$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: enje1iuOwG5Ux/798G+8LMIOh2uROOmWeX93+7TxVUo= Subject key identifier: 6D:D6:B4:BD:D8:8E:3E:37:EE:30:A2:EA:AC:31:EC:90:1A:20:F9:63 Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 09B61E591111D80B025071CA909B9D1B380C8F35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 0513 Signing time: Sat 18 Oct 2025 03:21:15 +0000 Manifest this update: Sat 18 Oct 2025 03:16:15 +0000 Manifest next update: Tue 21 Oct 2025 13:22:15 +0000 Files and hashes: 1: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: HHh4yWOPjf+3eFvvhURi2TZowgG86xttRK9+B+PgPYQ=) 2: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: Lzfigfni3idgdtHBThHxyDsy5iHZVzWBL0vG8AZ5e0A=) 3: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: GtPRtP464WpAY5mEznX+MG2Y26KpfK9+iuhXKPKnbLI=) 4: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: sZdVNByPzhJV9m9Y9uWw0VmWp8VvlsFeFU25A1LbDYY=) 5: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: dUBpU1ehIxbV6F618KP38lS7LkigxBC/nUuk9FmPRks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b6:1e:59:11:11:d8:0b:02:50:71:ca:90:9b:9d:1b:38:0c:8f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Oct 18 03:16:15 2025 GMT Not After : Oct 21 13:22:15 2025 GMT Subject: CN=6DD6B4BDD88E3E37EE30A2EAAC31EC901A20F963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:c8:d7:c7:cf:6c:7e:7c:fb:6d:d3:51:91: f7:d4:52:70:d7:b9:9d:33:f1:9e:9a:b7:1c:f8:b8: 83:c6:7a:97:73:d8:71:d6:97:50:a7:bf:f5:a2:a1: b6:bd:54:ca:af:86:ad:b4:6a:ec:ef:cd:da:cd:ad: 31:fa:92:fe:92:a4:54:fa:17:92:36:a9:63:6d:bb: e4:45:bb:6d:30:de:8c:ba:3c:b0:53:64:83:9b:6e: d1:7e:8c:06:76:5f:53:de:6b:59:13:25:f0:dc:33: dd:7f:6f:89:ed:98:f5:fa:e7:2e:74:97:9d:d5:fd: 0b:ea:65:03:92:eb:a0:47:54:d1:66:0c:38:29:9b: 7d:09:43:01:25:fb:10:e5:b4:6b:19:7a:f8:3f:e6: f7:b9:94:e0:f0:39:4d:53:c1:d2:f1:0b:09:bc:23: 21:44:2c:9f:35:bc:b7:9a:5b:09:33:43:3e:38:1c: 3f:a2:9b:9f:11:5d:1f:63:5c:aa:40:5f:d6:bb:32: f5:d6:8a:63:58:a2:32:71:f2:63:4e:cb:c2:dd:b6: 0f:cb:fe:d0:64:4c:1d:42:39:11:88:87:5c:0d:fc: f9:96:36:a4:81:87:a5:ef:a0:f9:23:cf:18:2b:b5: 02:c6:c6:ac:34:46:65:6c:6c:0e:de:6a:3a:ab:b4: 08:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D6:B4:BD:D8:8E:3E:37:EE:30:A2:EA:AC:31:EC:90:1A:20:F9:63 X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6f:69:7b:09:4d:8a:04:d8:50:5a:3a:20:6f:dd:cf:64:71: 42:88:1f:b3:86:8d:0f:4c:e9:dc:ad:5d:6c:f4:48:6d:f6:4a: 7e:09:37:71:56:71:1c:e2:8d:27:4f:e7:b2:72:27:6a:4f:11: 46:ba:d1:5f:81:94:17:c7:d1:48:03:59:00:05:c3:79:68:be: 4c:78:3c:be:ee:c0:72:72:6a:ca:b5:77:15:05:c7:10:c3:62: df:1e:b7:5a:05:a8:27:ce:c9:aa:f3:77:60:88:ba:fa:de:6d: 7c:d8:20:57:fe:17:89:56:3f:4a:2c:be:41:db:53:6e:a3:23: 4b:45:57:9a:72:be:19:92:19:ce:0f:62:bb:da:63:c6:aa:9b: 6b:f5:97:07:3e:c7:f7:c3:f6:16:d0:f3:59:fb:2e:68:35:3e: 72:af:a6:eb:11:08:36:ea:a7:f6:76:03:fb:49:3c:d9:bf:ca: 9f:a4:cf:3e:8c:89:48:fe:d6:62:e1:d0:bf:70:b8:d2:27:9d: b1:1b:81:38:ac:02:ad:50:ef:e2:8f:21:2d:e0:19:8c:9a:d1: df:fd:8b:7c:aa:d7:f6:ca:e6:0e:1e:b6:88:64:06:9a:a6:e9: b0:b5:b3:ea:60:6c:cc:49:f5:86:1e:40:28:12:9f:45:57:09: 7b:9a:98:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbYeWRER2AsCUHHKkJudGzgMjzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNTEwMTgwMzE2MTVaFw0yNTEwMjExMzIyMTVaMDMxMTAvBgNV BAMTKDZERDZCNEJERDg4RTNFMzdFRTMwQTJFQUFDMzFFQzkwMUEyMEY5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFI8jXx89sfnz7bdNRkffUUnDX uZ0z8Z6atxz4uIPGepdz2HHWl1Cnv/Wioba9VMqvhq20auzvzdrNrTH6kv6SpFT6 F5I2qWNtu+RFu20w3oy6PLBTZIObbtF+jAZ2X1Pea1kTJfDcM91/b4ntmPX65y50 l53V/QvqZQOS66BHVNFmDDgpm30JQwEl+xDltGsZevg/5ve5lODwOU1TwdLxCwm8 IyFELJ81vLeaWwkzQz44HD+im58RXR9jXKpAX9a7MvXWimNYojJx8mNOy8Ldtg/L /tBkTB1CORGIh1wN/PmWNqSBh6XvoPkjzxgrtQLGxqw0RmVsbA7eajqrtAiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbda0vdiOPjfuMKLqrDHskBog+WMwHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxvaXsJTYoE2FBaOiBv3c9kcUKIH7OGjQ9M 6dytXWz0SG32Sn4JN3FWcRzijSdP57JyJ2pPEUa60V+BlBfH0UgDWQAFw3lovkx4 PL7uwHJyasq1dxUFxxDDYt8et1oFqCfOyarzd2CIuvrebXzYIFf+F4lWP0osvkHb U26jI0tFV5pyvhmSGc4PYrvaY8aqm2v1lwc+x/fD9hbQ81n7Lmg1PnKvpusRCDbq p/Z2A/tJPNm/yp+kzz6MiUj+1mLh0L9wuNInnbEbgTisAq1Q7+KPIS3gGYya0d/9 i3yq1/bK5g4etohkBpqm6bC1s+pgbMxJ9YYeQCgSn0VXCXuamFw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:48 2025 by rpki-client