$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft File: AB2FF74AE26C6B3D3C718834D700985B9160087D.mft (raw, json) Hash identifier: fsCtuae9QnqEXuCIYpz7CN7kOboMezuYZ2KuM6YHZdc= Subject key identifier: 69:3C:95:46:B7:13:F8:AE:56:F9:17:E8:B4:60:E0:A6:75:EC:86:EC Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D Certificate issuer: /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Certificate serial: 5323C769C2026D600AD36F2F24723A382B734DD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft Manifest number: 01FA Signing time: Thu 21 Aug 2025 06:00:44 +0000 Manifest this update: Thu 21 Aug 2025 05:55:43 +0000 Manifest next update: Sun 24 Aug 2025 12:41:43 +0000 Files and hashes: 1: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: retIejZmjxqeZ5EcuYs/MJj74Hq3rSQEAaNJNEwhn2M=) 2: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: dgSXFEbFutIQLMHvwiuNx4TvCSZlmBK0qYA1AXK8tdM=) 3: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: 1d1jglJQYamlwXmUTi2MB59pQxl/KjaHk7dpKNXOmuU=) 4: AB2FF74AE26C6B3D3C718834D700985B9160087D.crl (hash: wYUYbboUUVxSQnAsa9OodWoWy7Ly338ZdDL2Ov3YafI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:23:c7:69:c2:02:6d:60:0a:d3:6f:2f:24:72:3a:38:2b:73:4d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Validity Not Before: Aug 21 05:55:43 2025 GMT Not After : Aug 24 12:41:43 2025 GMT Subject: CN=693C9546B713F8AE56F917E8B460E0A675EC86EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:02:d5:f3:91:d4:be:bf:48:4c:24:88:d9:36: e5:b2:bc:8a:d6:d4:33:47:d7:1e:10:7d:ef:cb:8a: cc:16:28:95:56:ea:75:7a:99:25:0e:4e:dc:56:81: 29:59:11:fc:ff:60:47:80:8a:dc:8c:67:9b:47:04: 93:23:eb:00:b1:6f:df:47:1a:ff:1c:89:01:d8:fc: 44:f9:bc:eb:41:2b:d5:e9:83:22:40:c8:6b:d1:3e: c6:b5:79:ae:bb:5e:6f:22:cd:5d:51:61:38:11:7b: 72:75:8d:b7:a6:01:d6:4b:2d:7c:da:f2:49:95:63: 4c:57:f4:6e:06:20:85:0d:d4:41:02:80:33:2a:95: 0d:ed:9f:1f:48:65:61:6c:8a:26:29:c7:b9:a2:ac: 74:fc:24:31:ad:6d:07:34:38:b1:07:df:f5:08:f6: f4:37:28:06:ed:0a:c1:eb:16:b8:e0:b2:2d:e0:2d: f0:fd:7c:d0:d6:d2:3d:fa:50:03:d1:25:61:9e:41: 2a:32:33:b2:5f:57:e2:d2:ee:13:bb:1a:df:48:ee: 35:4b:38:e0:20:4d:9a:c6:d4:fc:ab:a0:53:30:67: 66:cc:a9:a5:0b:25:37:45:2a:63:02:c5:6a:4d:a8: 4a:7f:d3:bd:20:15:ba:67:41:43:cc:04:fd:3d:25: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3C:95:46:B7:13:F8:AE:56:F9:17:E8:B4:60:E0:A6:75:EC:86:EC X509v3 Authority Key Identifier: keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a9:26:74:34:66:84:6d:d6:ae:ca:ed:4f:68:6c:39:5e:f6: 11:6f:b9:b3:7b:cd:5d:8c:2f:d7:df:f8:96:aa:c4:74:a4:c6: 59:24:78:13:41:69:0c:5c:0d:29:df:9d:ee:30:19:b0:5d:42: d5:5c:a1:00:4a:5d:7e:6f:b9:9d:9f:bf:41:62:f0:6d:01:24: 84:01:e8:ca:2d:68:5f:23:96:b8:b3:aa:fb:29:22:b4:23:24: ca:05:9a:58:23:0a:30:40:5c:4a:79:98:12:5c:45:ef:fa:f0: db:3c:35:8d:43:e1:aa:79:bf:fe:59:77:0e:04:e9:01:a1:c5: 0b:c2:5b:c6:bc:d2:16:05:f4:6b:9f:55:bb:29:5e:d5:75:90: 64:6c:82:86:2c:e0:82:40:35:96:40:38:a6:a7:ee:d2:4b:bd: 4d:cd:a5:79:b1:aa:6c:01:22:72:81:cc:2e:c0:c2:cc:9b:2c: 27:0b:b6:31:76:d5:f4:fd:f5:63:06:37:4c:90:3b:78:2a:90: 94:4c:82:1a:ba:10:4d:56:75:7f:8a:33:3c:5f:1b:64:fd:d1: a5:a0:24:70:7d:c2:95:a2:d3:c4:8d:85:98:d2:44:e3:09:d3: 6b:20:5c:72:ad:88:97:2a:b8:3a:96:d5:83:bb:8f:7e:34:99: 01:21:d9:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUyPHacICbWAK028vJHI6OCtzTdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5 MTYwMDg3RDAeFw0yNTA4MjEwNTU1NDNaFw0yNTA4MjQxMjQxNDNaMDMxMTAvBgNV BAMTKDY5M0M5NTQ2QjcxM0Y4QUU1NkY5MTdFOEI0NjBFMEE2NzVFQzg2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWAtXzkdS+v0hMJIjZNuWyvIrW 1DNH1x4Qfe/LiswWKJVW6nV6mSUOTtxWgSlZEfz/YEeAityMZ5tHBJMj6wCxb99H Gv8ciQHY/ET5vOtBK9XpgyJAyGvRPsa1ea67Xm8izV1RYTgRe3J1jbemAdZLLXza 8kmVY0xX9G4GIIUN1EECgDMqlQ3tnx9IZWFsiiYpx7mirHT8JDGtbQc0OLEH3/UI 9vQ3KAbtCsHrFrjgsi3gLfD9fNDW0j36UAPRJWGeQSoyM7JfV+LS7hO7Gt9I7jVL OOAgTZrG1PyroFMwZ2bMqaULJTdFKmMCxWpNqEp/070gFbpnQUPMBP09JbPnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaTyVRrcT+K5W+RfotGDgpnXshuwwHwYDVR0j BBgwFoAUqy/3SuJsaz08cYg01wCYW5FgCH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTRiYjRjOC02ZmNmLTRmZmYtYmRjYy1mZTFmY2NlZTEwNDUvMC9BQjJGRjc0QUUy NkM2QjNEM0M3MTg4MzRENzAwOTg1QjkxNjAwODdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5MTYw MDg3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4 NUI5MTYwMDg3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6pJnQ0ZoRt1q7K7U9obDle9hFvubN7zV2M L9ff+JaqxHSkxlkkeBNBaQxcDSnfne4wGbBdQtVcoQBKXX5vuZ2fv0Fi8G0BJIQB 6MotaF8jlrizqvspIrQjJMoFmlgjCjBAXEp5mBJcRe/68Ns8NY1D4ap5v/5Zdw4E 6QGhxQvCW8a80hYF9GufVbspXtV1kGRsgoYs4IJANZZAOKan7tJLvU3NpXmxqmwB InKBzC7AwsybLCcLtjF21fT99WMGN0yQO3gqkJRMghq6EE1WdX+KMzxfG2T90aWg JHB9wpWi08SNhZjSROMJ02sgXHKtiJcquDqW1YO7j340mQEh2eQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:06:48 2025 by rpki-client