$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft File: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft (raw, json) Hash identifier: ChmPhnbPuqVDf3U8UT+IZa1xt5feeO364WcdAle0reI= Subject key identifier: 48:34:BB:8C:45:E9:C0:64:0D:A6:DF:57:4C:CE:4C:AD:E3:D3:CD:67 Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 1663927DA4C6B6D5B037CFD6AEA0A8F1F6C0582B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft Manifest number: 019A Signing time: Sun 19 Apr 2026 08:12:27 +0000 Manifest this update: Sun 19 Apr 2026 08:07:27 +0000 Manifest next update: Wed 22 Apr 2026 11:52:27 +0000 Files and hashes: 1: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: enORB7AQ2Y+42S5HE1FDggaW6vwKU8hKfiqSx3+Dqyk=) 2: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: 85LtLYBqpIRzrudxo0roKqEopeTA2E0uMpmApFi6Dq0=) 3: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl (hash: cRLrUrRCZNYXrSIKR0JgqDWk+KfzxAc1nfQUmPEc6r4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:63:92:7d:a4:c6:b6:d5:b0:37:cf:d6:ae:a0:a8:f1:f6:c0:58:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Apr 19 08:07:27 2026 GMT Not After : Apr 22 11:52:27 2026 GMT Subject: CN=4834BB8C45E9C0640DA6DF574CCE4CADE3D3CD67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:50:37:ab:0f:10:cf:bf:3c:f2:c9:6b:3e: 2a:78:80:09:c1:db:25:57:a4:51:97:ad:c2:0b:43: 7d:68:5d:67:3c:13:eb:74:07:b8:54:04:0c:8f:01: 01:be:9a:36:4b:1a:e8:74:c0:d7:26:c3:77:50:2c: 62:b8:e1:52:1c:31:43:5d:2b:07:da:c0:e3:50:2e: 92:22:96:e3:3b:cf:f0:f8:cf:57:45:ea:95:d7:a0: af:5f:67:46:29:88:57:10:79:f0:81:a5:fd:48:5c: 52:45:a6:f4:62:c6:ef:02:9f:ee:b0:a4:cd:a6:0e: 62:fc:b4:ee:53:22:47:9b:ab:67:ec:89:73:62:92: d9:1c:eb:6a:40:08:95:36:a7:f7:b3:24:3f:ba:56: ab:88:6d:84:f8:62:2a:ae:69:80:92:e8:c1:57:b7: 63:de:45:b6:c5:d0:65:1d:67:7b:5d:1e:03:7a:a0: e2:76:e2:32:36:a3:a3:6c:42:2d:31:51:16:42:ab: 64:d7:00:4b:08:9d:4f:25:60:5b:0e:b7:2d:c5:a2: 14:43:76:da:5a:04:29:6f:a2:ef:f9:c1:14:fc:83: a7:08:71:86:db:27:fc:05:ab:fa:64:1b:de:ce:54: 0e:43:e6:9c:5a:35:8b:0f:8e:70:e4:a2:b4:23:53: 8a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:34:BB:8C:45:E9:C0:64:0D:A6:DF:57:4C:CE:4C:AD:E3:D3:CD:67 X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c6:bb:51:2b:b1:03:61:a4:1c:da:d5:5f:a2:11:69:9a:5a: b2:c4:c1:c6:34:14:08:d0:7e:24:31:26:73:5c:94:03:fa:b4: 90:65:53:d2:66:00:66:ec:92:2e:3f:94:0b:04:2d:89:8d:e3: c1:42:2b:44:92:7e:4f:98:c1:33:dd:11:54:cf:60:d8:38:9a: 74:23:a9:5e:db:6a:51:23:bb:c9:62:b1:08:23:0b:26:8e:38: da:e9:1d:9d:50:68:d5:cf:39:3b:99:4a:f7:39:89:f4:a0:16: d5:a2:da:dd:85:d3:99:17:2b:b5:89:43:33:20:19:90:b9:83: 25:09:cd:d0:5a:0a:5f:6e:fa:31:63:c9:8d:39:16:47:67:14: 6e:51:c1:30:b9:aa:85:df:28:30:bf:84:3d:3b:cc:33:10:c7: 45:85:15:54:d2:c4:22:fe:d3:7e:f6:a8:9c:5d:c7:40:ea:07: 09:08:33:cc:96:cd:5a:e9:a9:31:a5:67:38:a8:2e:10:ef:32: 50:b8:62:52:2e:f7:7a:90:21:02:0c:c0:66:e6:13:5e:6c:f6: 9e:f0:b8:1a:bb:5b:b3:d6:89:17:1d:d5:36:68:7d:d2:49:dc: b7:78:54:fb:67:f4:51:37:c2:30:5e:ee:0f:7f:27:a8:75:cb: 53:74:93:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmOSfaTGttWwN8/WrqCo8fbAWCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNjA0MTkwODA3MjdaFw0yNjA0MjIxMTUyMjdaMDMxMTAvBgNV BAMTKDQ4MzRCQjhDNDVFOUMwNjQwREE2REY1NzRDQ0U0Q0FERTNEM0NENjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5VA3qw8Qz7888slrPip4gAnB 2yVXpFGXrcILQ31oXWc8E+t0B7hUBAyPAQG+mjZLGuh0wNcmw3dQLGK44VIcMUNd KwfawONQLpIiluM7z/D4z1dF6pXXoK9fZ0YpiFcQefCBpf1IXFJFpvRixu8Cn+6w pM2mDmL8tO5TIkebq2fsiXNiktkc62pACJU2p/ezJD+6VquIbYT4YiquaYCS6MFX t2PeRbbF0GUdZ3tdHgN6oOJ24jI2o6NsQi0xURZCq2TXAEsInU8lYFsOty3FohRD dtpaBClvou/5wRT8g6cIcYbbJ/wFq/pkG97OVA5D5pxaNYsPjnDkorQjU4qXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSDS7jEXpwGQNpt9XTM5MrePTzWcwHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2 N2ItOWI4ODI1YjVjZDVmLzAvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0 OTdCMzZGM0FENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7Gu1ErsQNhpBza1V+iEWmaWrLEwcY0FAjQ fiQxJnNclAP6tJBlU9JmAGbski4/lAsELYmN48FCK0SSfk+YwTPdEVTPYNg4mnQj qV7balEju8lisQgjCyaOONrpHZ1QaNXPOTuZSvc5ifSgFtWi2t2F05kXK7WJQzMg GZC5gyUJzdBaCl9u+jFjyY05FkdnFG5RwTC5qoXfKDC/hD07zDMQx0WFFVTSxCL+ 0372qJxdx0DqBwkIM8yWzVrpqTGlZzioLhDvMlC4YlIu93qQIQIMwGbmE15s9p7w uBq7W7PWiRcd1TZofdJJ3Ld4VPtn9FE3wjBe7g9/J6h1y1N0k0g= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:53 2026 by rpki-client