$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft File: 28612772543E43335B080C32808B7FDC277E71E4.mft (raw, json) Hash identifier: TxKLPWrSI0Ji1aoICGX0VIRZRs4Vw/X2o30XsbgYxoY= Subject key identifier: 9F:9A:F5:DC:AF:BA:6A:B4:CE:D3:E6:9A:8C:2C:9A:B4:60:B4:1A:47 Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Certificate issuer: /CN=28612772543E43335B080C32808B7FDC277E71E4 Certificate serial: 7155177C5AB8CD68A11AD81939E6CB7C0CB965A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft Manifest number: 01A1 Signing time: Thu 16 Apr 2026 15:31:20 +0000 Manifest this update: Thu 16 Apr 2026 15:26:20 +0000 Manifest next update: Sun 19 Apr 2026 18:20:20 +0000 Files and hashes: 1: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: xGMt/qz2gLSpF2/GLoO76XEkXVnWKO075lHn2nkpucQ=) 2: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: oosppneRoSbmwD3s+VWSjVI8PDvHs2L2ec3h4IZjW/8=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: Gn1y+vGI1pMr1RUP5Xcp6ZX24+/thjU5EMlcN69zymE=) 4: 28612772543E43335B080C32808B7FDC277E71E4.crl (hash: akqcw9tGildjvfAkh7lJVBECy5kXsr+7QnKFFZ84oYI=) 5: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: RAlnEnom5DxgyjJGz4HMb0m9LakHmzQTvYvsB15UJ40=) 6: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: eKlNzLcXtNJ6j9o2YNvxo9gNUcarXxr4w6XmmCIYGdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 18:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:55:17:7c:5a:b8:cd:68:a1:1a:d8:19:39:e6:cb:7c:0c:b9:65:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4 Validity Not Before: Apr 16 15:26:20 2026 GMT Not After : Apr 19 18:20:20 2026 GMT Subject: CN=9F9AF5DCAFBA6AB4CED3E69A8C2C9AB460B41A47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:36:86:55:c0:c7:49:3d:c2:94:10:8c:5a: a7:08:dc:4f:aa:de:5c:94:13:33:e7:47:12:4a:f6: 74:b3:11:a4:e8:c7:23:e2:f0:42:0f:2b:46:c9:66: 90:e2:c2:98:cc:4f:7c:4b:56:3f:83:be:20:e5:e7: 30:96:59:28:d2:d8:9a:7d:ae:ee:93:6a:17:78:d9: 69:59:13:4e:e2:4d:48:ab:45:ea:54:10:6c:1b:69: bb:5d:00:ae:6c:f7:c1:1c:3f:a7:a8:f2:14:8a:3e: e4:d5:85:65:34:7b:77:60:c8:43:79:f3:98:4e:c3: 31:b4:fa:6e:95:65:da:d6:d5:55:31:fd:fa:c8:1d: 14:98:a7:1f:84:3d:46:2e:08:c4:71:bd:16:2c:7c: 7d:a5:a6:89:2c:81:82:ea:59:6d:c4:ca:dc:89:7e: 8f:29:81:2d:73:47:9f:64:0f:0d:25:36:4d:67:90: b7:71:cb:29:9a:da:3d:16:b9:d8:24:5a:80:20:a2: f6:7d:b5:1a:79:a1:33:eb:85:e7:a3:0a:73:8d:bd: 00:c0:55:fb:33:48:76:51:38:19:f5:28:9e:59:7e: 61:82:df:6c:b2:cf:1f:35:04:b5:63:f8:3c:e4:b3: a2:9c:3a:4e:90:e5:34:f5:6a:80:14:bc:0f:7a:29: