
$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json)
Hash identifier: 7oSeLgRNajmXQ0I7uZyLDNsUnMMXu4q0vPo/7d2BF84=
Subject key identifier: 68:A5:18:F0:7A:B5:3E:8E:E2:7D:FB:09:F7:04:54:A3:37:94:57:FB
Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15
Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215
Certificate serial: 08CFE357974F1A57B993228BB48FAF80FC8BB90A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
Manifest number: 0223
Signing time: Sat 28 Feb 2026 20:31:10 +0000
Manifest this update: Sat 28 Feb 2026 20:26:10 +0000
Manifest next update: Tue 03 Mar 2026 22:46:10 +0000
Files and hashes: 1: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: NmvwQ+vJpzvl8csZBAxbb4I15urZPoz8PAj6HkV5eq8=)
2: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: V2i40azcgFmkBu7Cde0Y3YygkoeLetM6IsM3EboJEWs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl
rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 22:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:cf:e3:57:97:4f:1a:57:b9:93:22:8b:b4:8f:af:80:fc:8b:b9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28E2707085C2950AF9267465A3801841D8077215
Validity
Not Before: Feb 28 20:26:10 2026 GMT
Not After : Mar 3 22:46:10 2026 GMT
Subject: CN=68A518F07AB53E8EE27DFB09F70454A3379457FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:82:2e:a7:8f:10:b4:76:4b:0d:b7:73:bf:
97:2c:0a:c1:ec:98:82:38:54:ab:51:3c:12:b8:74:
e5:16:fd:0e:2e:6b:15:74:48:32:f3:77:f8:ea:ac:
8c:2a:9d:f7:16:57:70:27:59:62:32:c4:cc:ae:fa:
d6:d5:8b:01:8e:f7:33:5f:ce:35:d3:86:c8:5c:f3:
53:27:2d:5e:96:c6:8c:76:a6:9b:57:29:5a:11:88:
40:bd:f7:48:10:60:8d:4a:ff:6b:d7:e2:c5:8c:d9:
85:24:4f:97:29:3f:90:74:57:d1:c1:1e:21:72:d7:
f7:a1:87:a9:bb:5d:80:bd:28:e5:a4:75:12:d6:1b:
9f:6a:5a:79:3d:5d:72:58:0a:f7:15:90:07:8b:83:
51:fd:06:69:a2:1e:99:44:6e:08:0c:99:22:ac:2a:
e2:1a:aa:2d:f2:0c:71:2a:44:bc:32:4d:59:04:d9:
c5:35:de:c4:51:1e:ff:14:e1:76:30:01:6a:fc:d8:
87:e9:d0:93:19:d7:28:c8:3d:94:98:e9:45:3e:8c:
09:43:fd:8d:40:81:17:04:5b:27:f1:d8:41:17:e3:
e9:3a:d9:c6:02:26:de:f7:d0:5e:54:96:fd:12:f0:
bb:0f:03:24:39:4d:9e:25:11:f1:fe:f9:10:5a:b0:
5e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A5:18:F0:7A:B5:3E:8E:E2:7D:FB:09:F7:04:54:A3:37:94:57:FB
X509v3 Authority Key Identifier:
keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:31:4a:6b:1e:31:53:5d:58:ba:d3:57:25:52:9f:66:18:22:
27:93:df:be:f3:e6:9d:66:db:43:7e:4a:cf:9e:03:bd:df:b2:
18:5b:ea:10:3c:eb:a8:bf:d2:83:ba:fc:5b:22:45:2d:ef:38:
57:ab:11:0d:4c:6b:3b:9e:44:63:6b:b2:3b:13:d4:25:2c:97:
33:03:77:2b:c7:95:1e:88:1e:18:6e:44:d8:f6:5a:e6:c3:1c:
81:e2:06:b1:4c:f0:e8:97:ef:96:e2:69:11:b0:a2:b7:85:f8:
da:eb:06:c4:c1:1d:40:51:c0:1f:12:a6:f2:9c:fa:9f:ba:a0:
cd:f7:b0:71:72:f5:fb:7c:95:bc:3b:07:06:08:d7:db:9b:1c:
d1:0d:57:0a:44:23:b3:ff:20:02:f3:76:71:56:1b:80:6c:19:
0e:4e:13:b1:a4:04:60:f6:89:99:e4:8e:e0:1d:a6:38:95:35:
74:db:75:d7:14:18:9b:03:86:83:83:7f:26:4e:83:31:e6:23:
53:a9:91:a4:8b:e5:c0:4f:2a:08:67:e7:16:d4:05:7f:c1:5f:
b1:25:68:50:d1:10:ed:d2:c6:80:c5:c0:5a:02:38:ca:83:3a:
f9:38:d5:1e:32:56:df:41:c8:86:a3:98:1b:e3:83:af:66:ca:
de:5a:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:23 2026 by rpki-client