$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft File: 28612772543E43335B080C32808B7FDC277E71E4.mft (raw, json) Hash identifier: kEmIZDjX62jPOquCDzodahG74HN+22bFqyLyWkHKKgA= Subject key identifier: D6:AA:F6:E8:1E:F5:D8:E7:FB:EE:8A:D2:27:40:6D:3E:29:D1:A8:AA Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Certificate issuer: /CN=28612772543E43335B080C32808B7FDC277E71E4 Certificate serial: 48FF8AC7380E777515E9ED8E6844CD70E1A23432 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft Manifest number: 0118 Signing time: Sat 14 Jun 2025 03:21:06 +0000 Manifest this update: Sat 14 Jun 2025 03:16:06 +0000 Manifest next update: Tue 17 Jun 2025 07:12:06 +0000 Files and hashes: 1: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: rnpAKtCbX8txVuD150fh3r3wLM+En4ZSoI9OjRhxuAQ=) 2: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: z4BeSk+gRKk6M4z7F7+D4+oTS8E9IbV3rV7rrPGM6js=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: nA9l/qEipVfIEIe1umepDag8NvfqeSfq9JSpO2D/fuI=) 4: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: c3RjMW+CIXpYsyzS75W7NviafJ4jFuqxYaUgJgR1RjY=) 5: 28612772543E43335B080C32808B7FDC277E71E4.crl (hash: c8jpIozvhd5ZIgP6oAdfJ1rh+U2PqgQyXeT9LCkh3ao=) 6: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: eZG8iudQFcgRUtHuXJAuzY7ooTKLq0KNHMVdg0w4Klc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 07:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ff:8a:c7:38:0e:77:75:15:e9:ed:8e:68:44:cd:70:e1:a2:34:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4 Validity Not Before: Jun 14 03:16:06 2025 GMT Not After : Jun 17 07:12:06 2025 GMT Subject: CN=D6AAF6E81EF5D8E7FBEE8AD227406D3E29D1A8AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:a8:2c:65:e9:2e:1a:6a:d1:26:ad:87:ff: ff:7a:73:e3:45:60:1a:06:4f:55:ab:47:9f:cf:5e: e5:6c:53:0a:1b:db:c1:f2:38:ff:35:98:62:09:fc: ab:e8:7c:6b:2f:9b:13:28:cf:d5:c3:6e:d7:b4:80: e3:af:7b:07:01:4c:4b:19:d3:64:ab:75:1f:52:02: 74:14:4c:7e:13:55:4e:23:cc:32:37:43:c7:48:ea: ed:4f:08:88:6c:d4:4c:58:7e:58:da:1e:11:37:2d: e1:e3:bf:d5:5b:ba:56:eb:9a:76:3d:57:29:9a:c2: 3e:0f:7d:eb:f2:24:70:2e:ce:ac:7e:04:ac:a8:83: e7:e5:0e:6d:f8:17:fd:e8:d7:19:59:a4:2e:d6:69: 4b:75:c7:e4:a6:0c:89:d4:5d:cb:d2:6b:3c:0d:3f: 3b:68:8c:6c:7d:08:d2:28:d8:ac:26:90:e1:25:99: 9d:5a:b4:6b:de:da:78:d4:51:3d:d5:09:5a:13:9d: 7c:5f:0e:b4:56:54:1a:5e:d8:a0:d5:e0:6c:24:49: 71:73:20:07:c3:ec:34:f0:39:07:37:c2:61:73:4a: 3e:64:47:53:e0:89:0a:c7:fe:4c:35:1e:14:2f:9c: da:d0:c3:ce:bc:a2:7d:b2:fc:70:40:da:3a:cc:ea: