$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft File: 28341CFDB2B23F14923DA4A736C08A8C17C00046.mft (raw, json) Hash identifier: v7KtSq7gsZ7tdy8c4eIIc6EvlL+cajYFNMM7IivG1/k= Subject key identifier: D7:7C:0D:EB:A4:1B:88:04:AD:1F:F9:06:91:EF:8A:85:5E:27:4A:38 Authority key identifier: 28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 Certificate issuer: /CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Certificate serial: 3AB5E112B86E03120F956C9B3DBAEDA201699965 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft Manifest number: 09 Signing time: Sat 18 Oct 2025 20:11:09 +0000 Manifest this update: Sat 18 Oct 2025 20:06:09 +0000 Manifest next update: Wed 22 Oct 2025 05:56:09 +0000 Files and hashes: 1: 28341CFDB2B23F14923DA4A736C08A8C17C00046.crl (hash: L7jBgKJeedXDu7FSDou85xdme2IwFklQIehDDpN27+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b5:e1:12:b8:6e:03:12:0f:95:6c:9b:3d:ba:ed:a2:01:69:99:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Validity Not Before: Oct 18 20:06:09 2025 GMT Not After : Oct 22 05:56:09 2025 GMT Subject: CN=D77C0DEBA41B8804AD1FF90691EF8A855E274A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:05:d1:19:d1:ff:81:31:ea:b6:a9:85:6d: 1d:8a:e4:26:3d:75:da:2b:b7:69:a0:df:52:a2:76: 53:68:ef:95:90:6d:12:bc:6d:b7:2b:8c:bc:1d:42: 44:ec:2e:8a:57:29:f0:97:1e:77:9b:df:2f:65:06: 22:18:39:2a:14:c1:53:f4:86:31:3d:a3:b0:d8:1f: 47:c8:2f:a8:2c:08:02:25:c3:f7:b7:b8:cc:6d:d8: 48:28:ee:81:78:d0:08:98:c7:3a:88:24:68:1f:c2: 8f:12:5b:1b:cb:14:3e:74:8e:52:48:b1:7e:b8:31: a0:b8:4f:72:d0:e5:96:27:57:51:a0:46:cb:0f:6f: 25:81:7e:aa:b7:b7:18:0e:e5:af:c7:e3:9e:b9:f6: cd:1f:7d:4e:a7:9b:36:05:6d:c5:6e:91:a6:74:78: a0:20:0c:08:9f:f4:2e:7f:87:32:a0:d6:0b:f5:2e: 82:28:dc:1f:37:5b:d4:e5:f7:c1:ad:05:29:80:06: 95:fd:5c:dc:1d:4f:a0:ca:22:c3:86:37:d3:d8:34: 21:73:ac:5f:91:80:b2:47:7b:ab:e9:3f:a0:da:05: 28:57:7c:3f:93:0c:65:f6:b3:44:03:cd:ce:9d:90: 19:6c:57:e2:e0:c5:92:06:78:ad:a1:94:4c:1b:da: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7C:0D:EB:A4:1B:88:04:AD:1F:F9:06:91:EF:8A:85:5E:27:4A:38 X509v3 Authority Key Identifier: keyid:28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ba:76:4e:3f:d6:d8:c9:d3:58:ec:f7:fd:00:1c:9b:8e:b9: d7:1e:0a:51:7c:6f:3a:c6:20:f1:e6:2a:8a:10:8c:f1:a4:ee: 3e:20:cc:32:e9:37:06:63:28:43:fc:10:27:bc:66:a8:fe:82: fd:ec:a5:ce:e1:1a:c0:cd:38:43:db:f2:3d:d6:6b:ca:eb:5c: b5:56:8e:ff:ad:07:b0:b7:1e:e6:29:22:88:10:07:71:3a:0b: 71:b5:1f:b6:bc:8e:e1:e1:0a:11:64:88:78:04:8b:d2:7a:0b: cb:c3:40:cb:c0:86:f8:07:8a:3e:96:07:cc:0b:b4:99:0b:25: dd:2c:93:56:6d:b8:f9:f4:ff:0e:c8:27:45:dc:e2:41:cd:8a: 7e:49:e3:69:5c:6c:c5:a0:dd:ba:7d:fa:90:5d:0d:03:7e:aa: 86:d8:0c:e7:dc:c6:2b:2f:52:54:cf:0c:9e:e4:ba:80:54:a8: fe:18:82:7e:28:cf:db:81:e1:61:7c:e3:5a:22:25:b9:fb:75: 3e:12:01:f2:5f:85:0e:6c:c9:4e:a8:77:43:88:69:fa:db:f4: bd:8b:55:c7:bf:bb:f2:69:4b:7d:40:7e:f6:25:62:45:1c:43: 48:7e:8f:6c:4c:7e:01:fd:73:57:4b:3b:32:85:cd:bc:ab:93: 6f:dc:a7:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrXhErhuAxIPlWybPbrtogFpmWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMx N0MwMDA0NjAeFw0yNTEwMTgyMDA2MDlaFw0yNTEwMjIwNTU2MDlaMDMxMTAvBgNV BAMTKEQ3N0MwREVCQTQxQjg4MDRBRDFGRjkwNjkxRUY4QTg1NUUyNzRBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx8gXRGdH/gTHqtqmFbR2K5CY9 ddort2mg31KidlNo75WQbRK8bbcrjLwdQkTsLopXKfCXHneb3y9lBiIYOSoUwVP0 hjE9o7DYH0fIL6gsCAIlw/e3uMxt2Ego7oF40AiYxzqIJGgfwo8SWxvLFD50jlJI sX64MaC4T3LQ5ZYnV1GgRssPbyWBfqq3txgO5a/H45659s0ffU6nmzYFbcVukaZ0 eKAgDAif9C5/hzKg1gv1LoIo3B83W9Tl98GtBSmABpX9XNwdT6DKIsOGN9PYNCFz rF+RgLJHe6vpP6DaBShXfD+TDGX2s0QDzc6dkBlsV+LgxZIGeK2hlEwb2oWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU13wN66QbiAStH/kGke+KhV4nSjgwHwYDVR0j BBgwFoAUKDQc/bKyPxSSPaSnNsCKjBfAAEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMC8yODM0MUNGREIy QjIzRjE0OTIzREE0QTczNkMwOEE4QzE3QzAwMDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMxN0Mw MDA0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhB OEMxN0MwMDA0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+6dk4/1tjJ01js9/0AHJuOudceClF8bzrG IPHmKooQjPGk7j4gzDLpNwZjKEP8ECe8Zqj+gv3spc7hGsDNOEPb8j3Wa8rrXLVW jv+tB7C3HuYpIogQB3E6C3G1H7a8juHhChFkiHgEi9J6C8vDQMvAhvgHij6WB8wL tJkLJd0sk1ZtuPn0/w7IJ0Xc4kHNin5J42lcbMWg3bp9+pBdDQN+qobYDOfcxisv UlTPDJ7kuoBUqP4Ygn4oz9uB4WF841oiJbn7dT4SAfJfhQ5syU6od0OIafrb9L2L Vce/u/JpS31AfvYlYkUcQ0h+j2xMfgH9c1dLOzKFzbyrk2/cpw8= -----END CERTIFICATE-----Generated at Sun Oct 19 17:23:18 2025 by rpki-client