$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json) Hash identifier: tSTfI/0vnkgGU9mgcSEo3WkTc4vivFtCd7+/AnyZgh0= Subject key identifier: 42:0E:74:54:34:2E:23:A3:B0:3B:1F:41:F1:A6:58:DF:A9:B3:86:F9 Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215 Certificate serial: 08925628972F6ED095466A4095AB1126B6FFC515 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft Manifest number: 01AA Signing time: Mon 02 Jun 2025 05:51:02 +0000 Manifest this update: Mon 02 Jun 2025 05:46:02 +0000 Manifest next update: Thu 05 Jun 2025 15:28:02 +0000 Files and hashes: 1: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: BeLsfpL8RzgYNWSnNvLFv9eVxbvW50/eid911Xh0OPs=) 2: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: VNJAY+H19UUVcBumEXPkavTyhvrDWEQoqlSr7a670qE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 15:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:92:56:28:97:2f:6e:d0:95:46:6a:40:95:ab:11:26:b6:ff:c5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E2707085C2950AF9267465A3801841D8077215 Validity Not Before: Jun 2 05:46:02 2025 GMT Not After : Jun 5 15:28:02 2025 GMT Subject: CN=420E7454342E23A3B03B1F41F1A658DFA9B386F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f7:17:11:3d:0c:73:48:c1:bf:af:78:b4:14: ae:ed:78:61:af:5a:9d:79:5d:63:7e:21:bb:2b:ad: 6b:89:fa:3a:c7:c9:43:5b:30:0a:56:a8:4c:71:60: 23:30:1c:ca:23:9e:6d:79:b8:19:bc:8b:49:f2:60: ca:cf:1b:9b:5f:42:6c:90:1c:0d:06:8f:3d:c9:e5: c6:8b:54:76:33:31:da:9d:15:ce:37:b4:ec:1d:b8: 4b:e4:e0:5c:30:88:37:96:96:63:d1:0d:59:2f:1e: f5:e8:5e:a4:16:af:f0:a0:71:86:fd:83:86:fb:bc: 1c:7f:8c:51:d6:a1:48:f1:28:32:b3:21:37:1f:9e: 89:1a:3d:60:8f:9f:d7:5b:bb:b5:91:51:f1:0f:34: 4e:64:27:00:31:19:dc:84:ec:62:25:b3:f7:f5:85: 65:d9:44:10:b9:64:c7:14:80:d7:54:9e:1d:88:9e: df:9f:b2:8f:72:d5:2d:58:d8:e8:f1:14:fa:9d:c5: 03:ba:ca:6b:ce:3e:73:96:1a:76:83:a9:d7:41:d5: f9:2c:43:8c:0c:d0:4f:ff:a4:11:a2:c3:cd:04:78: a6:c7:9d:b4:f8:bd:06:64:1e:3f:56:28:0c:63:46: a1:6c:5a:7e:87:d1:8b:77:db:18:d2:e7:8b:b4:79: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0E:74:54:34:2E:23:A3:B0:3B:1F:41:F1:A6:58:DF:A9:B3:86:F9 X509v3 Authority Key Identifier: keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:b8:e5:9d:09:c2:65:02:c2:b0:d0:87:6d:e3:68:f1:ab:48: 06:90:33:4e:82:47:3c:24:83:12:ee:3f:4c:bc:c5:fc:9a:2b: 7e:4a:06:78:03:a0:95:4f:23:51:7c:c5:c8:0d:35:73:52:9d: 95:4c:fc:a2:b7:38:d8:9e:83:6f:1e:8a:ff:9d:70:67:c5:50: c1:2e:d5:a1:f0:98:aa:21:57:64:4b:21:5b:68:d2:36:90:12: de:71:04:be:26:cd:1f:0f:5e:1d:d6:89:26:88:17:08:6a:5d: e5:0e:e4:ab:68:3f:d4:d6:0b:99:51:90:e4:24:60:c9:41:4b: bb:5a:ee:7c:9c:a7:71:d3:af:1b:c1:9f:33:79:49:a7:21:76: 95:7e:f5:1f:ef:f4:de:5e:74:7b:ae:92:57:b7:80:08:ea:c2: 65:11:95:7a:5a:cb:9e:b2:0b:9b:cc:44:80:8f:fc:35:7b:77: 22:9f:0e:0d:4f:f1:75:84:3e:28:03:a1:1f:2c:9e:92:bc:5a: 78:32:29:85:1c:c2:55:79:22:4b:b2:3d:5c:15:12:77:b8:26: 1a:2f:2a:86:c0:59:4e:f7:55:0c:ed:2c:55:8f:1a:f7:cb:38: 98:5c:3a:73:09:b4:65:0a:ec:dc:82:ae:e1:a5:93:93:30:03: d4:02:aa:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJJWKJcvbtCVRmpAlasRJrb/xRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE ODA3NzIxNTAeFw0yNTA2MDIwNTQ2MDJaFw0yNTA2MDUxNTI4MDJaMDMxMTAvBgNV BAMTKDQyMEU3NDU0MzQyRTIzQTNCMDNCMUY0MUYxQTY1OERGQTlCMzg2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9xcRPQxzSMG/r3i0FK7teGGv Wp15XWN+IbsrrWuJ+jrHyUNbMApWqExxYCMwHMojnm15uBm8i0nyYMrPG5tfQmyQ HA0Gjz3J5caLVHYzMdqdFc43tOwduEvk4FwwiDeWlmPRDVkvHvXoXqQWr/CgcYb9 g4b7vBx/jFHWoUjxKDKzITcfnokaPWCPn9dbu7WRUfEPNE5kJwAxGdyE7GIls/f1 hWXZRBC5ZMcUgNdUnh2Int+fso9y1S1Y2OjxFPqdxQO6ymvOPnOWGnaDqddB1fks Q4wM0E//pBGiw80EeKbHnbT4vQZkHj9WKAxjRqFsWn6H0Yt32xjS54u0eaAjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQg50VDQuI6OwOx9B8aZY36mzhvkwHwYDVR0j BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1 QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3 NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4 NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOe45Z0JwmUCwrDQh23jaPGrSAaQM06CRzwk gxLuP0y8xfyaK35KBngDoJVPI1F8xcgNNXNSnZVM/KK3ONieg28eiv+dcGfFUMEu 1aHwmKohV2RLIVto0jaQEt5xBL4mzR8PXh3WiSaIFwhqXeUO5KtoP9TWC5lRkOQk YMlBS7ta7nycp3HTrxvBnzN5SachdpV+9R/v9N5edHuukle3gAjqwmURlXpay56y C5vMRICP/DV7dyKfDg1P8XWEPigDoR8snpK8WngyKYUcwlV5IkuyPVwVEne4Jhov KobAWU73VQztLFWPGvfLOJhcOnMJtGUK7NyCruGlk5MwA9QCqgs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:35:43 2025 by rpki-client