$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft File: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json) Hash identifier: Zilc73Hj2zSjWfn1oJCb9SQfmj7qNf/SRZCNVuaVuUQ= Subject key identifier: 99:EA:E4:3C:B8:60:21:52:E5:DE:C7:0F:8C:88:BF:13:1A:A4:B3:81 Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 0253AE9E5F588F3C283EA9C93864C9967B6ADC4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft Manifest number: 01EF Signing time: Sun 07 Sep 2025 04:52:05 +0000 Manifest this update: Sun 07 Sep 2025 04:47:05 +0000 Manifest next update: Wed 10 Sep 2025 15:50:05 +0000 Files and hashes: 1: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: xne0Cq1LXYrb0/DpeRsrFAeGbUysSbEdSSRG1O8ZrMs=) 2: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: BvB+dwr9bBtzkRyMA8bTepBQEZZlKW8nu8VJsNMkUH8=) 3: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: 28SSJlnTm2IXOs7fr99TgfIj4eoVdRLx8E5/2eXJK1g=) 4: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: t4B/eq8AOh4JIkCzcOT+SpN0WxnYYYPczNkJfx4V+XI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:53:ae:9e:5f:58:8f:3c:28:3e:a9:c9:38:64:c9:96:7b:6a:dc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Sep 7 04:47:05 2025 GMT Not After : Sep 10 15:50:05 2025 GMT Subject: CN=99EAE43CB8602152E5DEC70F8C88BF131AA4B381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:5a:20:c3:8b:c1:00:63:4d:8e:f0:43:7f: e6:65:3f:62:63:c8:56:19:15:ea:c0:80:08:b1:dc: d6:41:e5:01:80:b2:30:05:17:62:ab:f9:32:51:35: 8b:d5:df:6d:c4:3f:a2:e7:25:7e:91:8a:e4:30:d9: 64:ec:46:a0:58:fd:c6:eb:0c:05:d0:1b:a1:cd:19: 06:cd:d7:27:c7:36:08:58:64:95:85:14:17:89:d9: aa:0f:ba:76:86:64:9a:f4:d9:0f:0d:1b:59:ed:f3: 08:f3:83:20:b5:1b:53:23:88:7a:8e:55:78:00:f4: fa:31:93:f4:37:6d:ac:15:29:f2:1c:51:96:0b:a4: f8:a5:2b:9b:8e:e6:43:b4:56:82:0f:de:8a:60:6b: 24:b3:76:70:3a:ce:64:fe:70:c7:dd:a6:ac:57:df: a2:7d:2b:65:16:b5:18:65:c4:85:fa:49:a5:b7:f1: e8:91:20:29:1e:7f:f6:19:e6:41:46:fb:3d:57:fc: 19:c0:2e:89:f7:36:d3:9f:81:8a:d3:21:3b:73:73: 7c:7e:49:36:01:62:d9:c1:7a:5e:73:14:f2:b0:79: e6:43:2b:89:59:ff:b9:bf:8b:94:1b:42:33:dc:52: 05:44:34:bc:f2:2b:65:72:89:65:d4:62:33:93:d8: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EA:E4:3C:B8:60:21:52:E5:DE:C7:0F:8C:88:BF:13:1A:A4:B3:81 X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:15:31:4c:9f:60:98:4a:62:a0:34:60:92:4e:c6:48:f7:c3: b4:50:a4:62:35:fe:82:8c:5a:50:3c:d3:92:8f:bd:e4:26:ba: 81:0a:0a:2d:7f:73:28:52:dc:a6:50:b5:54:07:a9:62:a1:61: 72:62:1f:87:b8:40:f8:78:eb:8f:bf:df:3c:85:d0:d2:48:df: cf:9a:37:71:d0:16:0d:cf:41:a3:33:8b:39:f6:09:f7:3b:af: 9e:48:7a:16:0c:74:d7:e2:20:8f:27:51:ae:17:2d:bb:42:ca: 2c:b4:ec:ae:53:16:8a:73:c9:f5:0e:fa:7d:61:fc:ef:e6:44: bc:47:6a:ea:36:b2:68:88:52:1b:ca:5e:21:cd:2a:1e:20:b7: 74:cd:03:cd:3c:98:64:a4:3b:08:a8:f1:91:e1:0e:36:3b:de: 0f:d2:2b:95:ee:19:b8:9f:1e:6c:2a:99:dd:63:24:4f:ed:0b: a4:91:52:b3:99:14:1a:8c:02:31:f3:71:32:bb:2b:64:b5:e6: 0c:b7:45:5d:2b:d0:26:43:93:f3:76:7e:18:57:b2:ad:d3:d6: 0d:cc:d7:c1:b4:87:f6:a9:e8:8d:e6:5a:83:66:e0:9a:b7:c8: 58:ea:b7:69:6d:ba:7d:8c:90:ec:06:53:68:8a:79:b0:6d:08: 5b:91:fc:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAlOunl9YjzwoPqnJOGTJlntq3E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNTA5MDcwNDQ3MDVaFw0yNTA5MTAxNTUwMDVaMDMxMTAvBgNV BAMTKDk5RUFFNDNDQjg2MDIxNTJFNURFQzcwRjhDODhCRjEzMUFBNEIzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzE1ogw4vBAGNNjvBDf+ZlP2Jj yFYZFerAgAix3NZB5QGAsjAFF2Kr+TJRNYvV323EP6LnJX6RiuQw2WTsRqBY/cbr DAXQG6HNGQbN1yfHNghYZJWFFBeJ2aoPunaGZJr02Q8NG1nt8wjzgyC1G1MjiHqO VXgA9Poxk/Q3bawVKfIcUZYLpPilK5uO5kO0VoIP3opgaySzdnA6zmT+cMfdpqxX 36J9K2UWtRhlxIX6SaW38eiRICkef/YZ5kFG+z1X/BnALon3NtOfgYrTITtzc3x+ STYBYtnBel5zFPKweeZDK4lZ/7m/i5QbQjPcUgVENLzyK2VyiWXUYjOT2HAXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmerkPLhgIVLl3scPjIi/Exqks4EwHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNF NTA0MzFGMEY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoVMUyfYJhKYqA0YJJOxkj3w7RQpGI1/oKM WlA805KPveQmuoEKCi1/cyhS3KZQtVQHqWKhYXJiH4e4QPh464+/3zyF0NJI38+a N3HQFg3PQaMzizn2Cfc7r55IehYMdNfiII8nUa4XLbtCyiy07K5TFopzyfUO+n1h /O/mRLxHauo2smiIUhvKXiHNKh4gt3TNA808mGSkOwio8ZHhDjY73g/SK5XuGbif Hmwqmd1jJE/tC6SRUrOZFBqMAjHzcTK7K2S15gy3RV0r0CZDk/N2fhhXsq3T1g3M 18G0h/ap6I3mWoNm4Jq3yFjqt2ltun2MkOwGU2iKebBtCFuR/Fk= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:44 2025 by rpki-client