$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft File: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft (raw, json) Hash identifier: Ysv8Uddl2RfpsPugAEaZk+hGdARJWbF8AqV9ogN+zx8= Subject key identifier: 45:83:A0:4F:38:41:AC:8D:68:06:C8:17:B1:63:FD:D0:27:79:4D:D1 Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 3AC2D4E962C9CAE193FB241A5C4F16FBDD9C675A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft Manifest number: 0127 Signing time: Thu 07 Aug 2025 22:22:06 +0000 Manifest this update: Thu 07 Aug 2025 22:17:06 +0000 Manifest next update: Sun 10 Aug 2025 23:39:06 +0000 Files and hashes: 1: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: OdSsxC/IcH64+HH1xsnqnpx/lq2eSJJ+N7LMBhOTgSQ=) 2: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: zEnS7MUIR/K5UV+N9UMD9HrZThlFZltdIGvWRa0yVIA=) 3: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl (hash: ORV/VSNIbjG18Y21l4hLspAM7eSrRWl/AQarG9PNVyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 23:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c2:d4:e9:62:c9:ca:e1:93:fb:24:1a:5c:4f:16:fb:dd:9c:67:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Aug 7 22:17:06 2025 GMT Not After : Aug 10 23:39:06 2025 GMT Subject: CN=4583A04F3841AC8D6806C817B163FDD027794DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:70:32:03:42:90:30:cc:2f:f2:a8:4e:39: 12:c2:aa:1e:3d:2e:36:51:f7:87:90:ca:de:cf:79: 19:60:7b:1f:a9:e9:a0:40:1c:3b:3c:8e:ef:6f:01: bf:08:33:f5:9e:ee:d2:c4:77:05:2b:06:b7:31:2f: 29:01:5c:64:38:29:ec:03:7f:4c:19:3e:d7:2b:11: 98:3b:c1:a0:de:70:62:5b:bd:5d:ae:4f:7a:57:d2: 76:8a:c9:f5:50:04:42:69:d8:43:cc:f2:10:46:b7: 6d:55:e0:1c:93:b6:85:3c:37:53:51:94:65:21:62: bb:23:2e:0f:b7:e0:65:37:67:15:37:d9:98:c7:83: bd:5a:ed:8d:64:e0:1b:68:5e:f4:2a:71:01:56:bb: 02:22:17:ec:64:a4:81:3f:58:9d:4a:35:3d:b2:d4: c6:ec:3a:83:55:1b:21:20:b7:1e:9d:5e:84:dd:e9: 50:02:f6:81:a4:10:c2:99:d2:f0:18:82:98:a9:19: 3d:e3:c9:b8:35:41:fc:39:a8:cd:dd:e3:ed:67:6b: 8b:1a:9e:b3:01:18:f8:2c:35:a7:36:ae:c4:6f:fc: 86:ea:9e:cb:ad:fc:04:da:86:05:67:43:cd:64:a1: c4:56:b6:d4:42:58:f1:0d:87:57:00:eb:a4:c2:5f: 53:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:83:A0:4F:38:41:AC:8D:68:06:C8:17:B1:63:FD:D0:27:79:4D:D1 X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:6d:35:b0:d8:26:c0:fc:e2:40:4b:28:7c:2a:18:e6:26:a6: a5:04:24:05:96:77:bf:4e:3a:33:a7:b2:93:8f:d8:2c:a0:57: a6:5c:38:86:fe:60:72:5e:e7:50:32:3d:8d:18:34:6d:fe:2f: 2b:f2:d5:7e:41:c0:7e:90:a4:60:62:29:17:e9:6f:2d:94:a2: 83:ea:2d:83:2b:e0:de:62:1c:2d:24:f2:66:64:36:cb:49:0d: d7:54:06:bd:32:20:ce:79:62:d9:df:18:23:de:06:27:a5:97: b9:af:f1:b6:6d:85:cd:5c:c0:1b:69:e2:ff:d2:1a:c1:97:86: 37:a6:aa:a0:72:2a:dd:5a:93:2b:6f:d7:2f:00:74:47:02:ed: c3:69:c1:22:4b:ba:f6:27:4b:2d:b0:53:e3:fc:b7:85:b1:32: 35:d2:46:89:d9:5b:15:23:53:e4:df:7a:8e:16:6d:a8:ad:72: bd:44:70:4a:a3:48:9d:d9:fe:70:bd:ad:23:77:07:2c:41:71: 4d:45:a6:7f:b2:bd:99:d2:eb:82:a0:3b:8b:52:f7:83:fa:9c: 44:f6:34:50:1e:1b:09:26:07:3a:8c:dc:af:93:c3:81:20:0d: a4:75:ca:c5:37:3b:53:7d:29:d5:a7:51:e4:cd:c5:cc:4f:ea: 21:e7:55:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsLU6WLJyuGT+yQaXE8W+92cZ1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNTA4MDcyMjE3MDZaFw0yNTA4MTAyMzM5MDZaMDMxMTAvBgNV BAMTKDQ1ODNBMDRGMzg0MUFDOEQ2ODA2QzgxN0IxNjNGREQwMjc3OTRERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnHAyA0KQMMwv8qhOORLCqh49 LjZR94eQyt7PeRlgex+p6aBAHDs8ju9vAb8IM/We7tLEdwUrBrcxLykBXGQ4KewD f0wZPtcrEZg7waDecGJbvV2uT3pX0naKyfVQBEJp2EPM8hBGt21V4ByTtoU8N1NR lGUhYrsjLg+34GU3ZxU32ZjHg71a7Y1k4BtoXvQqcQFWuwIiF+xkpIE/WJ1KNT2y 1MbsOoNVGyEgtx6dXoTd6VAC9oGkEMKZ0vAYgpipGT3jybg1Qfw5qM3d4+1na4sa nrMBGPgsNac2rsRv/Ibqnsut/ATahgVnQ81kocRWttRCWPENh1cA66TCX1O3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURYOgTzhBrI1oBsgXsWP90Cd5TdEwHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2 N2ItOWI4ODI1YjVjZDVmLzAvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0 OTdCMzZGM0FENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRtNbDYJsD84kBLKHwqGOYmpqUEJAWWd79O OjOnspOP2CygV6ZcOIb+YHJe51AyPY0YNG3+Lyvy1X5BwH6QpGBiKRfpby2UooPq LYMr4N5iHC0k8mZkNstJDddUBr0yIM55YtnfGCPeBiell7mv8bZthc1cwBtp4v/S GsGXhjemqqByKt1akytv1y8AdEcC7cNpwSJLuvYnSy2wU+P8t4WxMjXSRonZWxUj U+Tfeo4Wbaitcr1EcEqjSJ3Z/nC9rSN3ByxBcU1Fpn+yvZnS64KgO4tS94P6nET2 NFAeGwkmBzqM3K+Tw4EgDaR1ysU3O1N9KdWnUeTNxcxP6iHnVdQ= -----END CERTIFICATE-----Generated at Fri Aug 8 13:05:54 2025 by rpki-client