$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft File: 28341CFDB2B23F14923DA4A736C08A8C17C00046.mft (raw, json) Hash identifier: 6k2R6Cnddca+t4HlGZ7HzFD+Kjbdv/dvYqIfZ7rSDbc= Subject key identifier: 81:34:CC:FD:ED:8C:80:1D:85:54:FF:E5:56:D6:AF:86:77:18:90:F0 Authority key identifier: 28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 Certificate issuer: /CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Certificate serial: 614FE3AAB5774674F2965D958F9D3F835260A3D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft Manifest number: 59 Signing time: Sat 18 Apr 2026 10:21:18 +0000 Manifest this update: Sat 18 Apr 2026 10:16:18 +0000 Manifest next update: Tue 21 Apr 2026 18:04:18 +0000 Files and hashes: 1: 28341CFDB2B23F14923DA4A736C08A8C17C00046.crl (hash: Yla72liCjNb7UwdqRD9S2zy3W5b+5qo/kwdG8uyNEGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 18:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4f:e3:aa:b5:77:46:74:f2:96:5d:95:8f:9d:3f:83:52:60:a3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28341CFDB2B23F14923DA4A736C08A8C17C00046 Validity Not Before: Apr 18 10:16:18 2026 GMT Not After : Apr 21 18:04:18 2026 GMT Subject: CN=8134CCFDED8C801D8554FFE556D6AF86771890F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:4d:e7:17:a6:19:4a:92:15:af:8a:06:c3: ec:91:13:9a:68:84:aa:62:5d:e3:2a:f7:89:71:45: df:82:44:b9:7b:9c:fe:95:1b:45:6b:e9:fb:f3:07: 5e:a9:ac:a2:f8:f7:1a:6e:b7:88:29:b0:72:a0:19: b6:83:4b:1f:b2:03:92:a9:55:43:78:6a:a2:06:a9: 10:d0:a4:f9:fc:f3:27:30:a5:2a:50:ad:e2:fa:63: ea:3b:a4:fc:7b:86:78:b7:52:8f:c8:ae:99:c7:d2: 29:0e:22:13:69:65:54:d0:e3:81:eb:2e:9c:e0:3d: 38:a5:a5:1b:bb:8f:97:fa:c9:0e:19:c2:70:f3:42: 97:05:3e:1e:8a:b9:da:aa:81:8c:87:ee:75:72:63: f5:46:ff:28:39:b4:45:f2:fc:5a:ad:94:29:b4:2d: 3a:21:f8:6e:61:cc:0f:05:31:ba:0d:28:dc:e4:e3: ea:07:44:11:ed:9a:11:ba:21:c0:f6:3d:20:97:c5: 2f:d3:39:02:60:79:19:a3:43:49:d7:cf:68:9e:25: 65:ec:e6:ae:15:cc:ec:0a:88:d0:70:09:53:5b:3f: ae:b9:ec:a6:05:94:d3:4e:3a:31:ea:56:7c:81:1b: 2a:5f:fc:83:e8:3a:ec:a0:87:ba:53:cb:68:6c:5e: d6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:34:CC:FD:ED:8C:80:1D:85:54:FF:E5:56:D6:AF:86:77:18:90:F0 X509v3 Authority Key Identifier: keyid:28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:85:e2:83:ed:09:e6:15:a1:06:c3:bf:88:d2:d8:5f:68:35: 9d:b6:20:2a:d9:d6:3e:cc:34:97:ce:c2:3e:1a:f1:b5:04:94: 59:31:96:7b:15:0e:33:39:4c:77:8f:7e:04:1c:d6:4a:07:2e: ce:4f:e8:c3:14:bb:83:dc:d6:f0:5b:e7:f1:36:aa:d4:27:2f: df:73:b7:aa:a5:73:0a:9a:5e:58:11:7f:85:18:e8:73:de:67: 7e:53:96:d6:fb:35:36:ff:b9:b0:89:35:85:fb:a2:84:48:42: a9:24:08:83:11:7b:e0:04:70:7a:24:8f:e7:e2:87:d5:41:c9: 06:a2:04:63:b7:eb:eb:52:37:87:55:8a:6b:97:2e:84:ad:da: a8:86:7a:15:34:7a:77:f7:0a:d8:36:55:ee:54:bf:9b:07:3e: 7b:a7:fe:a2:1d:62:82:43:96:74:f9:df:a9:c7:50:5f:2f:2e: 62:e8:f9:ce:62:21:94:12:69:0d:57:19:6e:5b:17:af:45:b6: 56:71:67:27:90:c0:bb:eb:4c:4c:66:9e:c3:c5:89:69:1b:b5: a6:7f:b5:0e:8e:5c:32:96:c9:c1:80:77:ce:4e:36:54:cb:da: be:33:03:45:64:e8:c9:96:17:b2:5b:9f:d5:88:5f:78:96:bf: 10:32:55:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYU/jqrV3RnTyll2Vj50/g1Jgo9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMx N0MwMDA0NjAeFw0yNjA0MTgxMDE2MThaFw0yNjA0MjExODA0MThaMDMxMTAvBgNV BAMTKDgxMzRDQ0ZERUQ4QzgwMUQ4NTU0RkZFNTU2RDZBRjg2NzcxODkwRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwF03nF6YZSpIVr4oGw+yRE5po hKpiXeMq94lxRd+CRLl7nP6VG0Vr6fvzB16prKL49xput4gpsHKgGbaDSx+yA5Kp VUN4aqIGqRDQpPn88ycwpSpQreL6Y+o7pPx7hni3Uo/IrpnH0ikOIhNpZVTQ44Hr LpzgPTilpRu7j5f6yQ4ZwnDzQpcFPh6KudqqgYyH7nVyY/VG/yg5tEXy/FqtlCm0 LToh+G5hzA8FMboNKNzk4+oHRBHtmhG6IcD2PSCXxS/TOQJgeRmjQ0nXz2ieJWXs 5q4VzOwKiNBwCVNbP6657KYFlNNOOjHqVnyBGypf/IPoOuygh7pTy2hsXtYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgTTM/e2MgB2FVP/lVtavhncYkPAwHwYDVR0j BBgwFoAUKDQc/bKyPxSSPaSnNsCKjBfAAEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMC8yODM0MUNGREIy QjIzRjE0OTIzREE0QTczNkMwOEE4QzE3QzAwMDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhBOEMxN0Mw MDA0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzAvMjgzNDFDRkRCMkIyM0YxNDkyM0RBNEE3MzZDMDhB OEMxN0MwMDA0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiF4oPtCeYVoQbDv4jS2F9oNZ22ICrZ1j7M NJfOwj4a8bUElFkxlnsVDjM5THePfgQc1koHLs5P6MMUu4Pc1vBb5/E2qtQnL99z t6qlcwqaXlgRf4UY6HPeZ35Tltb7NTb/ubCJNYX7ooRIQqkkCIMRe+AEcHokj+fi h9VByQaiBGO36+tSN4dVimuXLoSt2qiGehU0enf3Ctg2Ve5Uv5sHPnun/qIdYoJD lnT536nHUF8vLmLo+c5iIZQSaQ1XGW5bF69FtlZxZyeQwLvrTExmnsPFiWkbtaZ/ tQ6OXDKWycGAd85ONlTL2r4zA0Vk6MmWF7Jbn9WIX3iWvxAyVRs= -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:07 2026 by rpki-client