$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft File: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft (raw, json) Hash identifier: XkBTkCLdxCsZg3TFSnyxeMX6xeE0Ij1wlaokJ+VfPuo= Subject key identifier: 6B:7A:29:21:4F:3F:D4:48:A0:35:44:C4:3D:D2:5C:2E:2B:06:6C:6B Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 758D04CAD07CA6E6F916F6F23BE596A6DE66E70D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft Manifest number: 0184 Signing time: Sat 28 Feb 2026 07:52:20 +0000 Manifest this update: Sat 28 Feb 2026 07:47:20 +0000 Manifest next update: Tue 03 Mar 2026 18:55:20 +0000 Files and hashes: 1: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl (hash: Nvkk8cNhoF2++gBGZ/bm137p7BYNjzaHrbhO1PvVFXQ=) 2: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: enORB7AQ2Y+42S5HE1FDggaW6vwKU8hKfiqSx3+Dqyk=) 3: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: 85LtLYBqpIRzrudxo0roKqEopeTA2E0uMpmApFi6Dq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8d:04:ca:d0:7c:a6:e6:f9:16:f6:f2:3b:e5:96:a6:de:66:e7:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Feb 28 07:47:20 2026 GMT Not After : Mar 3 18:55:20 2026 GMT Subject: CN=6B7A29214F3FD448A03544C43DD25C2E2B066C6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:22:6b:d5:b6:d4:7e:7d:17:89:1c:91:cf: 34:b1:f9:75:0c:26:3f:3b:4e:8c:7c:d4:9f:2b:05: 3b:8b:4e:b8:ac:62:69:7f:ce:6e:ae:66:62:46:79: 61:12:5e:68:ca:87:e1:76:c6:70:fb:ea:a3:67:7d: 15:17:43:b3:f9:65:d3:f4:ce:93:89:56:f1:56:4e: 0d:11:33:f0:52:d4:41:15:b4:16:93:35:b0:46:4a: 54:fd:e5:e3:40:ef:9c:2d:fb:b2:76:22:e5:cc:ad: 6c:e8:6e:b1:85:50:12:b7:52:37:52:46:c3:a6:d3: d3:4d:45:0c:64:aa:a1:f8:95:be:ca:b8:01:ad:4f: aa:ba:96:82:71:94:11:6b:ae:41:ee:78:cd:60:46: b1:08:cd:a0:f8:de:28:11:0d:f7:9c:b6:66:cb:2b: 66:18:7f:7c:cc:72:64:99:d6:1f:c4:9c:4d:14:c0: 5f:c5:6a:0b:1a:55:7c:94:85:02:8a:40:d3:3f:1f: d9:c3:3d:5f:e1:98:93:e6:ca:6a:49:d8:a6:64:ba: 43:e4:72:34:3e:fa:99:1d:ef:64:31:70:a5:32:34: 30:e8:22:83:34:4c:c0:de:6c:22:72:23:43:b2:fa: 58:d5:c1:99:d6:80:3b:ae:c0:84:07:ec:dd:80:e7: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7A:29:21:4F:3F:D4:48:A0:35:44:C4:3D:D2:5C:2E:2B:06:6C:6B X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f1:a4:7b:f6:0d:17:e8:6a:66:c4:a3:63:d7:ea:38:35:e8: 04:09:68:25:34:f9:04:06:0d:77:7a:83:58:fd:a7:74:5f:29: 84:f3:1b:8f:e0:96:b7:17:cc:ab:d1:18:94:50:d7:1c:8d:21: ed:f3:c5:fe:b6:f3:a9:a8:38:aa:1f:5d:7f:ae:88:ca:70:a6: 38:82:cf:23:71:45:fe:70:89:a9:00:f0:0a:df:c0:ac:af:2e: ae:22:9a:aa:3b:c2:60:d8:a5:8f:52:19:81:0f:43:04:a8:ac: 9b:06:57:15:2e:52:4a:f5:b4:4a:3c:8c:51:ec:da:e8:a2:a6: 22:3f:5e:bb:3e:c6:91:6c:9c:49:0a:6f:85:a9:1f:19:38:ab: a6:ae:48:66:0e:00:22:7d:b3:a7:56:d5:9d:66:ff:2f:90:6b: 33:cf:f0:e8:b8:27:b3:5d:4c:b7:67:5f:fd:40:3f:66:1e:23: e8:d2:1f:b3:c6:a2:42:95:81:b1:35:ce:4a:6f:29:6a:5c:f6: 41:07:01:af:58:47:49:20:dd:c0:16:fe:be:e5:44:df:9d:c1: 24:a2:bc:94:4d:b8:71:9d:64:98:2d:10:cc:de:c8:d3:d9:a0: fd:98:a8:7a:54:e0:4d:35:22:7e:a9:aa:30:87:d1:f9:cf:0f: 27:da:a6:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdY0EytB8pub5FvbyO+WWpt5m5w0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNjAyMjgwNzQ3MjBaFw0yNjAzMDMxODU1MjBaMDMxMTAvBgNV BAMTKDZCN0EyOTIxNEYzRkQ0NDhBMDM1NDRDNDNERDI1QzJFMkIwNjZDNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwAyJr1bbUfn0XiRyRzzSx+XUM Jj87Tox81J8rBTuLTrisYml/zm6uZmJGeWESXmjKh+F2xnD76qNnfRUXQ7P5ZdP0 zpOJVvFWTg0RM/BS1EEVtBaTNbBGSlT95eNA75wt+7J2IuXMrWzobrGFUBK3UjdS RsOm09NNRQxkqqH4lb7KuAGtT6q6loJxlBFrrkHueM1gRrEIzaD43igRDfectmbL K2YYf3zMcmSZ1h/EnE0UwF/FagsaVXyUhQKKQNM/H9nDPV/hmJPmympJ2KZkukPk cjQ++pkd72QxcKUyNDDoIoM0TMDebCJyI0Oy+ljVwZnWgDuuwIQH7N2A59hbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa3opIU8/1EigNUTEPdJcLisGbGswHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2 N2ItOWI4ODI1YjVjZDVmLzAvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0 OTdCMzZGM0FENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXxpHv2DRfoambEo2PX6jg16AQJaCU0+QQG DXd6g1j9p3RfKYTzG4/glrcXzKvRGJRQ1xyNIe3zxf6286moOKofXX+uiMpwpjiC zyNxRf5wiakA8ArfwKyvLq4imqo7wmDYpY9SGYEPQwSorJsGVxUuUkr1tEo8jFHs 2uiipiI/Xrs+xpFsnEkKb4WpHxk4q6auSGYOACJ9s6dW1Z1m/y+QazPP8Oi4J7Nd TLdnX/1AP2YeI+jSH7PGokKVgbE1zkpvKWpc9kEHAa9YR0kg3cAW/r7lRN+dwSSi vJRNuHGdZJgtEMzeyNPZoP2YqHpU4E01In6pqjCH0fnPDyfapuY= -----END CERTIFICATE-----Generated at Mon Mar 2 04:19:48 2026 by rpki-client