$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft File: 28612772543E43335B080C32808B7FDC277E71E4.mft (raw, json) Hash identifier: 2w3kbvJYtQmMqfTKJRSJKALOPteavosUmj3eEOYMjWs= Subject key identifier: B8:85:87:3A:C1:A8:66:9E:31:67:8E:68:C1:B3:74:CB:2A:0C:47:93 Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Certificate issuer: /CN=28612772543E43335B080C32808B7FDC277E71E4 Certificate serial: 0C32D0B9E8E2CE28A3193A42D3071BEC2E3775CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft Manifest number: 0114 Signing time: Wed 04 Jun 2025 21:51:07 +0000 Manifest this update: Wed 04 Jun 2025 21:46:07 +0000 Manifest next update: Sun 08 Jun 2025 07:24:07 +0000 Files and hashes: 1: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: z4BeSk+gRKk6M4z7F7+D4+oTS8E9IbV3rV7rrPGM6js=) 2: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: c3RjMW+CIXpYsyzS75W7NviafJ4jFuqxYaUgJgR1RjY=) 3: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: eZG8iudQFcgRUtHuXJAuzY7ooTKLq0KNHMVdg0w4Klc=) 4: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: nA9l/qEipVfIEIe1umepDag8NvfqeSfq9JSpO2D/fuI=) 5: 28612772543E43335B080C32808B7FDC277E71E4.crl (hash: jz0R6ApE/iQXvUDPzVJi88cDvE155kHpmT+vQ0h6qJE=) 6: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: rnpAKtCbX8txVuD150fh3r3wLM+En4ZSoI9OjRhxuAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:32:d0:b9:e8:e2:ce:28:a3:19:3a:42:d3:07:1b:ec:2e:37:75:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4 Validity Not Before: Jun 4 21:46:07 2025 GMT Not After : Jun 8 07:24:07 2025 GMT Subject: CN=B885873AC1A8669E31678E68C1B374CB2A0C4793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:9f:e6:46:5f:e6:9e:a0:5a:e3:6a:a3:06: e2:77:14:ab:de:3a:10:b1:c7:16:d4:d0:fe:13:07: 35:72:f9:12:3a:94:dd:55:a1:1b:23:24:47:40:96: c1:f0:16:58:fa:9b:cb:e9:cd:b1:20:3f:d7:f4:c2: 2a:9f:7f:68:b5:50:b8:b6:0b:8c:8c:1f:a1:46:f0: ab:f7:be:3c:20:18:4c:e7:c9:df:4f:08:e7:16:7e: 96:cb:ec:8c:09:3b:63:cf:26:6b:0d:57:00:09:29: 98:3a:22:c9:06:59:9e:93:87:5f:00:bb:aa:fd:87: 26:c8:92:31:77:71:4b:07:bb:71:d5:49:e2:e8:92: 67:d9:6a:65:9d:7b:2b:2a:fe:98:69:9f:cf:0a:02: 97:27:d8:54:60:62:eb:56:2f:90:f4:63:ae:bb:52: 9f:a4:63:fa:c2:86:15:b2:62:bb:46:52:ec:b4:97: 23:26:24:f6:47:3f:8f:53:0a:99:cc:64:97:f0:2a: 35:3b:33:00:13:25:60:b6:c4:87:d6:8d:67:eb:9e: 58:f7:76:63:fd:29:27:20:e1:2a:35:b2:6b:d6:01: 72:4a:e4:f3:a9:d5:75:a2:7b:9a:bc:0c:b6:ff:cd: 63:e7:e0:a8:0c:4a:43:45:9f:fe:bd:04:48:84:15: