$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft File: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json) Hash identifier: 2FCnbdOVYyfqEoqJW99z6cewYp01gOyeXQY6bS1ca8o= Subject key identifier: D9:43:7B:00:75:0C:10:EE:8F:D3:8F:47:95:0E:42:09:84:A4:62:6D Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 7BE44ED5440120723EE41ABFE4B64716A56F48C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft Manifest number: 01C5 Signing time: Tue 03 Jun 2025 05:22:08 +0000 Manifest this update: Tue 03 Jun 2025 05:17:08 +0000 Manifest next update: Fri 06 Jun 2025 13:32:08 +0000 Files and hashes: 1: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: BvB+dwr9bBtzkRyMA8bTepBQEZZlKW8nu8VJsNMkUH8=) 2: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: +cNDNT1WAKvcA6IvvM2HEmnk/OOgig2Dhx9NmHzAEPU=) 3: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: xne0Cq1LXYrb0/DpeRsrFAeGbUysSbEdSSRG1O8ZrMs=) 4: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: t4B/eq8AOh4JIkCzcOT+SpN0WxnYYYPczNkJfx4V+XI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 13:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e4:4e:d5:44:01:20:72:3e:e4:1a:bf:e4:b6:47:16:a5:6f:48:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Jun 3 05:17:08 2025 GMT Not After : Jun 6 13:32:08 2025 GMT Subject: CN=D9437B00750C10EE8FD38F47950E420984A4626D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:88:bb:ca:3f:07:9b:51:b2:f6:c1:1f:e7: 99:47:56:6a:2f:e6:88:a6:f1:33:12:45:07:6a:ab: a1:98:da:a9:bc:1d:79:5c:52:01:fe:47:ba:15:ad: ea:8f:dc:d8:94:8f:50:05:b6:d5:65:13:7f:71:43: a3:43:41:99:22:22:3b:d0:cc:22:a6:8a:20:49:36: da:d4:aa:95:92:c5:aa:2b:82:e9:4a:87:da:64:63: 56:65:a8:ff:a0:a9:45:5e:44:eb:50:f5:c4:bb:97: 26:01:15:6a:e9:a7:1b:7b:31:2a:89:64:4c:21:54: 9d:3a:1e:9f:a1:f6:cc:9e:e0:f6:d8:e4:c2:b2:4d: 57:82:78:4b:d3:02:7b:95:78:42:cc:54:be:e1:50: c4:aa:aa:16:2f:d8:5d:62:46:c3:be:a7:dd:b7:76: 6f:fb:2b:77:e1:45:43:19:d7:9b:7e:b7:a7:e1:38: 36:7b:60:17:ab:9d:cb:0e:8e:b9:31:6d:62:a5:38: 8f:f9:4b:95:ad:43:39:f0:e5:53:6e:d2:9c:ab:55: c1:dc:e7:50:1d:85:ee:b5:0d:dd:23:e9:d7:06:4b: 6b:0d:eb:70:d2:a5:b8:5f:78:57:66:78:c4:2c:d3: 02:06:9d:eb:29:6c:07:2e:35:74:45:dc:a2:3a:35: a2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:43:7B:00:75:0C:10:EE:8F:D3:8F:47:95:0E:42:09:84:A4:62:6D X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:bd:e1:08:52:07:74:e0:44:17:29:ee:bf:59:41:e6:f4:85: a1:99:f5:f5:35:cc:33:0d:9d:39:0b:f0:75:4b:14:e5:d4:67: 33:20:f8:0d:7e:b6:90:08:5e:08:47:33:7e:fa:a2:80:7a:24: 18:5f:6b:fd:33:05:ec:d4:9b:4c:03:f6:4b:b6:5e:1e:b2:cc: 5f:10:4b:b6:e0:a8:cd:b6:2d:46:20:e0:0a:97:ed:98:f3:48: 5f:64:e6:85:14:bb:9b:b9:bd:47:fa:28:ef:78:41:62:03:39: e5:53:ab:c5:3d:fa:e3:e0:1b:c5:83:21:46:c1:86:bd:a7:36: 6b:d6:c7:16:9f:cf:48:17:ae:29:96:8d:73:f7:77:aa:c7:b6: 81:75:73:82:27:bc:ba:a5:47:ef:e7:ce:9f:05:81:9e:c7:bd: 5b:cd:44:af:d5:6b:e6:75:f2:43:80:04:fb:cc:7f:81:b8:f2: e6:7f:0e:f5:bb:3f:59:cd:73:b8:a7:c3:f2:d5:28:8c:25:6f: 09:a0:9a:8d:85:4c:0a:88:cf:80:63:37:4b:cc:7c:6d:bb:29: 8a:28:be:78:8e:b3:f9:ac:cc:45:48:09:97:e3:91:50:c5:02: cf:92:79:2c:0e:5b:ac:ce:e3:91:c1:bf:1d:8b:78:ad:de:3a: ed:b9:4d:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+RO1UQBIHI+5Bq/5LZHFqVvSMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNTA2MDMwNTE3MDhaFw0yNTA2MDYxMzMyMDhaMDMxMTAvBgNV BAMTKEQ5NDM3QjAwNzUwQzEwRUU4RkQzOEY0Nzk1MEU0MjA5ODRBNDYyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQS4i7yj8Hm1Gy9sEf55lHVmov 5oim8TMSRQdqq6GY2qm8HXlcUgH+R7oVreqP3NiUj1AFttVlE39xQ6NDQZkiIjvQ zCKmiiBJNtrUqpWSxaorgulKh9pkY1ZlqP+gqUVeROtQ9cS7lyYBFWrppxt7MSqJ ZEwhVJ06Hp+h9sye4PbY5MKyTVeCeEvTAnuVeELMVL7hUMSqqhYv2F1iRsO+p923 dm/7K3fhRUMZ15t+t6fhODZ7YBerncsOjrkxbWKlOI/5S5WtQznw5VNu0pyrVcHc 51Adhe61Dd0j6dcGS2sN63DSpbhfeFdmeMQs0wIGnespbAcuNXRF3KI6NaJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2UN7AHUMEO6P049HlQ5CCYSkYm0wHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNF NTA0MzFGMEY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFG94QhSB3TgRBcp7r9ZQeb0haGZ9fU1zDMN nTkL8HVLFOXUZzMg+A1+tpAIXghHM376ooB6JBhfa/0zBezUm0wD9ku2Xh6yzF8Q S7bgqM22LUYg4AqX7ZjzSF9k5oUUu5u5vUf6KO94QWIDOeVTq8U9+uPgG8WDIUbB hr2nNmvWxxafz0gXrimWjXP3d6rHtoF1c4InvLqlR+/nzp8FgZ7HvVvNRK/Va+Z1 8kOABPvMf4G48uZ/DvW7P1nNc7inw/LVKIwlbwmgmo2FTAqIz4BjN0vMfG27KYoo vniOs/mszEVICZfjkVDFAs+SeSwOW6zO45HBvx2LeK3eOu25TVs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:14 2025 by rpki-client