e:5f:f3:b6:fe:4e:a4:9d:c7:14:ef:d1:fb:a5:66:9e:12: 4a:d0:e2:6a:4f:65:9b:58:2c:55:ed:bc:72:f9:9f:f4:c3:95: b0:b9:37:44:3b:fd:4f:2a:25:3c:06:f0:c1:c1:d9:cd:ec:0a: 8f:58:60:61:e4:4b:f4:41:ad:38:4c:43:75:a4:90:90:6c:45: f7:e0:e6:b4:28:23:6c:46:04:29:2c:4d:06:83:c9:67:ac:cb: 45:fe:c3:d7:aa:58:da:9e:5f:c9:b6:ab:c4:02:2d:e9:10:75: 71:7c:7d:d1:0c:88:f3:86:2a:21:b4:03:e6:c2:2e:d0:5d:e3: 8c:90:b2:74:65:fd:33:6c:9e:ca:77:e3:81:a1:78:d3:92:10: 60:aa:d9:dd:33:80:60:14:9d:90:e3:2f:63:a1:59:30:89:cb: 34:0a:bc:10:06:23:09:be:f3:55:2e:63:2f:83:15:34:f3:69: cb:a9:08:c3:be:b9:ed:8b:d9:d9:95:23:3a:42:f2:f3:f1:1a: 9b:f1:b8:a7:a6:48:a0:14:cd:79:46:93:bd:81:bd:88:77:f5: ff:de:13:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkjycDPvVkinvunnWE/SA6CkmwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNjAzMjMyMDE2MjJaFw0yNjAzMjcwODE5MjJaMDMxMTAvBgNV BAMTKDAwQjUyNjI3NTY1NTQzRDkxMjdEMEUwQUQwMTNDOTk3MjMyRUIxNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjak0pLpYiObY2+bvEHp6H3MlX 3U5mIh9IBPVmQT+pE26ePakZb3ZwDATF0SSEd/4lAPTeZw91f6394FcPgEoRtnCI aGl0hKpZmO3RvIAkmFi5bbKeq9+qk1brRiiv5THn99uXyP2LNsUnb5epgt3TeK6m kFkvwrUFLzGo8zZ23pY4H0QcHwYzY0py03JK7tz7ANVBk91cWebZZCC6m/vvBFpL Jlly0lRhyiz2KHGiN9HemudB5RvEj5VlhWWLcRwvNJW8Oxzfd4q6ki2/wKgP60Lj lg4e7NCjX34cjoGyhbKjOiy6ULx+VgaP/f7in9W7/ilpc36EFKpB627q4fmFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUALUmJ1ZVQ9kSfQ4K0BPJlyMusVQwHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPoeMBZoBIbsS2GnJo2mycO89GAbJ1dKqa3 TVJZ6DObk/rPl4ieX/O2/k6knccU79H7pWaeEkrQ4mpPZZtYLFXtvHL5n/TDlbC5 N0Q7/U8qJTwG8MHB2c3sCo9YYGHkS/RBrThMQ3WkkJBsRffg5rQoI2xGBCksTQaD yWesy0X+w9eqWNqeX8m2q8QCLekQdXF8fdEMiPOGKiG0A+bCLtBd44yQsnRl/TNs nsp344GheNOSEGCq2d0zgGAUnZDjL2OhWTCJyzQKvBAGIwm+81UuYy+DFTTzacup CMO+ue2L2dmVIzpC8vPxGpvxuKemSKAUzXlGk72BvYh39f/eE7M= -----END CERTIFICATE-----Generated at Tue Mar 24 01:51:34 2026 by rpki-client