e6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:85:87:3A:C1:A8:66:9E:31:67:8E:68:C1:B3:74:CB:2A:0C:47:93 X509v3 Authority Key Identifier: keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b8:24:5f:92:b6:29:98:05:8a:42:02:44:d7:a6:e5:e4:d1: b1:54:d6:ed:45:b3:73:af:9d:9f:5f:70:22:82:cc:c2:28:bf: 55:1b:a3:4e:1b:84:dd:41:29:83:ef:84:33:76:b9:0d:f5:4c: 62:22:43:0d:c2:7f:7c:30:f2:76:2b:78:37:50:3f:a8:0a:b9: 81:47:d5:96:82:94:65:1b:ae:ef:b8:7b:4a:55:9d:07:2f:f7: 58:61:41:ac:7c:7d:8b:1a:51:25:b4:ae:5e:40:fc:5e:c7:fc: 10:8b:e2:c8:ec:ad:02:58:b1:fc:5d:ef:cd:06:8d:b0:52:11: a0:90:a2:5b:29:af:7c:fc:37:9e:9c:88:ca:9b:f7:5d:b3:65: 9c:ae:db:1b:62:14:03:84:d5:6f:83:57:48:7d:25:7f:6a:f0: 1f:10:12:a0:49:04:a0:04:5b:05:1a:07:00:f6:6e:b0:ac:ef: d2:ee:dc:44:fb:79:42:27:f5:4d:b4:63:6a:35:0a:26:e6:9b: 38:d8:33:bd:71:d6:95:cf:7b:7c:9a:78:eb:c6:8b:d5:15:b7: a1:61:80:38:15:f0:49:14:09:50:50:ef:23:e6:aa:64:9f:b7: 12:36:b1:f6:03:23:79:d7:d1:01:7e:8d:59:4f:52:5c:f8:a6: f9:6a:47:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDLQuejiziijGTpC0wcb7C43dcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMy NzdFNzFFNDAeFw0yNTA2MDQyMTQ2MDdaFw0yNTA2MDgwNzI0MDdaMDMxMTAvBgNV BAMTKEI4ODU4NzNBQzFBODY2OUUzMTY3OEU2OEMxQjM3NENCMkEwQzQ3OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aZ/mRl/mnqBa42qjBuJ3FKve OhCxxxbU0P4TBzVy+RI6lN1VoRsjJEdAlsHwFlj6m8vpzbEgP9f0wiqff2i1ULi2 C4yMH6FG8Kv3vjwgGEznyd9PCOcWfpbL7IwJO2PPJmsNVwAJKZg6IskGWZ6Th18A u6r9hybIkjF3cUsHu3HVSeLokmfZamWdeysq/phpn88KApcn2FRgYutWL5D0Y667 Up+kY/rChhWyYrtGUuy0lyMmJPZHP49TCpnMZJfwKjU7MwATJWC2xIfWjWfrnlj3 dmP9KScg4So1smvWAXJK5POp1XWie5q8DLb/zWPn4KgMSkNFn/69BEiEFebhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuIWHOsGoZp4xZ45owbN0yyoMR5MwHwYDVR0j BBgwFoAUKGEnclQ+QzNbCAwygIt/3Cd+ceQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8yODYxMjc3MjU0 M0U0MzMzNUIwODBDMzI4MDhCN0ZEQzI3N0U3MUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMyNzdF NzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdG REMyNzdFNzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB24JF+StimYBYpCAkTXpuXk0bFU1u1Fs3Ov nZ9fcCKCzMIov1Ubo04bhN1BKYPvhDN2uQ31TGIiQw3Cf3ww8nYreDdQP6gKuYFH 1ZaClGUbru+4e0pVnQcv91hhQax8fYsaUSW0rl5A/F7H/BCL4sjsrQJYsfxd780G jbBSEaCQolspr3z8N56ciMqb912zZZyu2xtiFAOE1W+DV0h9JX9q8B8QEqBJBKAE WwUaBwD2brCs79Lu3ET7eUIn9U20Y2o1CibmmzjYM71x1pXPe3yaeOvGi9UVt6Fh gDgV8EkUCVBQ7yPmqmSftxI2sfYDI3nX0QF+jVlPUlz4pvlqR+Q= -----END CERTIFICATE-----Generated at Thu Jun 5 18:34:26 2025 by rpki-client