$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json) Hash identifier: MZvcNqyXwWg062RxiWwnu6vz5Vu2PZPXQ5G5C5gv4OQ= Subject key identifier: 7E:D9:C5:E3:D0:07:8F:FD:41:65:9F:EF:8B:B2:67:39:D7:E2:5A:56 Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215 Certificate serial: 11D9E31C89D14BB4151BD54C77BC2F8A3CF80F36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft Manifest number: 01D3 Signing time: Wed 03 Sep 2025 07:41:03 +0000 Manifest this update: Wed 03 Sep 2025 07:36:03 +0000 Manifest next update: Sat 06 Sep 2025 18:37:03 +0000 Files and hashes: 1: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: YZcob7thd/LOjPB/6rQMA9CLx8Gr3lnMU5nA1U0oLF8=) 2: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: BeLsfpL8RzgYNWSnNvLFv9eVxbvW50/eid911Xh0OPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d9:e3:1c:89:d1:4b:b4:15:1b:d5:4c:77:bc:2f:8a:3c:f8:0f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E2707085C2950AF9267465A3801841D8077215 Validity Not Before: Sep 3 07:36:03 2025 GMT Not After : Sep 6 18:37:03 2025 GMT Subject: CN=7ED9C5E3D0078FFD41659FEF8BB26739D7E25A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:67:3e:d5:7d:29:7e:db:5b:e8:0f:dc:9a: 77:08:e5:06:c5:13:e0:9c:62:c9:0f:e3:bc:18:a8: ad:37:8a:58:01:16:01:85:05:b0:4f:0b:35:62:0d: 01:69:b4:c0:68:e0:82:68:d5:1f:25:a5:b1:36:52: 5c:db:1c:50:4c:37:60:b3:74:ab:30:97:31:51:85: af:78:30:85:34:37:f7:91:79:ba:b3:42:69:24:48: 9e:52:16:c9:97:2e:14:9c:ea:42:2f:cc:bd:e4:84: 1d:b0:24:dc:48:0c:cb:42:a9:f0:f4:b9:a2:62:16: 36:47:9d:7f:79:f7:9e:df:45:d2:c3:6f:52:25:35: af:b7:3d:fa:fa:76:41:d8:23:2c:57:f0:c2:d1:45: 2e:85:db:06:8d:7d:01:e4:d8:ae:5d:0c:b5:25:b5: 41:0c:fa:35:c3:a6:74:c0:fa:92:d8:e7:b1:d8:b9: 75:fd:5c:84:ab:f6:e8:a0:c1:6b:55:0c:bc:48:f3: b3:c3:e9:c1:a9:52:04:7c:af:0d:80:33:0e:3e:9b: 34:ca:e1:9c:f3:f4:6e:dc:dc:51:b1:5c:e5:14:8a: eb:53:02:81:21:1c:4b:1d:49:37:32:c5:c7:f4:dc: cb:e4:6e:b4:37:47:d7:ca:0c:e9:d5:00:af:ec:d3: 4d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D9:C5:E3:D0:07:8F:FD:41:65:9F:EF:8B:B2:67:39:D7:E2:5A:56 X509v3 Authority Key Identifier: keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:3d:d7:49:02:ee:89:bd:c4:59:10:24:86:62:a1:bc:37:f7: 6c:de:c7:b1:94:0a:a1:d1:33:25:35:2a:99:1b:33:c2:3e:7d: 2a:25:52:1d:09:61:d9:e0:14:44:90:dc:d0:ca:e1:01:c8:24: 21:3b:dc:c1:6f:4e:53:6d:86:5f:90:02:55:c9:f5:46:16:46: 7c:24:22:61:b5:96:fc:1a:74:39:55:9b:03:dc:26:be:b2:57: 01:a7:23:99:fa:79:14:a3:6d:41:da:55:15:5c:76:b3:85:73: e5:a5:80:b3:d9:c7:4e:ba:17:19:ab:77:03:46:b5:98:46:cb: 05:d2:5f:55:16:07:d7:98:6f:b7:51:10:0e:96:32:a9:d7:05: d1:87:9a:7f:e5:53:6b:e5:f5:36:3d:1e:c8:c8:bd:aa:63:d5: a4:1d:be:e2:3f:bb:d4:46:14:c9:7f:4c:88:d6:9c:52:31:ba: 97:de:1b:29:d7:2f:e1:5c:9c:0e:85:1c:74:22:cb:67:c2:7a: 0b:93:a6:2e:01:de:79:61:b7:14:cb:fb:7a:1d:14:af:8b:e7: 76:5f:ec:6d:c1:da:0e:b7:c8:6e:1d:36:86:bf:b1:47:fa:2e: e9:4d:9e:dd:ba:09:1a:93:e4:c2:3e:a0:87:ca:53:75:a8:3f: 70:45:bf:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdnjHInRS7QVG9VMd7wvijz4DzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE ODA3NzIxNTAeFw0yNTA5MDMwNzM2MDNaFw0yNTA5MDYxODM3MDNaMDMxMTAvBgNV BAMTKDdFRDlDNUUzRDAwNzhGRkQ0MTY1OUZFRjhCQjI2NzM5RDdFMjVBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4MGc+1X0pfttb6A/cmncI5QbF E+CcYskP47wYqK03ilgBFgGFBbBPCzViDQFptMBo4IJo1R8lpbE2UlzbHFBMN2Cz dKswlzFRha94MIU0N/eRebqzQmkkSJ5SFsmXLhSc6kIvzL3khB2wJNxIDMtCqfD0 uaJiFjZHnX95957fRdLDb1IlNa+3Pfr6dkHYIyxX8MLRRS6F2waNfQHk2K5dDLUl tUEM+jXDpnTA+pLY57HYuXX9XISr9uigwWtVDLxI87PD6cGpUgR8rw2AMw4+mzTK 4Zzz9G7c3FGxXOUUiutTAoEhHEsdSTcyxcf03MvkbrQ3R9fKDOnVAK/s000zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUftnF49AHj/1BZZ/vi7JnOdfiWlYwHwYDVR0j BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1 QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3 NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4 NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKE910kC7om9xFkQJIZiobw392zex7GUCqHR MyU1KpkbM8I+fSolUh0JYdngFESQ3NDK4QHIJCE73MFvTlNthl+QAlXJ9UYWRnwk ImG1lvwadDlVmwPcJr6yVwGnI5n6eRSjbUHaVRVcdrOFc+WlgLPZx066FxmrdwNG tZhGywXSX1UWB9eYb7dREA6WMqnXBdGHmn/lU2vl9TY9HsjIvapj1aQdvuI/u9RG FMl/TIjWnFIxupfeGynXL+FcnA6FHHQiy2fCeguTpi4B3nlhtxTL+3odFK+L53Zf 7G3B2g63yG4dNoa/sUf6LulNnt26CRqT5MI+oIfKU3WoP3BFv/s= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:44 2025 by rpki-client