$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft File: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json) Hash identifier: TyS3D9k+xckvqvgaFJbD3qsNBpr/skm+JTj2iVf/Vl0= Subject key identifier: 88:48:35:EE:5C:A0:3E:36:EE:C4:99:BB:E8:F9:F9:BB:D4:AD:0D:5F Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 2BF59EFC69EBEE11CCD62303AC8C761FCA72AB35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft Manifest number: 01B3 Signing time: Wed 23 Apr 2025 09:22:01 +0000 Manifest this update: Wed 23 Apr 2025 09:17:01 +0000 Manifest next update: Sat 26 Apr 2025 16:40:01 +0000 Files and hashes: 1: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: FwoXz8BLQjuaQO/KSn6f+AxYSOic9gblaVd4oa7iyCA=) 2: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: xne0Cq1LXYrb0/DpeRsrFAeGbUysSbEdSSRG1O8ZrMs=) 3: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: WAM8LzXIJx5krdWc3hy1Oy3kMn09ylHcJLe1/WPk6IA=) 4: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: 3q/CQB6AAqmbKR7BJ9ieGoRqrYEVNBUK4VjLkCeS2sQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 09:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f5:9e:fc:69:eb:ee:11:cc:d6:23:03:ac:8c:76:1f:ca:72:ab:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Apr 23 09:17:01 2025 GMT Not After : Apr 26 16:40:01 2025 GMT Subject: CN=884835EE5CA03E36EEC499BBE8F9F9BBD4AD0D5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c5:43:94:55:a2:aa:49:e8:61:28:de:5f:b6: d0:b4:96:cb:13:51:07:f0:62:2b:56:69:8f:cf:f7: ce:7a:0d:c8:68:9c:94:41:73:d8:a0:2d:fa:ae:4c: eb:6e:3f:c0:c8:fe:ba:06:6b:4c:e5:ad:ef:35:88: d4:ea:b6:10:9b:7c:db:29:2b:32:25:7c:36:4d:54: 38:1d:7a:f1:9c:ed:79:07:d4:58:7b:1a:28:5a:d8: 02:2b:fe:d1:81:9f:f5:31:ad:17:7c:db:12:1f:38: c2:a7:32:8c:2b:12:9c:77:f3:ad:06:32:39:04:1e: e1:42:4e:f0:7c:d4:08:f4:3a:41:be:30:e9:73:d0: 56:67:2f:74:6c:a4:7f:08:54:9f:5c:6b:f9:fa:4c: df:27:3a:2f:2d:5a:d6:60:a8:dd:39:64:90:ad:a6: c4:7a:ea:06:fa:ea:0a:e9:72:02:c4:18:f8:cd:48: b7:89:b9:69:96:0d:03:de:23:f9:34:81:eb:c3:77: e7:46:25:93:31:51:5d:59:09:27:33:e5:69:87:ee: c3:05:dc:d0:6d:70:0e:8b:cb:51:20:80:5d:5a:d6: 99:f1:8a:73:68:f6:cc:fc:da:e8:c7:15:6c:ff:a9: 1b:2e:8e:85:7c:b1:25:96:b0:4a:6e:66:c8:7f:27: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:48:35:EE:5C:A0:3E:36:EE:C4:99:BB:E8:F9:F9:BB:D4:AD:0D:5F X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4f:7a:ff:bf:6d:20:74:3c:24:05:7c:55:8d:10:0a:c5:9f: 73:41:40:88:88:b0:a5:f4:dd:0d:e0:84:6a:4b:1c:90:08:3f: 8d:8d:4f:f6:3c:a0:17:04:d0:41:92:64:1c:e0:23:70:4a:23: c4:0f:c0:e3:fc:b1:0d:43:dd:49:fc:ec:1b:7b:43:21:9a:6d: cc:5c:19:37:a4:26:7a:5d:78:0d:f1:76:e6:fc:32:e7:6a:51: a2:d5:eb:c9:41:d6:f5:15:ab:74:26:f7:f9:25:b2:38:56:68: cc:0c:6c:d5:5e:01:db:e4:18:98:c8:5a:b6:9f:68:53:67:42: 66:00:2b:f1:72:7f:96:49:a4:4d:7a:4c:5d:a3:75:bb:4b:06: 71:d3:f4:e1:6e:46:a7:f5:e7:3b:ae:d4:f8:52:7c:15:7c:75: 77:5f:08:a8:3e:d6:61:c4:67:1d:d4:9f:e1:06:3b:b7:9c:6a: e7:fe:cc:c7:e4:f4:cb:c8:f5:01:07:a1:07:96:f0:f9:8f:6d: bc:48:0f:3a:28:cf:09:33:3c:d7:0d:17:04:6d:69:f2:48:da: a2:64:b0:53:7d:5c:51:70:ce:fc:f2:81:59:f2:6e:33:80:b5: 60:34:9b:b5:15:59:e4:7d:97:ff:7b:5b:83:00:ab:2b:45:4e: b5:3e:3e:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/We/Gnr7hHM1iMDrIx2H8pyqzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNTA0MjMwOTE3MDFaFw0yNTA0MjYxNjQwMDFaMDMxMTAvBgNV BAMTKDg4NDgzNUVFNUNBMDNFMzZFRUM0OTlCQkU4RjlGOUJCRDRBRDBENUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcxUOUVaKqSehhKN5fttC0lssT UQfwYitWaY/P9856DchonJRBc9igLfquTOtuP8DI/roGa0zlre81iNTqthCbfNsp KzIlfDZNVDgdevGc7XkH1Fh7Giha2AIr/tGBn/UxrRd82xIfOMKnMowrEpx3860G MjkEHuFCTvB81Aj0OkG+MOlz0FZnL3RspH8IVJ9ca/n6TN8nOi8tWtZgqN05ZJCt psR66gb66grpcgLEGPjNSLeJuWmWDQPeI/k0gevDd+dGJZMxUV1ZCScz5WmH7sMF 3NBtcA6Ly1EggF1a1pnxinNo9sz82ujHFWz/qRsujoV8sSWWsEpuZsh/J1WJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiEg17lygPjbuxJm76Pn5u9StDV8wHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNF NTA0MzFGMEY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpPev+/bSB0PCQFfFWNEArFn3NBQIiIsKX0 3Q3ghGpLHJAIP42NT/Y8oBcE0EGSZBzgI3BKI8QPwOP8sQ1D3Un87Bt7QyGabcxc GTekJnpdeA3xdub8MudqUaLV68lB1vUVq3Qm9/klsjhWaMwMbNVeAdvkGJjIWraf aFNnQmYAK/Fyf5ZJpE16TF2jdbtLBnHT9OFuRqf15zuu1PhSfBV8dXdfCKg+1mHE Zx3Un+EGO7ecauf+zMfk9MvI9QEHoQeW8PmPbbxIDzoozwkzPNcNFwRtafJI2qJk sFN9XFFwzvzygVnybjOAtWA0m7UVWeR9l/97W4MAqytFTrU+PuA= -----END CERTIFICATE-----Generated at Wed Apr 23 11:12:11 2025 by rpki-client on console.sobornost.net