$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json) Hash identifier: 2qtzhNE8sGccKyDCx9uiT0QqzIZGLqgknkvUqcfcwLE= Subject key identifier: 07:F0:EE:41:18:E4:CC:5C:B8:9B:F6:B3:DF:1C:74:92:FA:92:4F:52 Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215 Certificate serial: 1A42ED67F07AAFF6D16ED0D7B0E38CB0998BB206 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft Manifest number: 0190 Signing time: Sat 05 Apr 2025 04:41:01 +0000 Manifest this update: Sat 05 Apr 2025 04:36:01 +0000 Manifest next update: Tue 08 Apr 2025 06:55:01 +0000 Files and hashes: 1: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: BeLsfpL8RzgYNWSnNvLFv9eVxbvW50/eid911Xh0OPs=) 2: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: rGkdvCqTJUpkftOIT2Tlzy8eKy7SnL+RmZmagIsCEcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:42:ed:67:f0:7a:af:f6:d1:6e:d0:d7:b0:e3:8c:b0:99:8b:b2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E2707085C2950AF9267465A3801841D8077215 Validity Not Before: Apr 5 04:36:01 2025 GMT Not After : Apr 8 06:55:01 2025 GMT Subject: CN=07F0EE4118E4CC5CB89BF6B3DF1C7492FA924F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:bb:53:6d:8c:88:0c:31:3d:6c:05:fe:a0: 91:44:ec:66:ed:ea:4b:d1:1c:f3:57:1e:47:4e:27: ab:c2:38:db:ae:52:d2:8f:2e:ed:67:42:ff:e1:90: 13:b2:58:1c:f2:b6:e6:3f:0b:33:92:44:ab:2d:44: c2:90:3f:59:6e:ef:f5:61:ee:b6:98:10:15:30:7e: 4a:bb:ed:29:e3:00:6d:d1:11:19:0c:e9:2f:92:e7: 23:58:07:34:d8:fa:7a:02:df:0f:70:0f:c2:ed:32: 80:12:1a:9d:0d:93:e0:24:02:5c:ae:68:15:71:d1: 44:73:d1:da:d4:3a:4f:8c:24:cf:62:c5:e9:e7:ac: 01:9d:b7:6e:24:22:2d:f8:75:6d:c0:ec:83:d2:b2: 8d:83:fb:37:27:93:8e:87:7e:11:99:3c:d3:ec:9e: cd:29:f8:33:07:ff:38:77:c6:78:dd:31:66:df:bd: c8:2e:0d:3c:b2:b8:66:3d:66:86:10:14:c8:54:c7: 76:b2:23:f0:42:5c:e8:af:d5:82:5b:28:5b:eb:76: 3d:7a:56:24:97:a3:da:8f:a7:9e:df:c0:56:a7:49: ae:63:4b:f2:d0:70:31:de:57:cd:57:6f:69:8e:c1: 2f:78:8d:1c:4e:2d:62:85:09:a7:e3:5b:86:ac:d6: 4f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F0:EE:41:18:E4:CC:5C:B8:9B:F6:B3:DF:1C:74:92:FA:92:4F:52 X509v3 Authority Key Identifier: keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c6:4b:6f:41:5d:f5:42:84:12:84:73:e5:c0:8f:77:7e:80: 62:5b:e4:96:42:e9:03:9a:7b:21:39:e9:e2:31:91:6d:42:dc: de:58:86:e2:fe:76:fe:60:50:3c:0c:d1:8b:5d:8f:93:24:c9: 4a:1e:91:e1:7a:ca:ee:d9:70:52:ce:25:2a:f3:dd:19:8e:c1: 77:94:1d:a7:aa:5b:0f:ad:75:93:4d:ff:f7:15:c7:70:2d:22: 08:04:2d:9c:af:1b:9c:51:1f:b0:0c:86:49:a4:be:81:65:f1: 15:79:5a:7f:16:80:d4:af:ed:44:0f:01:6f:6e:28:0f:24:4d: 18:d4:d2:fa:b7:60:16:4c:68:f8:5e:05:8b:8d:b5:95:30:23: 19:05:32:c9:d2:fc:bc:f0:6c:3e:5a:37:e0:d9:c0:d7:5a:1f: 3f:55:c5:ef:5e:3f:0b:6b:25:36:39:8a:19:f7:a8:d2:55:cf: e7:c7:a5:6c:62:c8:01:97:09:82:e0:92:d4:18:d4:ad:6d:f6: ed:df:19:59:cf:81:9e:a3:ac:40:d6:6f:79:5c:b1:65:f3:32: 1e:87:14:c0:12:d9:b0:a8:ba:c4:5c:24:10:79:03:43:fd:74: 30:1b:bc:c3:8d:d2:88:6a:a2:ff:ac:e4:6f:75:dd:93:21:fc: d6:e7:be:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGkLtZ/B6r/bRbtDXsOOMsJmLsgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE ODA3NzIxNTAeFw0yNTA0MDUwNDM2MDFaFw0yNTA0MDgwNjU1MDFaMDMxMTAvBgNV BAMTKDA3RjBFRTQxMThFNENDNUNCODlCRjZCM0RGMUM3NDkyRkE5MjRGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeBrtTbYyIDDE9bAX+oJFE7Gbt 6kvRHPNXHkdOJ6vCONuuUtKPLu1nQv/hkBOyWBzytuY/CzOSRKstRMKQP1lu7/Vh 7raYEBUwfkq77SnjAG3RERkM6S+S5yNYBzTY+noC3w9wD8LtMoASGp0Nk+AkAlyu aBVx0URz0drUOk+MJM9ixennrAGdt24kIi34dW3A7IPSso2D+zcnk46HfhGZPNPs ns0p+DMH/zh3xnjdMWbfvcguDTyyuGY9ZoYQFMhUx3ayI/BCXOiv1YJbKFvrdj16 ViSXo9qPp57fwFanSa5jS/LQcDHeV81Xb2mOwS94jRxOLWKFCafjW4as1k87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB/DuQRjkzFy4m/az3xx0kvqST1IwHwYDVR0j BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1 QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3 NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4 NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzGS29BXfVChBKEc+XAj3d+gGJb5JZC6QOa eyE56eIxkW1C3N5YhuL+dv5gUDwM0Ytdj5MkyUoekeF6yu7ZcFLOJSrz3RmOwXeU HaeqWw+tdZNN//cVx3AtIggELZyvG5xRH7AMhkmkvoFl8RV5Wn8WgNSv7UQPAW9u KA8kTRjU0vq3YBZMaPheBYuNtZUwIxkFMsnS/LzwbD5aN+DZwNdaHz9Vxe9ePwtr JTY5ihn3qNJVz+fHpWxiyAGXCYLgktQY1K1t9u3fGVnPgZ6jrEDWb3lcsWXzMh6H FMAS2bCousRcJBB5A0P9dDAbvMON0ohqov+s5G913ZMh/Nbnvsc= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:50 2025 by rpki-client