$ rpki-client -vvf repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft File: AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft (raw, json) Hash identifier: A0X6/fgoDln0FzHmt86+XCAMXYI7NFeWdVijFOYY9N4= Subject key identifier: 53:D7:81:80:05:C8:E5:4F:85:80:1F:D0:B4:12:FF:D8:4D:EC:8B:42 Authority key identifier: AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A Certificate issuer: /CN=AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A Certificate serial: 07A21895FF5D23D6A51FF8935475B1CB10A4380D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft Manifest number: 01D9 Signing time: Sat 23 Aug 2025 04:31:01 +0000 Manifest this update: Sat 23 Aug 2025 04:26:01 +0000 Manifest next update: Tue 26 Aug 2025 07:16:01 +0000 Files and hashes: 1: 3130332e31362e3131392e302f32342d3234203d3e203538343832.roa (hash: iIFNnUZAfBSC2JC2quMbIzQPZ9X9kdvxbhVTHCspiQ8=) 2: 3130332e31362e3131382e302f32342d3234203d3e203538343832.roa (hash: 3HpveIUji/yGXxd6A7E25a68ih7xpSXC0HbMNiS9gf8=) 3: AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.crl (hash: kz9K+n3KEtHjA1OVg1GKKdEs84Zke7eJ45GEmqXGI9s=) 4: 3130332e31362e3131382e302f32332d3234203d3e203538343832.roa (hash: AuH6wcmTe35Ftvz/M9tQjD+vF5uD+/FeugqKMJqrodI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.crl rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a2:18:95:ff:5d:23:d6:a5:1f:f8:93:54:75:b1:cb:10:a4:38:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A Validity Not Before: Aug 23 04:26:01 2025 GMT Not After : Aug 26 07:16:01 2025 GMT Subject: CN=53D7818005C8E54F85801FD0B412FFD84DEC8B42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:43:ee:f5:aa:fe:f0:c4:cf:98:2c:05:1c:00: 41:22:3d:cd:73:01:c9:3d:46:1c:3b:ad:3a:27:a0: ca:45:bb:40:27:2a:21:eb:23:1e:49:fd:d3:51:b7: 3f:b2:21:d4:a2:ba:8e:1e:8c:71:01:7b:3d:3c:e3: 16:fd:d7:8f:f6:d5:98:75:00:4a:94:77:40:c4:ef: e7:c3:5e:86:98:da:ca:0a:63:a3:77:3a:e8:c9:da: a3:1d:df:80:bb:89:40:a7:37:42:dc:78:c1:7f:a3: 82:a8:a1:d9:ef:2e:d2:9b:ff:bd:7e:c2:d9:10:13: 32:00:ec:b4:fc:7f:4d:f2:7e:be:2b:e4:10:5b:75: b8:de:8c:b7:41:84:0e:c4:94:af:f7:08:94:01:e9: ae:f5:1e:b4:7d:cf:14:14:0c:39:26:6e:47:3e:d1: 76:ed:f8:07:49:98:84:df:37:bf:49:c8:04:50:25: 40:c4:3d:33:e4:d3:7e:e8:0e:42:58:31:22:68:c4: 9d:3c:e2:22:da:df:01:43:d9:2c:dd:61:54:30:2c: 80:d7:7b:de:5b:49:85:5f:9e:ce:94:d4:c9:a8:02: e3:a7:3b:8c:b2:c5:0b:33:2a:1a:bc:fd:16:18:c7: e7:31:e6:64:65:14:b1:6b:25:b0:6f:20:36:58:ff: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D7:81:80:05:C8:E5:4F:85:80:1F:D0:B4:12:FF:D8:4D:EC:8B:42 X509v3 Authority Key Identifier: