$ rpki-client -vvf repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft File: ABF793B534686EC2D5820CF153E43AAEF088BE41.mft (raw, json) Hash identifier: QMmx7N2njoKi9B7HpeebUTpB6acxH/95j4JID/p+Kvc= Subject key identifier: 1B:A0:E2:3F:C4:57:66:89:2D:2F:AA:DD:FD:0D:8B:95:D0:8C:84:86 Authority key identifier: AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41 Certificate issuer: /CN=ABF793B534686EC2D5820CF153E43AAEF088BE41 Certificate serial: 49A0BB27A6A32D027321E47E6F8C466FA7BC47F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft Manifest number: C1 Signing time: Fri 22 Aug 2025 16:51:02 +0000 Manifest this update: Fri 22 Aug 2025 16:46:02 +0000 Manifest next update: Tue 26 Aug 2025 03:55:02 +0000 Files and hashes: 1: ABF793B534686EC2D5820CF153E43AAEF088BE41.crl (hash: TGWo4CjiQaPQzCHkt6VALROQayu+6bS4AoozoY9aC0Q=) 2: 3135372e36362e3133332e302f32342d3234203d3e20313431353831.roa (hash: /xnKIJqaqDL7/JOHF7yvMHhH3AHbZnnJNdDEJWnCAWk=) 3: 3135372e36362e3133322e302f32342d3234203d3e20313431353831.roa (hash: 1q7NOrpSqOPfD7Cashe/RHzQJ9w+1Pv/PeYY6p7iaT0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a0:bb:27:a6:a3:2d:02:73:21:e4:7e:6f:8c:46:6f:a7:bc:47:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABF793B534686EC2D5820CF153E43AAEF088BE41 Validity Not Before: Aug 22 16:46:02 2025 GMT Not After : Aug 26 03:55:02 2025 GMT Subject: CN=1BA0E23FC45766892D2FAADDFD0D8B95D08C8486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:1f:c3:52:05:6d:42:98:a6:ae:53:28:ba: 84:c8:54:2e:c2:0a:de:07:b2:d3:09:a0:85:05:85: e1:90:27:36:08:14:32:4d:0c:3d:4d:20:99:56:a0: 8f:b4:7f:81:9b:23:d6:ef:3a:32:46:55:64:50:af: 55:aa:a6:d0:b6:28:b5:3f:f9:e0:3b:1f:c8:f2:c6: 34:c4:92:1d:6d:aa:86:41:63:02:dc:91:c9:87:eb: 47:31:a5:81:ac:f4:96:d5:7b:54:fd:b7:90:cc:f3: ef:0c:2c:ed:8e:23:71:44:bd:16:26:2d:1a:05:e8: 38:6d:ba:ad:07:21:4c:a9:55:ea:af:09:2f:94:60: 24:f8:dd:41:22:14:e0:d6:4f:f2:2b:2b:ad:8b:2b: 3d:48:10:d0:f5:b6:fb:18:42:9b:c6:89:5b:e2:9e: 21:ca:23:9d:c4:f9:57:c0:05:29:19:f1:e9:7f:f8: 76:9b:97:01:0a:b2:40:1c:3c:ff:17:56:10:b3:20: e2:99:92:e0:93:29:c1:35:14:0b:f3:aa:57:e0:72: 66:7f:d2:f7:77:12:35:91:a3:40:d9:30:7e:33:f4: 55:31:1d:06:2e:c1:20:49:6d:07:3d:44:8d:29:53: 45:b5:02:55:03:d3:26:1e:fb:b9:da:54:68:e8:c3: 1d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A0:E2:3F:C4:57:66:89:2D:2F:AA:DD:FD:0D:8B:95:D0:8C:84:86 X509v3 Authority Key Identifier: