$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft File: AB2FF74AE26C6B3D3C718834D700985B9160087D.mft (raw, json) Hash identifier: Xs7N8QR8fL1kRrl1V6oLW2LAmtagabhZPFjbHBKnnEk= Subject key identifier: 84:C8:B9:13:6C:9B:49:0F:E0:0B:F6:9C:EE:7B:FC:3E:F0:42:E3:DA Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D Certificate issuer: /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Certificate serial: 163CFDB226F7E2A850FC372CBD7A610AB4BF1BBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft Manifest number: 01EC Signing time: Sun 20 Jul 2025 06:01:20 +0000 Manifest this update: Sun 20 Jul 2025 05:56:20 +0000 Manifest next update: Wed 23 Jul 2025 13:01:20 +0000 Files and hashes: 1: AB2FF74AE26C6B3D3C718834D700985B9160087D.crl (hash: cVFVtkc5l5GmkSeQq6PhIhzVPtmMIcX81gW5V1r9s5U=) 2: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: retIejZmjxqeZ5EcuYs/MJj74Hq3rSQEAaNJNEwhn2M=) 3: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: dgSXFEbFutIQLMHvwiuNx4TvCSZlmBK0qYA1AXK8tdM=) 4: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: 1d1jglJQYamlwXmUTi2MB59pQxl/KjaHk7dpKNXOmuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3c:fd:b2:26:f7:e2:a8:50:fc:37:2c:bd:7a:61:0a:b4:bf:1b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Validity Not Before: Jul 20 05:56:20 2025 GMT Not After : Jul 23 13:01:20 2025 GMT Subject: CN=84C8B9136C9B490FE00BF69CEE7BFC3EF042E3DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d2:c8:77:12:0d:4f:a6:14:7c:d2:d2:7a:29: 25:88:56:67:b1:1b:9a:c1:ee:05:08:9b:95:de:67: bd:c9:92:af:c4:07:9a:f2:3d:cf:a7:af:b0:4b:c7: 76:57:09:4f:ed:9d:17:b4:31:a8:d0:d4:65:b8:e3: a3:1b:c5:6f:47:c4:83:ca:e2:33:5e:83:07:5c:78: 28:e9:e6:51:28:48:21:c8:d6:d0:0e:13:54:8c:4a: 76:36:36:9d:75:d7:10:b5:f8:3e:8b:fe:ef:ae:7d: ab:68:c1:7c:5c:e8:6b:22:86:ef:3e:85:7f:60:71: 8a:c8:59:31:fc:3f:85:22:a4:8b:99:1d:ca:ba:1d: a8:59:4d:55:34:f0:91:67:5e:a4:e2:d6:1e:97:f5: b9:c0:bf:f1:d4:aa:fe:e8:18:b6:c2:dc:11:58:1b: ce:db:0b:4a:17:8a:47:4e:85:cf:37:50:3d:ca:34: cc:cf:e1:37:3c:0f:25:ec:fa:ef:50:d8:07:65:88: 0d:36:23:99:95:8d:8a:3a:1e:47:f6:27:34:7d:8e: a3:b4:f2:f0:7e:0c:be:75:72:c4:5d:c6:48:c2:cd: a6:c5:af:3b:76:d5:c5:8a:86:ba:c8:36:9b:0b:61: 4b:a8:f4:49:7a:2e:a3:38:8c:70:04:f1:5e:de:21: 2f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C8:B9:13:6C:9B:49:0F:E0:0B:F6:9C:EE:7B:FC:3E:F0:42:E3:DA X509v3 Authority Key Identifier: keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:49:b3:3b:db:6e:0a:95:bc:60:54:bc:90:17:3d:dc:16:01: a6:82:71:b7:a8:e6:d2:35:f9:b6:fb:b1:ac:25:29:ce:58:a8: e0:e8:56:4d:71:45:92:41:87:2c:3f:3c:8e:66:6d:e1:12:24: d5:d3:b2:d1:1e:a4:1a:6b:ed:7e:4f:1b:6f:d4:e6:b4:6f:a0: 4f:d3:da:48:64:4a:4d:48:f2:43:ef:82:1d:0f:ef:72:07:c6: d0:2c:b0:4d:f2:6b:62:f0:7f:cd:05:b3:47:23:bc:7e:37:c3: 8d:05:53:d8:e7:38:5c:d6:56:5e:31:8d:38:56:ad:45:bb:e0: 7e:57:a6:cf:e1:29:d6:4b:dc:69:f5:67:5e:0e:6c:fd:32:26: 80:14:7c:17:d5:f5:32:89:51:48:d3:44:85:f4:91:8b:1c:70: ee:1c:fc:07:82:eb:b9:df:5b:4b:c5:49:b3:71:c2:55:43:0f: d5:67:cb:d4:d5:16:9c:7f:e5:9e:4a:08:d5:2a:e8:35:df:67: ae:9a:f4:82:e3:72:89:83:39:12:a2:17:a3:03:63:99:92:b9: 4b:56:7a:73:a5:80:7e:17:8a:e8:21:cc:cc:ea:2b:d3:a3:3c: a0:2b:8c:ee:ce:55:ed:ce:98:46:5d:4c:29:19:34:d1:e1:f3: 6d:c8:bc:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFjz9sib34qhQ/DcsvXphCrS/G7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5 MTYwMDg3RDAeFw0yNTA3MjAwNTU2MjBaFw0yNTA3MjMxMzAxMjBaMDMxMTAvBgNV BAMTKDg0QzhCOTEzNkM5QjQ5MEZFMDBCRjY5Q0VFN0JGQzNFRjA0MkUzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh0sh3Eg1PphR80tJ6KSWIVmex G5rB7gUIm5XeZ73Jkq/EB5ryPc+nr7BLx3ZXCU/tnRe0MajQ1GW446MbxW9HxIPK 4jNegwdceCjp5lEoSCHI1tAOE1SMSnY2Np111xC1+D6L/u+ufatowXxc6Gsihu8+ hX9gcYrIWTH8P4UipIuZHcq6HahZTVU08JFnXqTi1h6X9bnAv/HUqv7oGLbC3BFY G87bC0oXikdOhc83UD3KNMzP4Tc8DyXs+u9Q2AdliA02I5mVjYo6Hkf2JzR9jqO0 8vB+DL51csRdxkjCzabFrzt21cWKhrrINpsLYUuo9El6LqM4jHAE8V7eIS8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhMi5E2ybSQ/gC/ac7nv8PvBC49owHwYDVR0j BBgwFoAUqy/3SuJsaz08cYg01wCYW5FgCH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTRiYjRjOC02ZmNmLTRmZmYtYmRjYy1mZTFmY2NlZTEwNDUvMC9BQjJGRjc0QUUy NkM2QjNEM0M3MTg4MzRENzAwOTg1QjkxNjAwODdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5MTYw MDg3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4 NUI5MTYwMDg3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMtJszvbbgqVvGBUvJAXPdwWAaaCcbeo5tI1 +bb7sawlKc5YqODoVk1xRZJBhyw/PI5mbeESJNXTstEepBpr7X5PG2/U5rRvoE/T 2khkSk1I8kPvgh0P73IHxtAssE3ya2Lwf80Fs0cjvH43w40FU9jnOFzWVl4xjThW rUW74H5Xps/hKdZL3Gn1Z14ObP0yJoAUfBfV9TKJUUjTRIX0kYsccO4c/AeC67nf W0vFSbNxwlVDD9Vny9TVFpx/5Z5KCNUq6DXfZ66a9ILjcomDORKiF6MDY5mSuUtW enOlgH4XiughzMzqK9OjPKArjO7OVe3OmEZdTCkZNNHh823IvLI= -----END CERTIFICATE-----Generated at Mon Jul 21 09:00:41 2025 by rpki-client