$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft File: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json) Hash identifier: VfxM/UifSSlF61zdjQtckY4dbYguRu4fX5w+TzDtyko= Subject key identifier: 5E:50:CC:2C:23:0E:B5:E7:50:86:03:C7:75:C1:CB:FB:38:70:D6:1E Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 0A32039AFF3F6D6BED2A786BDB4E862596E3CB0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft Manifest number: 01E1 Signing time: Wed 06 Aug 2025 10:12:08 +0000 Manifest this update: Wed 06 Aug 2025 10:07:08 +0000 Manifest next update: Sat 09 Aug 2025 12:20:08 +0000 Files and hashes: 1: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: vuZSpBYLeRdf/QzqYm2ClaQzrtZzeDnIQhcWVziN94I=) 2: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: BvB+dwr9bBtzkRyMA8bTepBQEZZlKW8nu8VJsNMkUH8=) 3: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: t4B/eq8AOh4JIkCzcOT+SpN0WxnYYYPczNkJfx4V+XI=) 4: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: xne0Cq1LXYrb0/DpeRsrFAeGbUysSbEdSSRG1O8ZrMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 12:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:32:03:9a:ff:3f:6d:6b:ed:2a:78:6b:db:4e:86:25:96:e3:cb:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Aug 6 10:07:08 2025 GMT Not After : Aug 9 12:20:08 2025 GMT Subject: CN=5E50CC2C230EB5E7508603C775C1CBFB3870D61E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:18:86:ff:e9:eb:bf:69:a0:60:ad:45:5a: b9:33:37:95:55:73:46:e3:85:b4:e1:e2:a5:49:a1: d5:e7:6b:32:8c:ad:5f:38:6d:2b:a2:f5:c4:ea:15: 21:a5:48:22:92:54:6c:c5:af:7e:2c:30:92:c7:7b: 28:2d:9b:c0:6d:02:f3:25:c9:46:01:c8:a1:17:7c: 13:cc:49:d9:30:b1:bd:6f:5e:50:d7:8c:e7:a9:8e: c2:88:52:54:03:93:67:5c:76:c2:00:b8:f3:bc:e3: 5d:fc:45:2f:0c:10:fe:f3:ba:4e:22:bf:12:91:59: 3e:11:e0:6b:94:ab:60:36:fa:89:1a:cd:cf:5f:f8: 00:35:5a:50:b6:00:21:21:10:1d:f7:ac:72:99:6f: 27:a8:4b:ca:f9:8f:fa:eb:11:37:ac:dc:ff:3f:64: ad:58:93:80:0d:6f:e0:47:8e:95:09:64:a3:87:1c: fb:a5:52:2a:f7:d3:bd:74:8e:5d:bb:31:b1:5c:c8: dc:02:ef:6f:dd:e1:74:a5:28:af:42:d2:02:54:70: a1:71:eb:77:ff:9a:39:57:5c:32:8b:90:2d:c6:e2: a8:33:4e:30:6b:07:38:72:4d:00:cb:ee:a2:e1:3f: c8:46:26:f8:d5:d7:58:8b:2d:2b:b7:9f:b5:e7:94: 60:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:50:CC:2C:23:0E:B5:E7:50:86:03:C7:75:C1:CB:FB:38:70:D6:1E X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:4a:f3:8c:39:1d:07:3a:45:e6:ca:ed:e1:d5:dd:10:a1:47: c5:d7:c6:58:ee:01:56:5e:b3:04:bd:aa:60:8c:5c:5b:56:af: 8e:fd:c1:a6:78:28:bf:d3:a4:99:5e:98:2f:1f:12:57:2f:4f: 96:c1:13:65:91:41:ae:f3:5f:e9:81:31:9d:e7:8f:37:1f:6d: 0c:61:c4:98:e2:3d:75:c8:6b:56:78:36:11:9d:42:be:74:b2: 1d:f5:a2:18:d9:2c:4c:97:b4:01:6a:ae:8f:c3:8c:0b:44:10: 88:36:f9:14:2b:ef:f0:eb:dd:27:5f:d6:42:b8:3c:48:be:80: b3:b8:5f:55:f2:e2:57:87:0f:d7:a3:8f:b3:2d:8e:64:b5:9c: 05:23:a3:3d:a7:d4:01:cf:65:bf:0d:cc:c7:54:a0:d0:b6:95: 10:bf:36:c4:e9:ba:40:a0:f0:18:bd:bb:de:41:2e:ea:cd:ec: e4:c1:0f:0a:25:d9:a6:06:4f:6c:e9:01:4b:73:10:0e:43:39: a6:2f:dc:b3:49:dd:9d:c4:9d:b6:f6:7f:2b:00:8e:c3:2c:44: a1:1b:d9:0f:c3:2c:ff:68:9b:10:be:db:6e:29:5b:11:cb:85: 97:0e:1d:58:f7:1c:0d:80:a0:c8:88:f6:99:62:1e:76:40:53: 3e:80:2d:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCjIDmv8/bWvtKnhr206GJZbjywswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNTA4MDYxMDA3MDhaFw0yNTA4MDkxMjIwMDhaMDMxMTAvBgNV BAMTKDVFNTBDQzJDMjMwRUI1RTc1MDg2MDNDNzc1QzFDQkZCMzg3MEQ2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgRiG/+nrv2mgYK1FWrkzN5VV c0bjhbTh4qVJodXnazKMrV84bSui9cTqFSGlSCKSVGzFr34sMJLHeygtm8BtAvMl yUYByKEXfBPMSdkwsb1vXlDXjOepjsKIUlQDk2dcdsIAuPO84138RS8MEP7zuk4i vxKRWT4R4GuUq2A2+okazc9f+AA1WlC2ACEhEB33rHKZbyeoS8r5j/rrETes3P8/ ZK1Yk4ANb+BHjpUJZKOHHPulUir30710jl27MbFcyNwC72/d4XSlKK9C0gJUcKFx 63f/mjlXXDKLkC3G4qgzTjBrBzhyTQDL7qLhP8hGJvjV11iLLSu3n7XnlGDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXlDMLCMOtedQhgPHdcHL+zhw1h4wHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNF NTA0MzFGMEY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJK84w5HQc6RebK7eHV3RChR8XXxljuAVZe swS9qmCMXFtWr479waZ4KL/TpJlemC8fElcvT5bBE2WRQa7zX+mBMZ3njzcfbQxh xJjiPXXIa1Z4NhGdQr50sh31ohjZLEyXtAFqro/DjAtEEIg2+RQr7/Dr3Sdf1kK4 PEi+gLO4X1Xy4leHD9ejj7MtjmS1nAUjoz2n1AHPZb8NzMdUoNC2lRC/NsTpukCg 8Bi9u95BLurN7OTBDwol2aYGT2zpAUtzEA5DOaYv3LNJ3Z3Enbb2fysAjsMsRKEb 2Q/DLP9omxC+224pWxHLhZcOHVj3HA2AoMiI9pliHnZAUz6ALTI= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:33 2025 by rpki-client