$ rpki-client -vvf repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft File: AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft (raw, json) Hash identifier: pzMYoZMqkDK3EwJfGWayO0v5p2A8AnstC1xDMGfKoEc= Subject key identifier: E6:98:88:8B:F6:63:33:A3:EE:C9:F2:6B:FF:36:A3:1F:6D:AF:B7:CD Authority key identifier: AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A Certificate issuer: /CN=AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A Certificate serial: 68A3039194E6ADAFD0DDFDE433353213CB49301B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft Manifest number: 01CC Signing time: Thu 24 Jul 2025 07:11:00 +0000 Manifest this update: Thu 24 Jul 2025 07:06:00 +0000 Manifest next update: Sun 27 Jul 2025 12:26:00 +0000 Files and hashes: 1: AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.crl (hash: N0VwdxCrnhe0dDl+SYr8WoNe7XY7gEz6OfkeVvJPFsA=) 2: 3130332e31362e3131382e302f32342d3234203d3e203538343832.roa (hash: 3HpveIUji/yGXxd6A7E25a68ih7xpSXC0HbMNiS9gf8=) 3: 3130332e31362e3131392e302f32342d3234203d3e203538343832.roa (hash: iIFNnUZAfBSC2JC2quMbIzQPZ9X9kdvxbhVTHCspiQ8=) 4: 3130332e31362e3131382e302f32332d3234203d3e203538343832.roa (hash: AuH6wcmTe35Ftvz/M9tQjD+vF5uD+/FeugqKMJqrodI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.crl rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 12:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a3:03:91:94:e6:ad:af:d0:dd:fd:e4:33:35:32:13:cb:49:30:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A Validity Not Before: Jul 24 07:06:00 2025 GMT Not After : Jul 27 12:26:00 2025 GMT Subject: CN=E698888BF66333A3EEC9F26BFF36A31F6DAFB7CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:c6:cb:da:99:1b:5a:1e:5d:42:b5:b1:59: eb:3c:23:e0:1c:d8:dd:0e:f1:f7:e6:a7:bb:56:84: c0:2d:5a:2d:1c:60:98:06:8a:e1:61:b2:ef:79:60: 36:cb:8a:2d:d7:05:78:bb:3c:2e:eb:12:bd:6b:29: 06:92:4b:12:de:9c:fc:f7:ce:e3:42:40:59:e2:fe: bb:f5:6c:2f:46:7b:4c:d9:a8:dc:22:ea:e6:6c:96: 38:9f:3a:84:62:ca:8d:d8:33:a6:cf:ed:16:e4:17: af:11:84:2a:81:f5:e6:2b:66:76:dc:cc:52:74:96: 52:95:38:52:e4:a0:a5:00:52:c2:84:25:17:7b:a6: 50:1e:28:79:71:30:ea:f6:b8:46:70:50:17:51:a4: cb:84:fe:f3:6e:f2:0c:fc:72:91:d2:04:dc:ff:c0: 30:3f:0f:de:d5:bf:5d:c3:33:85:9e:df:1b:a1:2d: fb:d3:14:4b:62:fb:b6:87:f2:e3:8e:94:75:c5:04: ae:f1:e5:52:4a:52:cd:76:87:44:fd:92:f6:bd:e5: ff:86:c9:79:5d:56:ab:3d:8a:f9:ec:62:ea:20:6d: 0e:0e:8f:91:1b:cb:33:9d:86:49:4e:b8:11:a7:9e: 7c:26:97:e8:e6:b4:68:19:1c:88:6f:a2:64:56:5f: 56:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:98:88:8B:F6:63:33:A3:EE:C9:F2:6B:FF:36:A3:1F:6D:AF:B7:CD