$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft File: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft (raw, json) Hash identifier: A+xuh0HHX5zgBOGPdLAC/HzyJTmwqc7rnqU0AhiLgIE= Subject key identifier: 26:8E:C7:DF:A1:32:AD:05:D2:F3:64:97:EE:B8:BB:07:C5:BB:A9:16 Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 202C1C05863BE9654B965EA1456425F14532756F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft Manifest number: 011F Signing time: Mon 21 Jul 2025 02:05:42 +0000 Manifest this update: Mon 21 Jul 2025 02:00:42 +0000 Manifest next update: Thu 24 Jul 2025 10:09:42 +0000 Files and hashes: 1: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: OdSsxC/IcH64+HH1xsnqnpx/lq2eSJJ+N7LMBhOTgSQ=) 2: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: zEnS7MUIR/K5UV+N9UMD9HrZThlFZltdIGvWRa0yVIA=) 3: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl (hash: WNYUuHhpiXONf6a+zNRhPsoyC6NILV/YcC24rH49uw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2c:1c:05:86:3b:e9:65:4b:96:5e:a1:45:64:25:f1:45:32:75:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Jul 21 02:00:42 2025 GMT Not After : Jul 24 10:09:42 2025 GMT Subject: CN=268EC7DFA132AD05D2F36497EEB8BB07C5BBA916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:f5:69:e5:1b:1b:39:31:3d:13:63:c5:6e: 6e:b2:43:99:84:02:ab:1c:9e:63:c6:b4:89:f4:8c: 40:7c:e6:51:d5:28:04:0a:4a:98:90:f2:8c:8a:75: cb:a9:ce:cc:8c:70:13:65:f7:c3:2c:17:61:3f:9c: aa:7e:aa:35:36:ba:26:1a:bd:44:62:bf:39:f0:27: a4:5a:7e:e8:4a:23:be:d0:54:35:c2:02:1f:23:1f: 01:a7:fd:44:7b:67:e0:b5:20:9a:25:db:40:f8:cc: 94:08:95:24:29:6a:9e:ac:b7:da:0c:55:cf:ce:12: da:cb:47:c4:93:9a:04:19:43:68:27:57:5f:b4:7d: ff:c8:44:aa:92:d2:76:21:0f:ad:15:01:5c:aa:51: 10:a5:4a:65:7a:91:04:9e:52:b5:85:0c:db:72:75: 0a:e8:ba:66:20:f4:d1:54:9b:7b:51:01:2f:8c:9b: 36:e3:7e:55:c2:ef:a0:18:69:1d:0f:46:a4:36:fe: 9e:62:b3:fc:7a:72:b7:bf:27:69:bb:06:11:6e:9c: 4e:76:3e:22:f5:86:b3:1d:da:b4:59:78:25:08:89: 2c:2a:c3:24:11:d2:2c:a0:b9:4a:3f:c9:10:01:a2: 6a:8e:86:08:11:d4:f4:b8:34:df:9d:15:bc:7d:ea: ab:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8E:C7:DF:A1:32:AD:05:D2:F3:64:97:EE:B8:BB:07:C5:BB:A9:16 X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b0:33:8d:ea:44:d3:b7:ba:0c:9d:b7:da:c4:ab:99:9b:60: 86:33:5f:81:1f:da:2a:a6:42:1d:d9:0f:0b:5c:8f:98:02:00: a6:f3:81:14:81:24:bf:eb:ac:f4:1c:6a:47:85:07:c0:e0:ba: 91:6a:0c:d8:20:39:05:46:7b:cc:ee:7b:c9:67:9c:28:c5:25: a7:7e:36:d8:0f:36:93:64:b0:09:1f:cf:78:49:ea:0e:c6:fb: 21:42:fc:a2:0f:05:67:84:02:23:c9:f9:6a:70:b0:9c:48:43: 36:52:f4:f9:e1:f5:7e:9b:86:1b:a6:ff:d6:ac:e9:46:15:0b: 37:db:6a:6b:f4:a1:7e:19:49:c4:55:89:11:f8:1c:ae:7b:72: fe:99:24:4d:f8:b3:03:99:cc:dc:61:e1:1b:c6:37:a6:b8:67: 13:a7:34:fb:69:19:32:9b:a7:9f:8c:22:dc:dd:4f:b6:96:8c: 73:98:7b:6d:1b:8f:98:62:43:6e:10:5f:43:e7:b0:1c:cb:7f: c9:b7:9b:cc:0e:14:6c:b5:92:8b:b8:8e:7e:0d:e4:3c:63:01: 86:ad:3a:5d:ab:4a:32:b7:68:e2:75:66:c1:b8:17:2c:64:0c: d9:c6:22:b0:2c:37:33:6c:fd:e1:3c:21:82:c0:28:e3:eb:bd: be:bb:c4:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICwcBYY76WVLll6hRWQl8UUydW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNTA3MjEwMjAwNDJaFw0yNTA3MjQxMDA5NDJaMDMxMTAvBgNV BAMTKDI2OEVDN0RGQTEzMkFEMDVEMkYzNjQ5N0VFQjhCQjA3QzVCQkE5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLvVp5RsbOTE9E2PFbm6yQ5mE AqscnmPGtIn0jEB85lHVKAQKSpiQ8oyKdcupzsyMcBNl98MsF2E/nKp+qjU2uiYa vURivznwJ6RafuhKI77QVDXCAh8jHwGn/UR7Z+C1IJol20D4zJQIlSQpap6st9oM Vc/OEtrLR8STmgQZQ2gnV1+0ff/IRKqS0nYhD60VAVyqURClSmV6kQSeUrWFDNty dQroumYg9NFUm3tRAS+MmzbjflXC76AYaR0PRqQ2/p5is/x6cre/J2m7BhFunE52 PiL1hrMd2rRZeCUIiSwqwyQR0iyguUo/yRABomqOhggR1PS4NN+dFbx96quBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJo7H36EyrQXS82SX7ri7B8W7qRYwHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2 N2ItOWI4ODI1YjVjZDVmLzAvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0 OTdCMzZGM0FENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2wM43qRNO3ugydt9rEq5mbYIYzX4Ef2iqm Qh3ZDwtcj5gCAKbzgRSBJL/rrPQcakeFB8DgupFqDNggOQVGe8zue8lnnCjFJad+ NtgPNpNksAkfz3hJ6g7G+yFC/KIPBWeEAiPJ+WpwsJxIQzZS9Pnh9X6bhhum/9as 6UYVCzfbamv0oX4ZScRViRH4HK57cv6ZJE34swOZzNxh4RvGN6a4ZxOnNPtpGTKb p5+MItzdT7aWjHOYe20bj5hiQ24QX0PnsBzLf8m3m8wOFGy1kou4jn4N5DxjAYat Ol2rSjK3aOJ1ZsG4FyxkDNnGIrAsNzNs/eE8IYLAKOPrvb67xGo= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:12 2025 by rpki-client