$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft File: 28341CFDB2B23F14923DA4A736C08A8C17C00046.mft (raw, json) Hash identifier: m5BWqcqc2AEqD7UKcZ/OLanIsnbmFzU5QMxx+6yraq0= Subject key identifier: 59:39:08:07:12:71:0E:16:D2:3F:8D:EF:6F:58:E9:A1:65:FF:0C:40 Authority key identifier: 28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 Certificate issuer: /CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Certificate serial: 4E6594207898FD32C3AD2B3671F51954A31A53FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft Manifest number: 44 Signing time: Sun 01 Mar 2026 23:01:17 +0000 Manifest this update: Sun 01 Mar 2026 22:56:17 +0000 Manifest next update: Thu 05 Mar 2026 08:16:17 +0000 Files and hashes: 1: 28341CFDB2B23F14923DA4A736C08A8C17C00046.crl (hash: HLcoZBTUxc3OeOh0t+t84F7P78xf+9cRaTd25hx6gcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:65:94:20:78:98:fd:32:c3:ad:2b:36:71:f5:19:54:a3:1a:53:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Validity Not Before: Mar 1 22:56:17 2026 GMT Not After : Mar 5 08:16:17 2026 GMT Subject: CN=5939080712710E16D23F8DEF6F58E9A165FF0C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:63:3c:00:7a:bf:ac:35:1f:c9:93:7f:c3: 9d:2c:89:24:0e:31:14:54:15:7e:b6:7e:68:85:7a: ab:59:35:18:af:cf:af:5e:0c:2e:31:62:0a:a8:21: 87:06:9f:74:1e:9f:06:04:44:47:24:ee:96:7d:99: 0a:a7:bf:5a:7e:de:78:21:39:65:fd:62:af:f4:ba: 76:25:4f:94:1c:5e:db:5c:88:8e:cc:30:c1:9b:d4: a6:f9:3a:54:90:4d:63:5f:1b:d7:ef:51:68:f7:c3: cc:a8:d5:6a:e0:46:73:27:ef:53:dc:37:4a:4e:51: 5e:97:35:a7:82:32:08:33:e2:e1:6d:04:c1:de:f5: 72:1a:08:7c:77:1f:ea:c7:02:45:52:ca:f3:e5:bf: d5:56:ab:8f:4a:15:d8:06:b6:e2:ac:04:c1:ef:18: dc:80:95:e5:a8:ef:62:a4:1e:a1:a3:f7:37:08:83: a5:71:95:98:76:6c:5a:75:26:28:34:2a:8b:84:40: 5c:08:25:6c:df:cb:41:ea:e1:d1:95:8b:c1:96:51: 53:81:a6:f5:03:e8:e9:97:b8:83:8b:65:df:87:c1: cc:69:28:72:61:3c:10:04:af:e7:3e:72:c0:f9:08: 18:f5:8b:07:cd:46:be:1d:34:c2:b5:eb:43:d8:ab: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:39:08:07:12:71:0E:16:D2:3F:8D:EF:6F:58:E9:A1:65:FF:0C:40 X509v3 Authority Key Identifier: keyid:28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:25:36:07:11:37:a8:a0:46:35:04:93:0c:be:48:33:23:ca: a3:74:26:ef:14:ba:00:f3:c1:a0:84:73:8f:dd:1e:8f:1f:55: 36:54:15:77:2c:11:15:ad:1a:0a:64:39:9e:98:89:02:81:5f: 44:2d:66:a4:8b:fd:84:af:7f:84:3e:78:90:94:27:c2:c6:2e: 8d:7d:54:48:2d:db:5c:08:79:2b:4f:99:30:1a:94:ec:65:a4: b4:16:a2:56:c8:be:f0:cf:cc:8d:02:fc:f4:9c:ec:c6:fe:45: 7c:f3:fd:df:55:92:b8:e5:91:6a:e9:c5:b6:c5:ed:69:f1:20: 08:93:75:24:d8:fa:92:7d:1b:15:4a:f5:8b:61:df:1b:ef:d6: d8:a7:98:27:b9:f2:f9:4c:a5:7b:1d:26:bf:a6:b5:d2:0b:64: 66:f3:0d:f8:f0:da:f4:95:f7:78:ba:a0:d3:05:13:bf:be:92: ca:a6:3a:f5:c4:da:c9:c9:b4:5a:a1:1d:4f:ff:53:9a:cc:b4: ac:c1:c3:b2:77:04:9a:f4:7e:c9:ac:c3:94:c0:d9:e6:55:6f: b0:e2:c8:0a:26:52:d3:c9:37:87:4a:c4:ed:fa:04:8f:b2:57: 14:16:34:56:ea:da:d2:3d:c6:6c:ba:87:d5:ea:f6:64:e3:6e: 92:f4:1a:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmWUIHiY/TLDrSs2cfUZVKMaU/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMx N0MwMDA0NjAeFw0yNjAzMDEyMjU2MTdaFw0yNjAzMDUwODE2MTdaMDMxMTAvBgNV BAMTKDU5MzkwODA3MTI3MTBFMTZEMjNGOERFRjZGNThFOUExNjVGRjBDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91WM8AHq/rDUfyZN/w50siSQO MRRUFX62fmiFeqtZNRivz69eDC4xYgqoIYcGn3QenwYEREck7pZ9mQqnv1p+3ngh OWX9Yq/0unYlT5QcXttciI7MMMGb1Kb5OlSQTWNfG9fvUWj3w8yo1WrgRnMn71Pc N0pOUV6XNaeCMggz4uFtBMHe9XIaCHx3H+rHAkVSyvPlv9VWq49KFdgGtuKsBMHv GNyAleWo72KkHqGj9zcIg6VxlZh2bFp1Jig0KouEQFwIJWzfy0Hq4dGVi8GWUVOB pvUD6OmXuIOLZd+HwcxpKHJhPBAEr+c+csD5CBj1iwfNRr4dNMK160PYqwiZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWTkIBxJxDhbSP43vb1jpoWX/DEAwHwYDVR0j BBgwFoAUKDQc/bKyPxSSPaSnNsCKjBfAAEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMC8yODM0MUNGREIy QjIzRjE0OTIzREE0QTczNkMwOEE4QzE3QzAwMDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMxN0Mw MDA0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhB OEMxN0MwMDA0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALklNgcRN6igRjUEkwy+SDMjyqN0Ju8UugDz waCEc4/dHo8fVTZUFXcsERWtGgpkOZ6YiQKBX0QtZqSL/YSvf4Q+eJCUJ8LGLo19 VEgt21wIeStPmTAalOxlpLQWolbIvvDPzI0C/PSc7Mb+RXzz/d9VkrjlkWrpxbbF 7WnxIAiTdSTY+pJ9GxVK9Yth3xvv1tinmCe58vlMpXsdJr+mtdILZGbzDfjw2vSV 93i6oNMFE7++ksqmOvXE2snJtFqhHU//U5rMtKzBw7J3BJr0fsmsw5TA2eZVb7Di yAomUtPJN4dKxO36BI+yVxQWNFbq2tI9xmy6h9Xq9mTjbpL0Gsg= -----END CERTIFICATE-----Generated at Mon Mar 2 05:57:17 2026 by rpki-client