$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft File: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft (raw, json) Hash identifier: w1qKqtpmfbIvP7tFtkJYnySCQIfUWV9eep8ou77jFEw= Subject key identifier: CA:96:74:5B:27:82:47:01:6A:51:CC:B8:DE:EB:6F:D1:0D:61:EC:73 Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 083EDB5ADEB7100DE3726E3F3864C5012A1D023E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft Manifest number: FA Signing time: Mon 28 Apr 2025 17:22:05 +0000 Manifest this update: Mon 28 Apr 2025 17:17:05 +0000 Manifest next update: Fri 02 May 2025 04:12:05 +0000 Files and hashes: 1: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: zEnS7MUIR/K5UV+N9UMD9HrZThlFZltdIGvWRa0yVIA=) 2: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl (hash: 9/3mDDSLHolhodz9K2kEbgeq64Xstp4aBYhtHfmjzNc=) 3: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: OdSsxC/IcH64+HH1xsnqnpx/lq2eSJJ+N7LMBhOTgSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3e:db:5a:de:b7:10:0d:e3:72:6e:3f:38:64:c5:01:2a:1d:02:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Apr 28 17:17:05 2025 GMT Not After : May 2 04:12:05 2025 GMT Subject: CN=CA96745B278247016A51CCB8DEEB6FD10D61EC73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:de:c9:95:d9:98:d4:69:be:d2:df:05:71: 56:6c:0f:2b:dc:10:6c:75:fd:28:a1:16:79:ff:e1: fc:bf:0f:c0:e4:69:13:8a:89:c8:b7:f7:91:4a:e6: ec:37:74:63:34:41:26:94:78:d1:55:b8:ea:27:57: ed:51:63:4f:6f:d9:fe:2b:1f:ce:62:6e:b7:fc:9c: 11:8a:a7:34:e1:93:69:ba:44:25:47:2c:26:64:7a: 04:4d:9b:98:aa:b6:16:40:60:9e:21:16:9d:41:a2: c6:24:c6:17:cd:87:dd:46:02:0c:a2:de:f9:8e:3f: 4e:2d:cd:ed:34:1e:ea:e6:40:65:ea:91:fa:f8:03: 4b:5c:76:06:67:76:9d:50:7b:19:5c:82:31:c3:4f: 3a:8e:32:23:27:a9:3a:f3:98:bf:c7:3b:08:5b:fe: 26:e4:dd:22:10:e4:ac:09:0b:ed:fd:98:65:04:9e: de:65:53:3e:e7:60:c0:b4:bd:2a:b8:36:9b:b6:33: 4b:23:9d:ca:d5:d3:2e:4f:a1:ab:31:43:53:ab:17: 61:fd:90:8b:d3:fe:ef:5f:b2:7b:15:cf:bc:e9:e6: a1:37:0a:70:65:32:ea:80:01:ce:bc:35:b3:34:f2: e8:b0:fc:7e:42:dc:d4:e0:8c:b7:ca:d4:ae:67:29: 58:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:96:74:5B:27:82:47:01:6A:51:CC:B8:DE:EB:6F:D1:0D:61:EC:73 X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cd:76:ab:8b:93:fd:bf:f8:e8:6f:5a:d2:53:c3:e2:49:be: 45:ef:76:ad:63:d7:bb:e4:95:07:50:28:fa:b0:e5:ca:c2:14: e7:fb:bd:64:41:4c:86:7c:8d:25:5f:c5:00:e4:06:ea:ab:f6: c9:31:f8:a7:19:5c:1f:38:a4:2b:60:ca:ca:fc:1b:49:d8:e0: 72:70:b4:4d:bd:0b:67:bb:03:c5:16:d7:2f:4b:4f:b5:ca:40: a1:c1:a9:d5:f8:a5:cc:ce:3c:be:0a:95:fc:80:f3:15:c5:d2: 62:0e:db:2e:89:bc:8b:5a:e9:9e:9f:b0:7c:71:42:91:cb:b1: f5:08:e5:76:d7:67:7e:b9:02:55:d4:82:e6:85:9a:21:bc:a9: 41:5c:28:14:b5:7c:77:9a:dc:3d:b0:0b:88:08:af:82:5a:30: a9:55:14:e7:5e:cb:87:78:59:79:cb:ef:24:4c:f0:1c:14:0c: fd:5f:61:03:90:d6:c1:a4:10:06:bd:30:9a:1c:6a:cf:e1:97: 88:d8:b9:d6:39:9f:9a:15:eb:4b:65:08:56:05:ff:2e:1f:aa: 61:9b:ed:6c:e7:d1:0b:c8:83:f6:b8:20:4f:84:60:ab:ca:20: 1d:c0:d8:48:57:73:d4:bb:cd:6c:c1:bc:57:1d:fe:e0:30:cd: 4f:5b:08:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCD7bWt63EA3jcm4/OGTFASodAj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNTA0MjgxNzE3MDVaFw0yNTA1MDIwNDEyMDVaMDMxMTAvBgNV BAMTKENBOTY3NDVCMjc4MjQ3MDE2QTUxQ0NCOERFRUI2RkQxMEQ2MUVDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLt7JldmY1Gm+0t8FcVZsDyvc EGx1/SihFnn/4fy/D8DkaROKici395FK5uw3dGM0QSaUeNFVuOonV+1RY09v2f4r H85ibrf8nBGKpzThk2m6RCVHLCZkegRNm5iqthZAYJ4hFp1BosYkxhfNh91GAgyi 3vmOP04tze00HurmQGXqkfr4A0tcdgZndp1QexlcgjHDTzqOMiMnqTrzmL/HOwhb /ibk3SIQ5KwJC+39mGUEnt5lUz7nYMC0vSq4Npu2M0sjncrV0y5PoasxQ1OrF2H9 kIvT/u9fsnsVz7zp5qE3CnBlMuqAAc68NbM08uiw/H5C3NTgjLfK1K5nKVg9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUypZ0WyeCRwFqUcy43utv0Q1h7HMwHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2 N2ItOWI4ODI1YjVjZDVmLzAvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0 OTdCMzZGM0FENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrNdquLk/2/+OhvWtJTw+JJvkXvdq1j17vk lQdQKPqw5crCFOf7vWRBTIZ8jSVfxQDkBuqr9skx+KcZXB84pCtgysr8G0nY4HJw tE29C2e7A8UW1y9LT7XKQKHBqdX4pczOPL4KlfyA8xXF0mIO2y6JvIta6Z6fsHxx QpHLsfUI5XbXZ365AlXUguaFmiG8qUFcKBS1fHea3D2wC4gIr4JaMKlVFOdey4d4 WXnL7yRM8BwUDP1fYQOQ1sGkEAa9MJocas/hl4jYudY5n5oV60tlCFYF/y4fqmGb 7Wzn0QvIg/a4IE+EYKvKIB3A2EhXc9S7zWzBvFcd/uAwzU9bCOA= -----END CERTIFICATE-----Generated at Wed Apr 30 07:37:37 2025 by rpki-client