$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft File: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft (raw, json) Hash identifier: PVtn9A73ReZbcrD/tlOmOfPUCg5t/N3aDhWcDscUOPs= Subject key identifier: 29:58:A1:A9:50:E2:91:62:97:FC:68:B5:F4:C6:91:8D:0B:1E:43:BD Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 302CBDA41F37BFB16A460F686F5B05070A11C985 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft Manifest number: 010A Signing time: Tue 03 Jun 2025 11:04:18 +0000 Manifest this update: Tue 03 Jun 2025 10:59:18 +0000 Manifest next update: Fri 06 Jun 2025 17:52:18 +0000 Files and hashes: 1: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: OdSsxC/IcH64+HH1xsnqnpx/lq2eSJJ+N7LMBhOTgSQ=) 2: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl (hash: Z7XGUge8tsOw9Fb2R1rbyBYcFQucSnDKr1HjFZm9dZ4=) 3: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: zEnS7MUIR/K5UV+N9UMD9HrZThlFZltdIGvWRa0yVIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2c:bd:a4:1f:37:bf:b1:6a:46:0f:68:6f:5b:05:07:0a:11:c9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Jun 3 10:59:18 2025 GMT Not After : Jun 6 17:52:18 2025 GMT Subject: CN=2958A1A950E2916297FC68B5F4C6918D0B1E43BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:86:ca:b7:ac:51:30:6f:ed:48:77:db:b8:96: 76:0c:bc:bb:00:15:70:fd:48:f1:18:1b:a3:f6:fd: 11:c0:ba:c0:52:16:f4:87:93:57:bf:96:be:4a:03: 35:d2:cd:38:0f:2f:f5:d1:06:94:34:11:bc:8b:22: e3:88:5b:f8:1d:cf:2c:f2:a4:5e:c5:c8:33:e6:2f: 3b:f3:0d:90:a2:cf:3e:4e:67:ec:fe:e4:ea:77:92: 38:b6:50:6f:5b:f7:19:2b:f9:01:4f:e7:82:c4:30: 94:e0:59:2f:c3:f4:a2:10:31:16:b5:58:f7:7a:e8: 18:9d:69:23:29:31:34:6d:a6:f8:09:b7:f9:83:33: e3:f0:af:7f:2c:57:00:b2:08:1c:28:61:c8:07:76: 2d:01:4e:6f:fc:63:f5:78:6c:65:1a:bb:31:20:e3: 78:0e:7c:05:b8:78:92:6e:58:26:54:3d:2e:91:1c: af:a5:29:8a:a9:c7:a3:26:a3:9b:f3:f0:00:c8:b7: 17:e3:30:43:d4:51:68:23:20:86:fd:d9:fe:94:ce: 8a:2d:08:9a:5d:ff:e2:20:99:77:81:11:27:b3:b5: 7f:69:45:6b:68:c4:58:38:f5:9a:ba:69:89:1f:7e: c7:04:6c:e4:b5:7c:20:1f:14:da:b8:1d:71:f3:fe: 18:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:58:A1:A9:50:E2:91:62:97:FC:68:B5:F4:C6:91:8D:0B:1E:43:BD X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:08:54:87:09:38:05:de:c0:26:0f:8e:1f:e8:82:a2:01:23: 22:f8:95:fd:42:3c:cd:ac:fb:e6:70:ce:5a:bf:5f:ef:88:f5: 76:62:a1:e0:3a:3b:43:48:19:d8:58:15:d4:8e:3f:f9:87:01: 73:a4:11:8c:ed:a8:a4:fe:b8:92:4a:f7:fd:bd:83:ba:03:fc: 2b:3b:ec:94:e2:c6:8b:f7:31:ee:d5:45:1b:0e:13:b9:1e:5a: 35:22:35:58:07:85:7f:15:cd:b5:af:70:ed:16:01:f0:b8:5a: 9a:a7:65:46:57:04:fc:b9:1a:c6:00:c8:62:5f:98:0b:75:6c: 7d:86:c6:ea:91:1a:8d:96:2f:07:75:43:e9:54:47:54:59:c2: 85:e4:2c:73:b2:5b:2b:46:00:ce:7c:92:71:2d:b1:20:5d:e3: cb:24:d5:ea:bd:84:9e:a8:e9:83:d6:5a:87:34:27:8f:7c:c7: dc:b1:df:48:3e:73:2f:ed:d8:2c:96:5a:cb:e6:94:19:24:6c: 05:f5:2f:1e:41:cd:64:87:cd:54:ed:6b:21:e5:3f:90:fe:f4: f4:db:a8:3c:b2:35:2e:e5:45:a4:6a:a0:dd:00:74:d5:2d:dc: b4:e7:63:14:46:17:95:e3:e0:db:c2:04:7c:0d:28:cd:91:7f: 31:0b:51:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCy9pB83v7FqRg9ob1sFBwoRyYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNTA2MDMxMDU5MThaFw0yNTA2MDYxNzUyMThaMDMxMTAvBgNV BAMTKDI5NThBMUE5NTBFMjkxNjI5N0ZDNjhCNUY0QzY5MThEMEIxRTQzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDehsq3rFEwb+1Id9u4lnYMvLsA FXD9SPEYG6P2/RHAusBSFvSHk1e/lr5KAzXSzTgPL/XRBpQ0EbyLIuOIW/gdzyzy pF7FyDPmLzvzDZCizz5OZ+z+5Op3kji2UG9b9xkr+QFP54LEMJTgWS/D9KIQMRa1 WPd66BidaSMpMTRtpvgJt/mDM+Pwr38sVwCyCBwoYcgHdi0BTm/8Y/V4bGUauzEg 43gOfAW4eJJuWCZUPS6RHK+lKYqpx6Mmo5vz8ADItxfjMEPUUWgjIIb92f6Uzoot CJpd/+IgmXeBESeztX9pRWtoxFg49Zq6aYkffscEbOS1fCAfFNq4HXHz/hgzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKVihqVDikWKX/Gi19MaRjQseQ70wHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2 N2ItOWI4ODI1YjVjZDVmLzAvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0 OTdCMzZGM0FENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcIVIcJOAXewCYPjh/ogqIBIyL4lf1CPM2s ++Zwzlq/X++I9XZioeA6O0NIGdhYFdSOP/mHAXOkEYztqKT+uJJK9/29g7oD/Cs7 7JTixov3Me7VRRsOE7keWjUiNVgHhX8VzbWvcO0WAfC4WpqnZUZXBPy5GsYAyGJf mAt1bH2GxuqRGo2WLwd1Q+lUR1RZwoXkLHOyWytGAM58knEtsSBd48sk1eq9hJ6o 6YPWWoc0J498x9yx30g+cy/t2CyWWsvmlBkkbAX1Lx5BzWSHzVTtayHlP5D+9PTb qDyyNS7lRaRqoN0AdNUt3LTnYxRGF5Xj4NvCBHwNKM2RfzELUXI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:49:32 2025 by rpki-client