keyid:AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4e:bc:1a:40:cc:bb:af:55:06:7a:23:ef:43:ef:bd:de:87: a1:db:5d:6a:5d:a7:34:88:4e:cd:90:64:93:02:2d:c9:02:b5: ea:a9:64:83:e0:58:29:d5:22:bd:18:9c:f1:45:be:5a:3f:fb: 25:e0:67:60:5c:f6:3a:43:91:e8:93:72:6d:0d:aa:8d:c8:2a: 9e:bd:67:d8:0f:62:9c:8b:ee:71:c3:5c:15:df:3d:a8:43:45: d6:58:24:7f:3a:8b:31:6b:c7:71:df:22:76:61:5f:56:23:82: 6d:e1:8d:c6:68:db:30:86:a1:b7:c7:08:9c:a6:7e:78:56:2a: 1e:7c:42:ee:cc:3b:3e:54:0e:51:c5:2c:48:a5:4c:30:23:88: de:ea:24:66:3b:05:6d:99:6e:75:e8:42:d2:51:a8:03:e7:e0: fd:89:2a:06:8d:17:4b:9a:26:63:f0:1b:ee:7a:d7:67:c9:ff: e5:51:ac:d0:a6:b3:8e:62:a2:7b:92:7a:ee:ba:33:bf:20:f2: 14:dc:64:c0:bb:14:6c:50:8e:22:12:41:b7:bb:a8:7a:ea:88: f4:c9:97:fa:4f:96:66:b0:2c:b2:b4:04:e8:8f:8f:5c:0c:64: e5:3b:bf:12:69:08:9b:ca:4b:48:33:8d:7c:ca:77:b6:dd:a9: 5b:f6:8d:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSaC7J6ajLQJzIeR+b4xGb6e8R/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNBQUVG MDg4QkU0MTAeFw0yNTA4MjIxNjQ2MDJaFw0yNTA4MjYwMzU1MDJaMDMxMTAvBgNV BAMTKDFCQTBFMjNGQzQ1NzY2ODkyRDJGQUFEREZEMEQ4Qjk1RDA4Qzg0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQeB/DUgVtQpimrlMouoTIVC7C Ct4HstMJoIUFheGQJzYIFDJNDD1NIJlWoI+0f4GbI9bvOjJGVWRQr1WqptC2KLU/ +eA7H8jyxjTEkh1tqoZBYwLckcmH60cxpYGs9JbVe1T9t5DM8+8MLO2OI3FEvRYm LRoF6Dhtuq0HIUypVeqvCS+UYCT43UEiFODWT/IrK62LKz1IEND1tvsYQpvGiVvi niHKI53E+VfABSkZ8el/+HablwEKskAcPP8XVhCzIOKZkuCTKcE1FAvzqlfgcmZ/ 0vd3EjWRo0DZMH4z9FUxHQYuwSBJbQc9RI0pU0W1AlUD0yYe+7naVGjowx2bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG6DiP8RXZoktL6rd/Q2LldCMhIYwHwYDVR0j BBgwFoAUq/eTtTRobsLVggzxU+Q6rvCIvkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWE0Yjc4Mi1jMzdmLTQzNzktYThhNi00ZGE1ZDgyYjIzOWYvMC9BQkY3OTNCNTM0 Njg2RUMyRDU4MjBDRjE1M0U0M0FBRUYwODhCRTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNBQUVGMDg4 QkU0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNB QUVGMDg4QkU0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpOvBpAzLuvVQZ6I+9D773eh6HbXWpdpzSI Ts2QZJMCLckCteqpZIPgWCnVIr0YnPFFvlo/+yXgZ2Bc9jpDkeiTcm0Nqo3IKp69 Z9gPYpyL7nHDXBXfPahDRdZYJH86izFrx3HfInZhX1Yjgm3hjcZo2zCGobfHCJym fnhWKh58Qu7MOz5UDlHFLEilTDAjiN7qJGY7BW2ZbnXoQtJRqAPn4P2JKgaNF0ua JmPwG+5612fJ/+VRrNCms45ionuSeu66M78g8hTcZMC7FGxQjiISQbe7qHrqiPTJ l/pPlmawLLK0BOiPj1wMZOU7vxJpCJvKS0gzjXzKd7bdqVv2jQg= -----END CERTIFICATE-----Generated at Sat Aug 23 22:50:39 2025 by rpki-client