keyid:AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f8:71:8f:8b:1a:0f:b0:29:9d:fd:4f:00:b6:da:55:e3:e3: 8d:62:c6:6c:56:88:74:3a:a3:a3:0e:27:82:46:82:e1:b8:df: 99:b5:73:e1:81:53:37:4a:f3:94:25:2a:43:17:ba:a4:3a:ae: 8c:80:f5:0b:ec:e2:36:26:9e:e1:a2:de:8a:6f:c1:96:8f:72: 9a:d7:f5:cd:2e:1f:33:b8:9b:a7:d1:29:d8:1f:72:29:77:dc: 9f:03:89:3f:b3:da:d5:9e:eb:e6:24:ee:40:39:8e:bc:0b:b1: ca:b0:d7:5e:8f:12:a3:de:85:1a:3f:0b:33:e8:3a:2b:dd:84: c2:50:3b:15:a7:c8:33:82:dd:b3:cd:7f:80:13:51:20:c5:a9: 9f:8d:bf:06:ef:6c:6d:51:c7:94:69:52:34:d9:a0:46:f9:22: 79:01:2a:d7:f4:19:2b:85:25:32:b8:2b:7f:34:93:1e:e3:d3: c0:b4:6a:5d:44:9f:3b:f0:48:44:63:dd:c9:9b:a2:ba:75:16: 44:14:b0:3b:e9:43:f0:41:e3:3a:b4:db:98:1d:d7:ae:d0:91: 07:49:b0:4c:e5:2d:20:3a:f8:5d:0a:5f:1b:4c:46:39:cb:5d: a6:e3:a3:15:9a:ab:8f:3f:28:00:ea:96:f2:8e:75:b5:fc:60: ef:79:ab:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB6IYlf9dI9alH/iTVHWxyxCkOA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzQzNGQTFEMzI3NUUyODRCMDdBODRFQzk1MDg1REY5 QkM1QTIyQTAeFw0yNTA4MjMwNDI2MDFaFw0yNTA4MjYwNzE2MDFaMDMxMTAvBgNV BAMTKDUzRDc4MTgwMDVDOEU1NEY4NTgwMUZEMEI0MTJGRkQ4NERFQzhCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfQ+71qv7wxM+YLAUcAEEiPc1z Ack9Rhw7rTonoMpFu0AnKiHrIx5J/dNRtz+yIdSiuo4ejHEBez084xb914/21Zh1 AEqUd0DE7+fDXoaY2soKY6N3OujJ2qMd34C7iUCnN0LceMF/o4KoodnvLtKb/71+ wtkQEzIA7LT8f03yfr4r5BBbdbjejLdBhA7ElK/3CJQB6a71HrR9zxQUDDkmbkc+ 0Xbt+AdJmITfN79JyARQJUDEPTPk037oDkJYMSJoxJ084iLa3wFD2SzdYVQwLIDX e95bSYVfns6U1MmoAuOnO4yyxQszKhq8/RYYx+cx5mRlFLFrJbBvIDZY/397AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU9eBgAXI5U+FgB/QtBL/2E3si0IwHwYDVR0j BBgwFoAUqzw/odMnXihLB6hOyVCF35vFoiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OTg3OTc0NC1iODE4LTQ2ZGMtOGQ5Zi05YzM1NzkzZjRjYmIvMC9BQjNDM0ZBMUQz Mjc1RTI4NEIwN0E4NEVDOTUwODVERjlCQzVBMjJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUIzQzNGQTFEMzI3NUUyODRCMDdBODRFQzk1MDg1REY5QkM1 QTIyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTk4Nzk3NDQtYjgxOC00NmRjLThk OWYtOWMzNTc5M2Y0Y2JiLzAvQUIzQzNGQTFEMzI3NUUyODRCMDdBODRFQzk1MDg1 REY5QkM1QTIyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACj4cY+LGg+wKZ39TwC22lXj441ixmxWiHQ6 o6MOJ4JGguG435m1c+GBUzdK85QlKkMXuqQ6royA9Qvs4jYmnuGi3opvwZaPcprX 9c0uHzO4m6fRKdgfcil33J8DiT+z2tWe6+Yk7kA5jrwLscqw116PEqPehRo/CzPo OivdhMJQOxWnyDOC3bPNf4ATUSDFqZ+NvwbvbG1Rx5RpUjTZoEb5InkBKtf0GSuF JTK4K380kx7j08C0al1EnzvwSERj3cmborp1FkQUsDvpQ/BB4zq025gd167QkQdJ sEzlLSA6+F0KXxtMRjnLXabjoxWaq48/KADqlvKOdbX8YO95q3w= -----END CERTIFICATE-----Generated at Sat Aug 23 13:41:12 2025 by rpki-client