X509v3 Authority Key Identifier: keyid:AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9a:23:16:b7:b3:7f:a1:fc:05:9e:9b:da:a2:35:92:83:dc: 7d:e7:76:70:46:c8:85:95:ff:27:b3:99:df:85:fc:47:cb:df: 03:00:74:e4:32:66:bc:0a:ec:75:27:a2:53:07:b6:f8:50:3c: c7:b1:c1:7b:a5:34:3c:b2:b6:4d:1a:2d:6d:ad:a2:17:4b:d5: 21:e6:d6:9f:21:69:ca:04:75:9c:86:24:4c:51:6f:3f:fd:77: a5:0e:1f:f0:0d:cf:3e:5e:3a:71:43:c2:a4:59:cf:65:ac:db: ee:2f:56:58:da:a2:d2:6e:59:bd:57:67:ad:07:67:83:65:03: d4:0f:19:78:4c:ce:bf:63:1d:a3:05:13:fc:db:16:ca:14:0a: bc:55:03:a0:a7:6f:86:95:42:c7:f0:33:f1:02:9d:91:ac:04: 4e:7f:7c:8a:1c:66:db:a6:12:d4:e9:dc:08:f4:4e:7c:da:2a: 65:dc:63:59:00:dc:c2:e1:2d:79:43:22:79:15:8c:dc:58:96: cc:ed:7f:cf:89:88:11:4c:59:56:91:8b:ad:1e:7b:48:de:40: 3e:ab:8c:96:f7:5d:28:64:bd:c7:d2:ac:e0:b6:8b:ac:ab:e1: 80:f2:19:bf:db:c9:f8:95:82:6e:a6:32:7b:72:b5:8d:d5:1f: d9:95:90:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKMDkZTmra/Q3f3kMzUyE8tJMBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzQzNGQTFEMzI3NUUyODRCMDdBODRFQzk1MDg1REY5 QkM1QTIyQTAeFw0yNTA3MjQwNzA2MDBaFw0yNTA3MjcxMjI2MDBaMDMxMTAvBgNV BAMTKEU2OTg4ODhCRjY2MzMzQTNFRUM5RjI2QkZGMzZBMzFGNkRBRkI3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqF8bL2pkbWh5dQrWxWes8I+Ac 2N0O8ffmp7tWhMAtWi0cYJgGiuFhsu95YDbLii3XBXi7PC7rEr1rKQaSSxLenPz3 zuNCQFni/rv1bC9Ge0zZqNwi6uZsljifOoRiyo3YM6bP7RbkF68RhCqB9eYrZnbc zFJ0llKVOFLkoKUAUsKEJRd7plAeKHlxMOr2uEZwUBdRpMuE/vNu8gz8cpHSBNz/ wDA/D97Vv13DM4We3xuhLfvTFEti+7aH8uOOlHXFBK7x5VJKUs12h0T9kva95f+G yXldVqs9ivnsYuogbQ4Oj5EbyzOdhklOuBGnnnwml+jmtGgZHIhvomRWX1bdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5piIi/ZjM6PuyfJr/zajH22vt80wHwYDVR0j BBgwFoAUqzw/odMnXihLB6hOyVCF35vFoiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OTg3OTc0NC1iODE4LTQ2ZGMtOGQ5Zi05YzM1NzkzZjRjYmIvMC9BQjNDM0ZBMUQz Mjc1RTI4NEIwN0E4NEVDOTUwODVERjlCQzVBMjJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUIzQzNGQTFEMzI3NUUyODRCMDdBODRFQzk1MDg1REY5QkM1 QTIyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTk4Nzk3NDQtYjgxOC00NmRjLThk OWYtOWMzNTc5M2Y0Y2JiLzAvQUIzQzNGQTFEMzI3NUUyODRCMDdBODRFQzk1MDg1 REY5QkM1QTIyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiaIxa3s3+h/AWem9qiNZKD3H3ndnBGyIWV /yezmd+F/EfL3wMAdOQyZrwK7HUnolMHtvhQPMexwXulNDyytk0aLW2tohdL1SHm 1p8hacoEdZyGJExRbz/9d6UOH/ANzz5eOnFDwqRZz2Ws2+4vVljaotJuWb1XZ60H Z4NlA9QPGXhMzr9jHaMFE/zbFsoUCrxVA6Cnb4aVQsfwM/ECnZGsBE5/fIocZtum EtTp3Aj0TnzaKmXcY1kA3MLhLXlDInkVjNxYlsztf8+JiBFMWVaRi60ee0jeQD6r jJb3XShkvcfSrOC2i6yr4YDyGb/byfiVgm6mMntytY3VH9mVkLI= -----END CERTIFICATE-----Generated at Sat Jul 26 06:42:36 2025 by rpki-client