$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft File: 28341CFDB2B23F14923DA4A736C08A8C17C00046.mft (raw, json) Hash identifier: aFFFJtxWF8Gq/1MIpx79/Q6r9IdcVquPsmx9mFvNc6Y= Subject key identifier: E7:CE:88:19:52:E1:B9:88:92:8C:7C:07:17:9A:E5:67:52:F6:A5:32 Authority key identifier: 28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 Certificate issuer: /CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Certificate serial: 63FA60DC90FDEA8ACD60AE7231BAB06CB6BA971C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft Manifest number: 4B Signing time: Wed 18 Mar 2026 07:11:19 +0000 Manifest this update: Wed 18 Mar 2026 07:06:19 +0000 Manifest next update: Sat 21 Mar 2026 17:36:19 +0000 Files and hashes: 1: 28341CFDB2B23F14923DA4A736C08A8C17C00046.crl (hash: jDxcvWTBqufPIEBRv1F0bDO3Py58hNJNZVh6GBlrxR4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 17:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:fa:60:dc:90:fd:ea:8a:cd:60:ae:72:31:ba:b0:6c:b6:ba:97:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Validity Not Before: Mar 18 07:06:19 2026 GMT Not After : Mar 21 17:36:19 2026 GMT Subject: CN=E7CE881952E1B988928C7C07179AE56752F6A532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:90:ee:3b:ac:ca:f4:ba:02:96:5f:f1:71: 06:70:ea:01:80:00:96:18:18:10:d0:a9:5e:ec:01: c3:d1:56:ce:a3:45:8e:dd:95:7f:3f:d0:97:ab:94: 93:ad:76:81:7d:0f:ca:45:a5:02:80:64:70:78:fd: ad:ab:28:6e:6d:6c:50:db:5c:cc:6e:6b:07:1f:5a: 0f:ad:9b:c3:12:09:ae:a5:2e:7b:7a:2a:2f:dd:f9: 1a:f1:fc:93:3e:4d:a2:cc:b1:17:0f:fa:ba:be:93: 9d:bd:3b:4a:13:7c:fd:45:6b:04:e5:a6:d7:6f:3f: 34:79:3c:e8:58:8a:95:42:cf:73:3d:8f:36:e9:a9: fc:7e:a0:30:b3:f2:f1:2e:ba:cb:c2:aa:dc:66:03: 90:ea:97:f9:8a:8f:dc:42:3f:4b:c4:03:ea:68:71: 05:3e:60:eb:10:a8:0e:0e:6b:9e:72:cc:0c:49:ff: c2:6f:5d:e3:99:a5:49:bd:6b:0e:bd:84:85:88:d6: 1c:fa:af:24:be:80:f5:f3:49:c0:8d:62:f9:77:42: 81:a9:54:9d:28:d4:6f:fa:31:f7:71:97:37:83:ca: 3c:8a:5d:63:67:60:a3:5a:5c:23:2c:e0:d8:46:a5: 6e:1c:a4:88:3d:04:26:f8:05:bc:b9:06:68:59:2b: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CE:88:19:52:E1:B9:88:92:8C:7C:07:17:9A:E5:67:52:F6:A5:32 X509v3 Authority Key Identifier: keyid:28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ef:05:0b:e7:99:45:97:39:b8:c0:cb:84:4c:88:93:0e:b9: 9e:77:2b:e4:d5:f8:2f:1c:db:e2:95:64:cf:8e:92:07:09:48: cf:22:2d:83:70:84:ff:90:86:43:b6:88:f6:b7:cb:a8:9b:a8: 7d:a6:0d:08:9d:47:d7:11:04:0b:4b:ce:88:88:34:e5:e2:26: ca:91:e9:b5:43:63:91:da:0f:7a:3d:34:9a:a3:41:54:2e:47: fb:ab:19:17:5b:68:03:38:9a:d0:f4:76:0a:cd:b0:af:f9:b4: 80:a2:15:32:40:4f:30:a1:2f:84:ae:f8:1b:ac:88:6f:89:f4: 15:6d:63:c8:d7:a5:ba:7a:0a:01:23:0e:8b:3f:4e:b8:94:8b: 25:20:20:14:f7:33:db:83:fc:9e:bc:3e:ce:d8:32:b4:23:6e: fc:21:a2:ca:ad:ef:ca:2a:1a:9a:03:ac:59:e6:83:41:95:31: e3:99:41:cc:ec:84:44:52:45:43:3d:31:e8:9c:78:e3:b9:c4: 0f:99:71:b4:9a:a1:86:ab:5a:23:8d:7f:be:10:c8:d3:e5:6f: 3f:39:6d:e1:cb:2a:8e:0e:70:f1:c3:d3:80:4e:b1:3b:18:2b: 0f:08:5f:e6:c8:f1:4c:a1:5a:45:b1:0d:f3:9f:6e:e4:72:22: 8b:56:17:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY/pg3JD96orNYK5yMbqwbLa6lxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMx N0MwMDA0NjAeFw0yNjAzMTgwNzA2MTlaFw0yNjAzMjExNzM2MTlaMDMxMTAvBgNV BAMTKEU3Q0U4ODE5NTJFMUI5ODg5MjhDN0MwNzE3OUFFNTY3NTJGNkE1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7y5DuO6zK9LoCll/xcQZw6gGA AJYYGBDQqV7sAcPRVs6jRY7dlX8/0JerlJOtdoF9D8pFpQKAZHB4/a2rKG5tbFDb XMxuawcfWg+tm8MSCa6lLnt6Ki/d+Rrx/JM+TaLMsRcP+rq+k529O0oTfP1FawTl ptdvPzR5POhYipVCz3M9jzbpqfx+oDCz8vEuusvCqtxmA5Dql/mKj9xCP0vEA+po cQU+YOsQqA4Oa55yzAxJ/8JvXeOZpUm9aw69hIWI1hz6ryS+gPXzScCNYvl3QoGp VJ0o1G/6MfdxlzeDyjyKXWNnYKNaXCMs4NhGpW4cpIg9BCb4Bby5BmhZK6OBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU586IGVLhuYiSjHwHF5rlZ1L2pTIwHwYDVR0j BBgwFoAUKDQc/bKyPxSSPaSnNsCKjBfAAEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMC8yODM0MUNGREIy QjIzRjE0OTIzREE0QTczNkMwOEE4QzE3QzAwMDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMxN0Mw MDA0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhB OEMxN0MwMDA0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3vBQvnmUWXObjAy4RMiJMOuZ53K+TV+C8c 2+KVZM+OkgcJSM8iLYNwhP+QhkO2iPa3y6ibqH2mDQidR9cRBAtLzoiINOXiJsqR 6bVDY5HaD3o9NJqjQVQuR/urGRdbaAM4mtD0dgrNsK/5tICiFTJATzChL4Su+Bus iG+J9BVtY8jXpbp6CgEjDos/TriUiyUgIBT3M9uD/J68Ps7YMrQjbvwhosqt78oq GpoDrFnmg0GVMeOZQczshERSRUM9MeiceOO5xA+ZcbSaoYarWiONf74QyNPlbz85 beHLKo4OcPHD04BOsTsYKw8IX+bI8UyhWkWxDfOfbuRyIotWFzE= -----END CERTIFICATE-----Generated at Thu Mar 19 09:57:19 2026 by rpki-client