b5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9A:F5:DC:AF:BA:6A:B4:CE:D3:E6:9A:8C:2C:9A:B4:60:B4:1A:47 X509v3 Authority Key Identifier: keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d6:62:18:3f:53:6f:07:8d:ba:f6:f1:5e:af:c3:10:4a:6d: 97:a8:c7:9f:33:c9:50:2e:d0:16:48:dd:3b:60:3c:3e:33:b5: d4:84:a3:dc:a1:2c:d5:07:0f:b0:f1:87:bb:ff:d2:91:98:c0: 91:66:1a:e9:8a:11:50:d9:b6:d5:25:90:ff:b9:a8:d6:c9:28: d4:bf:d7:57:e6:7e:2e:96:57:c0:1e:21:70:47:01:18:07:1b: 7a:ab:68:d2:c8:d6:af:37:34:60:31:c0:79:45:18:e9:92:86: 68:8e:4f:ee:ac:70:06:32:26:d9:4d:49:04:15:d7:c7:86:15: 7c:27:3b:d3:8a:6b:e4:51:5a:c9:90:f6:ad:27:88:20:a1:1a: 6c:fc:4c:61:02:ec:b1:28:18:4b:8c:36:78:d2:66:aa:53:c4: 3e:94:c1:95:5c:8e:c8:fe:79:1f:6d:14:35:11:1a:de:2f:fb: b4:26:d6:62:a7:e3:c7:62:ea:5c:71:48:d6:61:8b:52:77:86: 07:e4:1c:23:51:a9:22:9c:d8:14:90:3c:e2:4e:10:3d:d9:23: 5e:3d:f9:51:96:76:de:23:dd:75:24:a0:5c:3e:a2:dd:68:64: 79:ac:41:97:74:f6:43:4c:4f:4b:8a:9b:db:be:7a:10:71:7e: 70:ee:58:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcVUXfFq4zWihGtgZOebLfAy5ZacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMy NzdFNzFFNDAeFw0yNjA0MTYxNTI2MjBaFw0yNjA0MTkxODIwMjBaMDMxMTAvBgNV BAMTKDlGOUFGNURDQUZCQTZBQjRDRUQzRTY5QThDMkM5QUI0NjBCNDFBNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4DzaGVcDHST3ClBCMWqcI3E+q 3lyUEzPnRxJK9nSzEaToxyPi8EIPK0bJZpDiwpjMT3xLVj+DviDl5zCWWSjS2Jp9 ru6Tahd42WlZE07iTUirRepUEGwbabtdAK5s98EcP6eo8hSKPuTVhWU0e3dgyEN5 85hOwzG0+m6VZdrW1VUx/frIHRSYpx+EPUYuCMRxvRYsfH2lpoksgYLqWW3EytyJ fo8pgS1zR59kDw0lNk1nkLdxyyma2j0WudgkWoAgovZ9tRp5oTPrheejCnONvQDA VfszSHZROBn1KJ5ZfmGC32yyzx81BLVj+Dzks6KcOk6Q5TT1aoAUvA96KbV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn5r13K+6arTO0+aajCyatGC0GkcwHwYDVR0j BBgwFoAUKGEnclQ+QzNbCAwygIt/3Cd+ceQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8yODYxMjc3MjU0 M0U0MzMzNUIwODBDMzI4MDhCN0ZEQzI3N0U3MUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMyNzdF NzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdG REMyNzdFNzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7WYhg/U28Hjbr28V6vwxBKbZeox58zyVAu 0BZI3TtgPD4ztdSEo9yhLNUHD7Dxh7v/0pGYwJFmGumKEVDZttUlkP+5qNbJKNS/ 11fmfi6WV8AeIXBHARgHG3qraNLI1q83NGAxwHlFGOmShmiOT+6scAYyJtlNSQQV 18eGFXwnO9OKa+RRWsmQ9q0niCChGmz8TGEC7LEoGEuMNnjSZqpTxD6UwZVcjsj+ eR9tFDURGt4v+7Qm1mKn48di6lxxSNZhi1J3hgfkHCNRqSKc2BSQPOJOED3ZI149 +VGWdt4j3XUkoFw+ot1oZHmsQZd09kNMT0uKm9u+ehBxfnDuWNY= -----END CERTIFICATE-----Generated at Sat Apr 18 05:52:10 2026 by rpki-client