cc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AA:F6:E8:1E:F5:D8:E7:FB:EE:8A:D2:27:40:6D:3E:29:D1:A8:AA X509v3 Authority Key Identifier: keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:41:60:91:d1:78:cc:8f:31:08:55:6e:b6:8a:14:e0:cc:a0: 1c:fd:41:a5:18:a4:05:b0:f3:34:53:ed:eb:10:94:23:8f:ee: 31:44:23:2a:f0:25:27:5d:e2:b0:3f:6d:84:a0:cc:bb:e3:3a: a2:4e:d2:18:8b:56:e2:cf:49:25:d1:bd:54:cb:02:7e:39:fd: 4a:7c:e2:e8:2f:5d:5f:ce:98:48:73:7c:d6:f9:9e:23:a0:86: 85:39:bc:e1:70:15:27:05:ef:eb:49:0a:d2:a1:5f:66:9b:98: 0e:4b:1e:48:c5:a0:fc:d7:eb:a9:e2:9b:aa:2c:a5:82:7e:30: 18:9d:20:3e:cc:05:b8:8a:c7:b4:67:98:45:23:3d:17:1f:84: 89:3f:29:09:d7:6d:8d:74:f9:a3:6f:80:b2:37:bd:1a:f0:e0: 50:da:a8:5f:ac:bb:8e:f2:ee:cf:70:93:36:db:f1:70:74:4c: a1:be:29:6e:e4:df:e7:ca:de:4a:06:24:34:d2:da:b2:8b:9d: d6:38:f0:4e:3a:13:0e:28:dc:4c:8d:84:13:a1:ec:43:0b:0c: 30:35:65:bb:d1:ae:ab:5f:36:71:b7:49:85:1e:df:23:4a:cb: 73:57:94:f3:96:2e:17:94:e1:af:08:50:fc:40:60:e0:c8:4a: 02:10:e9:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSP+KxzgOd3UV6e2OaETNcOGiNDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMy NzdFNzFFNDAeFw0yNTA2MTQwMzE2MDZaFw0yNTA2MTcwNzEyMDZaMDMxMTAvBgNV BAMTKEQ2QUFGNkU4MUVGNUQ4RTdGQkVFOEFEMjI3NDA2RDNFMjlEMUE4QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7IqgsZekuGmrRJq2H//96c+NF YBoGT1WrR5/PXuVsUwob28HyOP81mGIJ/KvofGsvmxMoz9XDbte0gOOvewcBTEsZ 02SrdR9SAnQUTH4TVU4jzDI3Q8dI6u1PCIhs1ExYfljaHhE3LeHjv9VbulbrmnY9 Vymawj4PfevyJHAuzqx+BKyog+flDm34F/3o1xlZpC7WaUt1x+SmDInUXcvSazwN PztojGx9CNIo2KwmkOElmZ1atGve2njUUT3VCVoTnXxfDrRWVBpe2KDV4GwkSXFz IAfD7DTwOQc3wmFzSj5kR1PgiQrH/kw1HhQvnNrQw868on2y/HBA2jrM6sw1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1qr26B712Of77orSJ0BtPinRqKowHwYDVR0j BBgwFoAUKGEnclQ+QzNbCAwygIt/3Cd+ceQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8yODYxMjc3MjU0 M0U0MzMzNUIwODBDMzI4MDhCN0ZEQzI3N0U3MUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMyNzdF NzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdG REMyNzdFNzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRBYJHReMyPMQhVbraKFODMoBz9QaUYpAWw 8zRT7esQlCOP7jFEIyrwJSdd4rA/bYSgzLvjOqJO0hiLVuLPSSXRvVTLAn45/Up8 4ugvXV/OmEhzfNb5niOghoU5vOFwFScF7+tJCtKhX2abmA5LHkjFoPzX66nim6os pYJ+MBidID7MBbiKx7RnmEUjPRcfhIk/KQnXbY10+aNvgLI3vRrw4FDaqF+su47y 7s9wkzbb8XB0TKG+KW7k3+fK3koGJDTS2rKLndY48E46Ew4o3EyNhBOh7EMLDDA1 ZbvRrqtfNnG3SYUe3yNKy3NXlPOWLheU4a8IUPxAYODISgIQ6UI= -----END CERTIFICATE-----Generated at Mon Jun 16 02:16:37 2025 by rpki-client