$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json) Hash identifier: xrgoqtlawCm/KQnnvp4R9sjI7OxHJjIWBw6t++K8evM= Subject key identifier: 2B:D0:69:9E:9E:92:D5:14:0E:06:B3:73:28:7B:AF:05:D8:63:0D:1A Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215 Certificate serial: 2A0DAC87D9EFFFF7A83A0A159BC7119C8122D292 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft Manifest number: 0238 Signing time: Fri 17 Apr 2026 03:01:13 +0000 Manifest this update: Fri 17 Apr 2026 02:56:13 +0000 Manifest next update: Mon 20 Apr 2026 05:58:13 +0000 Files and hashes: 1: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: GthTai4z0IeZmyd8/dR86r7ajI1x7TNWo1syo+yV3OY=) 2: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: NmvwQ+vJpzvl8csZBAxbb4I15urZPoz8PAj6HkV5eq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0d:ac:87:d9:ef:ff:f7:a8:3a:0a:15:9b:c7:11:9c:81:22:d2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E2707085C2950AF9267465A3801841D8077215 Validity Not Before: Apr 17 02:56:13 2026 GMT Not After : Apr 20 05:58:13 2026 GMT Subject: CN=2BD0699E9E92D5140E06B373287BAF05D8630D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:14:a2:49:0f:c2:93:fe:dd:f7:da:2f:a9: 61:ac:20:8b:4d:7a:5e:a4:e6:ae:e6:a8:e4:ca:34: 0b:ca:b6:dc:26:33:eb:b6:fc:b0:c8:03:68:cc:5f: ab:8f:b7:79:ed:38:83:aa:84:1d:0c:75:35:20:45: a7:dd:ed:95:65:ca:63:11:ca:0d:1d:12:5f:f2:94: 17:1e:b1:e6:f4:09:c9:d0:fe:2a:64:d1:eb:37:51: 33:51:bb:d1:4b:e5:bc:af:33:83:c9:ad:31:4a:02: ca:6c:c6:9d:b2:a2:3a:08:80:72:e1:cf:70:06:0d: 62:c3:db:8c:39:fa:5f:a2:ba:8b:1c:22:33:a5:d1: 41:85:40:4d:a9:cf:99:fb:9d:fd:ed:82:ac:20:30: e1:af:79:47:51:8c:cc:f9:71:7a:5e:7e:f8:80:f6: b3:e9:d0:05:8b:dc:dc:ae:9a:d8:c0:7e:65:dd:35: 1f:78:b9:b6:e2:4c:55:37:d3:fe:69:c0:3e:06:c7: 3f:1f:6b:d4:c0:bf:ca:dd:c6:24:cf:83:de:63:85: 23:32:ba:6f:ba:cf:66:48:51:59:b7:bf:6b:79:eb: 2f:83:98:78:65:2c:0a:a8:37:be:8f:e5:3a:f7:18: 46:a2:82:df:87:db:e9:4a:e7:de:e2:a6:eb:54:b3: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D0:69:9E:9E:92:D5:14:0E:06:B3:73:28:7B:AF:05:D8:63:0D:1A X509v3 Authority Key Identifier: keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:48:d3:30:1b:f0:a9:84:77:4b:3d:54:3f:8f:e4:e3:af:16: 0e:39:41:0f:de:f6:6e:57:7b:e6:a8:fd:db:ee:42:93:2e:b0: f6:02:fd:55:08:e5:91:9d:6f:a6:3c:b2:3c:5d:36:1e:73:ae: e5:d4:45:be:9f:69:96:d7:e8:ac:8b:55:a0:9d:b2:36:5c:fa: 05:ce:7f:ed:bf:cc:18:7d:f4:af:7a:f0:b0:8f:e2:33:cf:33: e0:1b:f9:81:c5:54:54:18:93:35:2b:1a:fe:03:0f:14:36:89: 37:74:0c:22:75:c4:cb:28:c8:d6:9d:f3:6f:a7:c8:e2:0d:da: cd:ae:ae:75:55:12:f0:2a:1e:7b:de:9e:d2:5b:90:a6:4f:1e: dc:8d:41:5d:af:16:2f:ef:aa:a1:20:b7:8b:6d:e0:c3:e5:8b: ef:b8:cd:f3:72:cd:7c:5c:ef:d1:5b:b4:94:a3:7b:0f:55:cc: 83:3b:36:5f:87:a8:2f:db:86:e4:6f:9c:9a:95:e7:50:99:e4: 60:cc:5b:87:41:42:53:6d:b8:23:19:a5:de:9d:7a:8b:6d:2f: 26:65:5c:a3:43:2a:90:49:59:8a:6d:0b:26:7a:b1:dc:0e:94: 91:cc:6d:6c:45:71:54:29:a9:1b:7c:c8:b0:c9:22:32:a6:17: 6f:02:a8:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKg2sh9nv//eoOgoVm8cRnIEi0pIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE ODA3NzIxNTAeFw0yNjA0MTcwMjU2MTNaFw0yNjA0MjAwNTU4MTNaMDMxMTAvBgNV BAMTKDJCRDA2OTlFOUU5MkQ1MTQwRTA2QjM3MzI4N0JBRjA1RDg2MzBEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67xSiSQ/Ck/7d99ovqWGsIItN el6k5q7mqOTKNAvKttwmM+u2/LDIA2jMX6uPt3ntOIOqhB0MdTUgRafd7ZVlymMR yg0dEl/ylBceseb0CcnQ/ipk0es3UTNRu9FL5byvM4PJrTFKAspsxp2yojoIgHLh z3AGDWLD24w5+l+iuoscIjOl0UGFQE2pz5n7nf3tgqwgMOGveUdRjMz5cXpefviA 9rPp0AWL3NyumtjAfmXdNR94ubbiTFU30/5pwD4Gxz8fa9TAv8rdxiTPg95jhSMy um+6z2ZIUVm3v2t56y+DmHhlLAqoN76P5Tr3GEaigt+H2+lK597iputUs5FDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK9Bpnp6S1RQOBrNzKHuvBdhjDRowHwYDVR0j BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1 QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3 NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4 NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALlI0zAb8KmEd0s9VD+P5OOvFg45QQ/e9m5X e+ao/dvuQpMusPYC/VUI5ZGdb6Y8sjxdNh5zruXURb6faZbX6KyLVaCdsjZc+gXO f+2/zBh99K968LCP4jPPM+Ab+YHFVFQYkzUrGv4DDxQ2iTd0DCJ1xMsoyNad82+n yOIN2s2urnVVEvAqHnventJbkKZPHtyNQV2vFi/vqqEgt4tt4MPli++4zfNyzXxc 79FbtJSjew9VzIM7Nl+HqC/bhuRvnJqV51CZ5GDMW4dBQlNtuCMZpd6deottLyZl XKNDKpBJWYptCyZ6sdwOlJHMbWxFcVQpqRt8yLDJIjKmF28CqBs= -----END CERTIFICATE-----Generated at Fri Apr 17 18:29:04 2026 by rpki-client