$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft File: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json) Hash identifier: Dnylaa4vk+pmdmootGvZJsC0pelWbhuoXViUwLq+6Pw= Subject key identifier: 95:27:73:55:36:C1:72:2F:93:23:CD:0A:95:AC:4C:E0:74:68:F9:0D Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 121C0675202B0ACC7860F30D12EF3B3D44202919 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft Manifest number: 0260 Signing time: Wed 15 Apr 2026 17:12:21 +0000 Manifest this update: Wed 15 Apr 2026 17:07:21 +0000 Manifest next update: Sun 19 Apr 2026 02:59:21 +0000 Files and hashes: 1: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: jVoZEHRud6hZyeHJUgHODowg78I5affVmAkyft3/f0g=) 2: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: 79HlO+LSLY3tmhIbxY08KatYQ7yRtRdViTkMJQak98w=) 3: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: nfbRSnlG//ZRSW6EOv/DCvXGN1H1XD0xJADQSEpFd9M=) 4: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: mUWK0YKe3566Wh5cI0OkdARZoIJpWF4UZkK4KY+Au0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1c:06:75:20:2b:0a:cc:78:60:f3:0d:12:ef:3b:3d:44:20:29:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Apr 15 17:07:21 2026 GMT Not After : Apr 19 02:59:21 2026 GMT Subject: CN=9527735536C1722F9323CD0A95AC4CE07468F90D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:e4:0b:2d:0b:f0:9c:5e:e2:9e:2d:20:13: 2c:ce:41:7d:ff:64:64:90:1f:b4:ca:c9:bc:ea:de: 51:01:bd:c5:4a:af:f9:10:89:8d:e3:30:46:91:aa: 60:bb:da:9e:50:40:d1:9a:ff:6d:cd:72:22:37:19: 1c:1a:07:31:29:bc:b5:d5:3f:94:d1:6a:77:61:bc: b6:75:18:03:50:1c:14:c0:8a:74:7c:f6:b2:ea:a7: 5a:be:1b:6a:72:be:88:50:68:f4:25:a1:ae:5d:3d: fb:fc:10:98:53:c7:0a:86:0d:64:28:b1:c7:bf:56: b0:db:7b:70:e6:2f:6f:2a:cd:a4:8b:b4:94:ae:a1: 0d:60:3f:cc:87:06:9f:0a:51:b4:53:5f:6c:46:f6: a4:2f:99:32:aa:6a:e6:dc:92:17:1e:b8:c9:25:ad: b0:ea:66:f9:ed:4f:12:a7:d1:66:4d:b0:86:db:e0: 62:01:ad:f0:bc:b9:66:dd:d1:19:7d:ef:ac:2c:29: a6:c9:5d:0c:fd:47:23:5b:c6:60:b9:b2:79:6d:5b: 11:68:f1:b0:99:fa:99:3f:cc:e5:61:f5:14:e2:88: e7:74:7d:f5:33:67:a1:7d:a7:a1:99:d8:40:3f:4a: bc:75:e0:0a:be:8a:44:dd:4d:a5:5b:98:ef:b6:84: a5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:27:73:55:36:C1:72:2F:93:23:CD:0A:95:AC:4C:E0:74:68:F9:0D X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:8d:2a:b6:95:86:e9:5d:22:e1:ec:0b:62:6d:54:4a:03:bb: ab:2e:1b:76:0a:31:cb:ec:39:fc:59:fc:d7:30:51:18:fb:9f: e1:c2:9b:7c:c4:fe:96:ba:7f:fb:44:2e:5c:bd:aa:b0:51:23: 8c:fd:49:a9:d6:f7:e0:0a:07:55:a5:5f:10:2c:01:7d:5f:f3: 1c:03:e3:19:eb:7a:8f:c3:77:55:4a:89:05:f6:a3:27:d6:37: 61:dc:f9:87:4e:d3:4f:b5:2a:71:d8:94:de:a0:9c:2d:7d:0e: 13:94:f7:4f:7f:87:14:86:69:06:a0:ed:41:74:ab:9a:41:bd: 4f:7a:86:fa:27:a7:8d:04:50:3e:c5:74:20:ce:1f:d7:b2:95: 09:90:35:8d:ad:e8:af:f7:f3:28:53:dd:be:fe:12:8e:e3:4e: 92:9e:e8:c7:07:8c:77:e8:bf:e7:ec:fc:a4:55:7a:ad:1b:77: 1d:00:3c:40:30:ed:09:a8:fd:4e:06:77:72:44:b1:ca:4c:20: 27:d8:cf:58:76:52:e5:72:42:51:8f:f8:74:9b:32:c1:fc:64: 49:20:5e:b9:a2:f6:21:81:71:36:51:93:59:21:03:69:57:b7: 5b:16:ca:f6:92:e0:bb:a7:ae:6e:ab:c9:9a:8b:bc:63:80:d9: 3a:8d:53:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEhwGdSArCsx4YPMNEu87PUQgKRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNjA0MTUxNzA3MjFaFw0yNjA0MTkwMjU5MjFaMDMxMTAvBgNV BAMTKDk1Mjc3MzU1MzZDMTcyMkY5MzIzQ0QwQTk1QUM0Q0UwNzQ2OEY5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMo+QLLQvwnF7ini0gEyzOQX3/ ZGSQH7TKybzq3lEBvcVKr/kQiY3jMEaRqmC72p5QQNGa/23NciI3GRwaBzEpvLXV P5TRandhvLZ1GANQHBTAinR89rLqp1q+G2pyvohQaPQloa5dPfv8EJhTxwqGDWQo sce/VrDbe3DmL28qzaSLtJSuoQ1gP8yHBp8KUbRTX2xG9qQvmTKqaubckhceuMkl rbDqZvntTxKn0WZNsIbb4GIBrfC8uWbd0Rl976wsKabJXQz9RyNbxmC5snltWxFo 8bCZ+pk/zOVh9RTiiOd0ffUzZ6F9p6GZ2EA/Srx14Aq+ikTdTaVbmO+2hKVZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlSdzVTbBci+TI80KlaxM4HRo+Q0wHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNF NTA0MzFGMEY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaNKraVhuldIuHsC2JtVEoDu6suG3YKMcvs OfxZ/NcwURj7n+HCm3zE/pa6f/tELly9qrBRI4z9SanW9+AKB1WlXxAsAX1f8xwD 4xnreo/Dd1VKiQX2oyfWN2Hc+YdO00+1KnHYlN6gnC19DhOU909/hxSGaQag7UF0 q5pBvU96hvonp40EUD7FdCDOH9eylQmQNY2t6K/38yhT3b7+Eo7jTpKe6McHjHfo v+fs/KRVeq0bdx0APEAw7Qmo/U4Gd3JEscpMICfYz1h2UuVyQlGP+HSbMsH8ZEkg Xrmi9iGBcTZRk1khA2lXt1sWyvaS4Lunrm6ryZqLvGOA2TqNU98= -----END CERTIFICATE-----Generated at Fri Apr 17 19:21:05 2026 by rpki-client