$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft File: AB2FF74AE26C6B3D3C718834D700985B9160087D.mft (raw, json) Hash identifier: OF8Qer7LgcdVZahUYdrA3mYf/oyMsTvWvK1rxbnAsQY= Subject key identifier: 9F:BF:89:B4:EE:1A:C8:CE:15:39:4F:DB:A9:48:A0:95:01:CF:22:E2 Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D Certificate issuer: /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Certificate serial: 47B5D76A1DE9770AB88A1B374AE36AEA8A29208F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft Manifest number: 0214 Signing time: Sun 19 Oct 2025 04:30:43 +0000 Manifest this update: Sun 19 Oct 2025 04:25:43 +0000 Manifest next update: Wed 22 Oct 2025 13:42:43 +0000 Files and hashes: 1: AB2FF74AE26C6B3D3C718834D700985B9160087D.crl (hash: 7IldE0tArwkFOFQmNUVq8xwgP1q0HaIAXRoWhQyaA5M=) 2: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: retIejZmjxqeZ5EcuYs/MJj74Hq3rSQEAaNJNEwhn2M=) 3: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: 1d1jglJQYamlwXmUTi2MB59pQxl/KjaHk7dpKNXOmuU=) 4: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: dgSXFEbFutIQLMHvwiuNx4TvCSZlmBK0qYA1AXK8tdM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b5:d7:6a:1d:e9:77:0a:b8:8a:1b:37:4a:e3:6a:ea:8a:29:20:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Validity Not Before: Oct 19 04:25:43 2025 GMT Not After : Oct 22 13:42:43 2025 GMT Subject: CN=9FBF89B4EE1AC8CE15394FDBA948A09501CF22E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:36:62:90:fa:97:b9:d8:3c:a2:ab:2c:e7:f2: ad:14:ff:2d:d2:f9:58:4f:3b:99:57:36:e0:ae:97: 03:57:6a:f3:40:42:4f:ae:7d:48:7a:00:8a:f9:87: ea:1e:76:a9:85:3b:93:e0:68:77:73:df:ba:dc:d9: fa:cd:a2:16:d2:03:87:65:17:94:52:9e:ae:9b:67: 63:fc:c2:45:e2:19:38:81:08:f3:32:ac:b3:55:b9: 20:5d:71:cd:35:b9:b2:81:5e:61:84:91:f7:d5:53: a5:5d:27:94:60:40:49:ef:40:71:cc:13:09:0f:f2: dc:02:56:18:ed:5f:0c:d4:55:b8:b7:c1:4a:54:fc: af:87:b3:3d:17:13:e5:67:29:db:9b:be:74:7f:d1: a9:69:c2:a6:51:17:55:61:d3:17:87:b0:f5:68:d5: 2d:1f:c9:6a:a2:1b:88:67:f0:ec:d9:6d:57:d7:65: 33:c6:7c:eb:68:c6:eb:16:62:34:7d:3d:ab:48:79: 1d:96:d7:36:5e:c0:da:7b:13:5a:44:fa:ae:df:61: bd:de:65:2c:a3:d0:5c:78:b5:11:54:6c:11:3c:39: 30:f6:cf:b2:39:21:76:2c:86:21:b3:8d:6a:a5:d9: ee:ac:d8:f5:cb:84:3c:f7:09:c8:9d:08:f9:0c:63: 80:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BF:89:B4:EE:1A:C8:CE:15:39:4F:DB:A9:48:A0:95:01:CF:22:E2 X509v3 Authority Key Identifier: keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:db:b0:1b:29:03:29:14:04:0f:28:c4:47:db:0d:6e:52:f8: 7d:43:77:33:6e:58:d4:3c:ed:3f:06:be:bf:df:fc:60:23:4d: ab:b2:82:4a:af:28:ab:ce:7e:97:77:99:a3:1f:1d:f7:97:0c: 05:fd:b8:2e:17:3c:e1:d8:89:66:e7:40:c1:2f:a6:e0:0f:8f: 14:4a:f2:36:e1:8d:9c:69:ff:fb:58:9a:58:f1:df:16:e9:ce: 79:60:d6:63:bf:f3:a4:ec:0a:09:dc:8b:62:cf:50:43:27:59: f9:1c:2d:ce:d2:7b:27:1a:60:9d:f3:16:c1:17:09:80:9a:42: 68:b7:c0:2b:a4:d7:b6:c9:22:ce:90:84:b0:77:b4:29:82:13: 26:b9:26:c1:e6:72:21:38:68:83:58:d0:c4:63:8f:ab:7b:4e: 20:3f:20:8f:35:08:95:98:e0:15:a9:92:55:a8:16:09:d6:71: 73:24:f0:2f:80:e4:10:cc:e9:90:36:2e:4b:30:3f:42:55:e1: df:fe:c9:0b:21:c3:7f:c9:7d:d1:6d:f8:e5:0c:de:7d:b5:ff: 84:2c:6e:16:24:b1:20:73:7c:93:b9:99:82:75:7d:50:39:e7: c9:1e:c7:d0:17:89:fa:9c:34:df:20:28:94:43:8b:d2:41:18: a4:c7:17:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR7XXah3pdwq4ihs3SuNq6oopII8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5 MTYwMDg3RDAeFw0yNTEwMTkwNDI1NDNaFw0yNTEwMjIxMzQyNDNaMDMxMTAvBgNV BAMTKDlGQkY4OUI0RUUxQUM4Q0UxNTM5NEZEQkE5NDhBMDk1MDFDRjIyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaNmKQ+pe52Dyiqyzn8q0U/y3S +VhPO5lXNuCulwNXavNAQk+ufUh6AIr5h+oedqmFO5PgaHdz37rc2frNohbSA4dl F5RSnq6bZ2P8wkXiGTiBCPMyrLNVuSBdcc01ubKBXmGEkffVU6VdJ5RgQEnvQHHM EwkP8twCVhjtXwzUVbi3wUpU/K+Hsz0XE+VnKdubvnR/0alpwqZRF1Vh0xeHsPVo 1S0fyWqiG4hn8OzZbVfXZTPGfOtoxusWYjR9PatIeR2W1zZewNp7E1pE+q7fYb3e ZSyj0Fx4tRFUbBE8OTD2z7I5IXYshiGzjWql2e6s2PXLhDz3CcidCPkMY4DRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn7+JtO4ayM4VOU/bqUiglQHPIuIwHwYDVR0j BBgwFoAUqy/3SuJsaz08cYg01wCYW5FgCH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTRiYjRjOC02ZmNmLTRmZmYtYmRjYy1mZTFmY2NlZTEwNDUvMC9BQjJGRjc0QUUy NkM2QjNEM0M3MTg4MzRENzAwOTg1QjkxNjAwODdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5MTYw MDg3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4 NUI5MTYwMDg3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADbsBspAykUBA8oxEfbDW5S+H1DdzNuWNQ8 7T8Gvr/f/GAjTauygkqvKKvOfpd3maMfHfeXDAX9uC4XPOHYiWbnQMEvpuAPjxRK 8jbhjZxp//tYmljx3xbpznlg1mO/86TsCgnci2LPUEMnWfkcLc7SeycaYJ3zFsEX CYCaQmi3wCuk17bJIs6QhLB3tCmCEya5JsHmciE4aINY0MRjj6t7TiA/II81CJWY 4BWpklWoFgnWcXMk8C+A5BDM6ZA2LkswP0JV4d/+yQshw3/JfdFt+OUM3n21/4Qs bhYksSBzfJO5mYJ1fVA558kex9AXifqcNN8gKJRDi9JBGKTHF7s= -----END CERTIFICATE-----Generated at Tue Oct 21 10:38:27 2025 by rpki-client