$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft File: 28341CFDB2B23F14923DA4A736C08A8C17C00046.mft (raw, json) Hash identifier: GL1KIT4qasBgFu0SHw8EOu1gSIopzt/R9yXlfBzlyLA= Subject key identifier: 6E:22:02:0C:57:D5:D7:77:5A:A5:27:BE:04:A3:C1:48:D8:EC:AC:2B Authority key identifier: 28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 Certificate issuer: /CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Certificate serial: 245B5974F596E42B791598F54577CEF57087E32A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft Manifest number: 10 Signing time: Mon 03 Nov 2025 16:21:09 +0000 Manifest this update: Mon 03 Nov 2025 16:16:09 +0000 Manifest next update: Fri 07 Nov 2025 04:11:09 +0000 Files and hashes: 1: 28341CFDB2B23F14923DA4A736C08A8C17C00046.crl (hash: 63tG8hzxuumtZf3+J3gU8WLFdpSTwdswT06GopSpSGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5b:59:74:f5:96:e4:2b:79:15:98:f5:45:77:ce:f5:70:87:e3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Validity Not Before: Nov 3 16:16:09 2025 GMT Not After : Nov 7 04:11:09 2025 GMT Subject: CN=6E22020C57D5D7775AA527BE04A3C148D8ECAC2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:a2:4b:de:c8:b5:30:4d:d6:dd:6a:4c:ad: 8a:48:46:a6:c1:95:d5:36:14:ca:77:02:b4:27:22: 97:b8:3a:ae:2e:8d:66:b4:f8:f6:50:67:5d:95:e0: 78:f2:ce:c0:18:35:e4:d3:0a:01:22:0e:59:77:5d: 8a:3c:5e:b5:6d:27:7b:39:3d:38:68:38:da:50:7e: bf:f9:af:e7:2e:c8:be:78:8a:b1:c0:37:09:43:58: 34:9d:fd:ed:c7:bd:f6:a8:a5:dc:4e:27:87:b4:49: a3:78:95:4e:49:6a:74:e0:09:98:68:48:12:64:52: fd:67:b2:e4:16:07:30:14:eb:1c:73:29:ca:0a:03: fd:e2:df:a6:4f:e7:f3:04:a3:28:73:65:35:10:cc: 39:b9:1f:83:61:1f:dc:3f:e9:37:0a:be:c1:b4:3c: e8:0d:17:cd:a4:41:72:84:5e:2a:e0:06:fb:eb:fb: e8:20:98:00:71:51:09:ff:f9:0b:ec:c5:ec:ca:b5: 87:f9:98:86:84:88:c3:74:62:88:c9:34:7b:6c:c6: 88:7a:4b:d3:49:3b:c4:1c:7d:6a:6c:af:39:ec:af: 91:2f:0b:aa:57:40:bd:5f:6a:72:49:f8:fb:14:5f: 9c:61:d6:ce:c2:8b:84:d6:5c:a7:f3:5e:14:bd:31: a7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:22:02:0C:57:D5:D7:77:5A:A5:27:BE:04:A3:C1:48:D8:EC:AC:2B X509v3 Authority Key Identifier: keyid:28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a7:0d:58:22:f4:94:48:7e:a0:e7:92:31:51:95:0c:8a:44: 1d:a9:88:3b:c0:00:ef:6c:12:43:36:23:76:a9:2e:45:10:5e: 93:9f:16:26:be:b7:d4:fb:76:b3:17:3c:1a:fe:53:cf:f3:bf: b6:a2:18:52:70:e7:a6:d8:33:df:d4:e5:7e:b8:58:97:52:a4: 69:a7:d4:0d:f0:7f:b0:54:ba:8a:c6:08:91:3d:ed:bf:56:db: 78:4f:3b:21:04:e9:42:13:6a:0a:e1:96:2e:ea:65:02:bc:9e: 61:a6:98:3b:17:be:45:21:03:f8:3e:d0:88:5d:af:d4:41:1d: 2b:3c:8a:d7:2a:e5:78:37:ec:e6:78:9d:b2:8b:84:21:92:e5: e7:73:33:85:0f:d7:19:30:22:27:6d:d2:9a:49:a3:7a:85:71: 14:4f:f4:9c:26:ca:1e:36:30:7b:37:09:ed:47:20:d1:55:ad: 5a:a5:6f:02:f2:6e:76:8d:6d:49:96:6b:fe:a4:b9:2f:35:c3: 29:0d:19:dd:78:41:0e:bb:11:e8:b3:8c:58:3a:2f:51:cc:79: 06:e4:28:c5:b8:2b:6d:52:3f:78:82:0e:1c:32:23:43:00:58: 97:c1:53:05:16:42:2b:05:87:c3:aa:94:b1:d3:30:04:72:6c: 8c:f8:fe:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJFtZdPWW5Ct5FZj1RXfO9XCH4yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMx N0MwMDA0NjAeFw0yNTExMDMxNjE2MDlaFw0yNTExMDcwNDExMDlaMDMxMTAvBgNV BAMTKDZFMjIwMjBDNTdENUQ3Nzc1QUE1MjdCRTA0QTNDMTQ4RDhFQ0FDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86KJL3si1ME3W3WpMrYpIRqbB ldU2FMp3ArQnIpe4Oq4ujWa0+PZQZ12V4HjyzsAYNeTTCgEiDll3XYo8XrVtJ3s5 PThoONpQfr/5r+cuyL54irHANwlDWDSd/e3HvfaopdxOJ4e0SaN4lU5JanTgCZho SBJkUv1nsuQWBzAU6xxzKcoKA/3i36ZP5/MEoyhzZTUQzDm5H4NhH9w/6TcKvsG0 POgNF82kQXKEXirgBvvr++ggmABxUQn/+QvsxezKtYf5mIaEiMN0YojJNHtsxoh6 S9NJO8QcfWpsrznsr5EvC6pXQL1fanJJ+PsUX5xh1s7Ci4TWXKfzXhS9MafBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbiICDFfV13dapSe+BKPBSNjsrCswHwYDVR0j BBgwFoAUKDQc/bKyPxSSPaSnNsCKjBfAAEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMC8yODM0MUNGREIy QjIzRjE0OTIzREE0QTczNkMwOEE4QzE3QzAwMDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMxN0Mw MDA0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhB OEMxN0MwMDA0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADunDVgi9JRIfqDnkjFRlQyKRB2piDvAAO9s EkM2I3apLkUQXpOfFia+t9T7drMXPBr+U8/zv7aiGFJw56bYM9/U5X64WJdSpGmn 1A3wf7BUuorGCJE97b9W23hPOyEE6UITagrhli7qZQK8nmGmmDsXvkUhA/g+0Ihd r9RBHSs8itcq5Xg37OZ4nbKLhCGS5edzM4UP1xkwIidt0ppJo3qFcRRP9Jwmyh42 MHs3Ce1HINFVrVqlbwLybnaNbUmWa/6kuS81wykNGd14QQ67EeizjFg6L1HMeQbk KMW4K21SP3iCDhwyI0MAWJfBUwUWQisFh8OqlLHTMARybIz4/ko= -----END CERTIFICATE-----Generated at Tue Nov 4 02:05:55 2025 by rpki-client