$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft File: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft (raw, json) Hash identifier: qhH0DjGMrbwD+lZFHjhnlE5yW4X3VQo+cANs0Vr67H8= Subject key identifier: 3E:6B:9A:2E:21:3E:BF:97:97:D1:84:19:01:45:C0:9C:24:F1:6A:E8 Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 29468AF841AC541EEC002C709C6192F37BF4D5B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft Manifest number: 0135 Signing time: Mon 08 Sep 2025 19:52:12 +0000 Manifest this update: Mon 08 Sep 2025 19:47:12 +0000 Manifest next update: Fri 12 Sep 2025 04:19:12 +0000 Files and hashes: 1: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl (hash: MIkO6nJ8fxXuAObor9h1SHSHc4picG5oRxfw9Lo8274=) 2: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: zEnS7MUIR/K5UV+N9UMD9HrZThlFZltdIGvWRa0yVIA=) 3: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: OdSsxC/IcH64+HH1xsnqnpx/lq2eSJJ+N7LMBhOTgSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:46:8a:f8:41:ac:54:1e:ec:00:2c:70:9c:61:92:f3:7b:f4:d5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Sep 8 19:47:12 2025 GMT Not After : Sep 12 04:19:12 2025 GMT Subject: CN=3E6B9A2E213EBF9797D184190145C09C24F16AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:17:78:6d:5c:6c:d0:39:37:a8:ae:b2:29:1a: d8:ec:50:15:56:52:c8:67:6c:e3:33:d4:00:0e:92: 75:45:63:e8:8e:d9:0a:eb:e6:f9:2c:64:24:c6:11: 7b:ed:ab:bb:34:a1:d1:6e:53:a4:fe:cf:9d:34:fa: 3b:97:7d:0c:06:58:26:00:ae:ed:d1:85:57:f4:80: 65:27:aa:74:4f:ca:99:8f:ed:8f:89:ab:dd:57:84: 30:e3:cb:9f:07:d5:d7:07:80:21:62:73:56:ef:4b: 92:a1:a4:60:e8:a0:d0:cd:2f:e6:43:b8:98:f9:4a: d1:4f:16:7d:9e:05:db:60:2c:0e:98:cb:05:1f:ec: 26:7e:62:4d:d5:50:c8:31:07:d5:f6:8d:48:d1:92: 30:7a:b0:f4:a9:8e:85:3b:ca:f5:3a:f5:33:b2:6b: be:e2:96:b8:2d:95:c1:e3:d0:17:94:a6:73:6f:96: 54:71:51:41:d9:45:ea:44:2c:1d:e9:e0:1d:70:cf: ac:95:24:35:df:d0:27:58:c0:7d:28:31:13:65:18: 5b:76:60:87:47:92:c7:ed:e2:b9:dc:38:51:4a:1b: 87:63:20:9a:a9:9c:b7:5d:cd:56:f5:f2:74:88:18: 5c:cb:1d:87:5e:71:64:81:96:4a:8e:8a:f2:1c:23: d2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6B:9A:2E:21:3E:BF:97:97:D1:84:19:01:45:C0:9C:24:F1:6A:E8 X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:de:af:23:d4:2c:8f:19:6e:4f:b3:7e:12:ef:9e:e9:32:30: a4:2a:a5:13:a5:81:ff:e1:f9:b5:0e:bb:54:3c:a8:4a:9b:01: e5:cf:30:53:3e:5b:56:a9:55:35:81:4c:85:cf:25:4e:28:d5: eb:77:0f:c3:45:98:a1:39:19:3d:e0:ee:75:3d:f2:25:66:35: 11:6a:89:36:4b:f7:7c:38:d3:61:c2:ad:8d:ef:e3:1f:63:8e: ca:84:d0:73:5d:46:c5:36:e0:f2:32:a0:cc:b3:fb:ca:77:da: 80:9a:25:e0:83:d9:7d:10:10:d5:9b:ff:3f:f0:31:b1:03:d9: 8c:ac:fb:ad:d5:61:f8:bc:94:04:f3:2c:c8:71:8c:64:39:0e: ad:61:50:29:23:ef:c1:cf:04:d1:9e:a0:99:f8:24:f3:7a:d4: 9b:4c:96:99:09:f7:f7:36:d0:6d:e9:11:8d:b9:29:7c:b8:8c: 50:4a:4f:87:65:b2:68:4e:b7:da:48:11:dd:0a:d0:a3:75:42: 84:9a:e0:e6:2d:b8:10:e1:0d:a9:43:39:da:93:0f:b1:0a:67: 04:88:af:9b:65:9e:dd:a0:cd:57:d5:c2:ec:2b:79:52:78:f2: 7b:ad:15:ae:06:f5:39:f8:03:22:62:c7:eb:db:10:db:41:64: e9:64:35:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUaK+EGsVB7sACxwnGGS83v01bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNTA5MDgxOTQ3MTJaFw0yNTA5MTIwNDE5MTJaMDMxMTAvBgNV BAMTKDNFNkI5QTJFMjEzRUJGOTc5N0QxODQxOTAxNDVDMDlDMjRGMTZBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+F3htXGzQOTeorrIpGtjsUBVW UshnbOMz1AAOknVFY+iO2Qrr5vksZCTGEXvtq7s0odFuU6T+z500+juXfQwGWCYA ru3RhVf0gGUnqnRPypmP7Y+Jq91XhDDjy58H1dcHgCFic1bvS5KhpGDooNDNL+ZD uJj5StFPFn2eBdtgLA6YywUf7CZ+Yk3VUMgxB9X2jUjRkjB6sPSpjoU7yvU69TOy a77ilrgtlcHj0BeUpnNvllRxUUHZRepELB3p4B1wz6yVJDXf0CdYwH0oMRNlGFt2 YIdHksft4rncOFFKG4djIJqpnLddzVb18nSIGFzLHYdecWSBlkqOivIcI9JzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPmuaLiE+v5eX0YQZAUXAnCTxaugwHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2 N2ItOWI4ODI1YjVjZDVmLzAvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0 OTdCMzZGM0FENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEveryPULI8Zbk+zfhLvnukyMKQqpROlgf/h +bUOu1Q8qEqbAeXPMFM+W1apVTWBTIXPJU4o1et3D8NFmKE5GT3g7nU98iVmNRFq iTZL93w402HCrY3v4x9jjsqE0HNdRsU24PIyoMyz+8p32oCaJeCD2X0QENWb/z/w MbED2Yys+63VYfi8lATzLMhxjGQ5Dq1hUCkj78HPBNGeoJn4JPN61JtMlpkJ9/c2 0G3pEY25KXy4jFBKT4dlsmhOt9pIEd0K0KN1QoSa4OYtuBDhDalDOdqTD7EKZwSI r5tlnt2gzVfVwuwreVJ48nutFa4G9Tn4AyJix+vbENtBZOlkNUg= -----END CERTIFICATE-----Generated at Tue Sep 9 10:32:58 2025 by rpki-client