$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: Uq8v6b8SDFVzALY9smmlrtM3kGiEl2AVr4rvVMr0hpc= Subject key identifier: 0C:AC:CB:81:98:C4:6D:11:F0:1F:CC:71:AB:4B:1F:76:95:CD:D9:29 Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 3251BF22739BF4BB24D427E024608F3D62C77240 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 055C Signing time: Wed 01 Apr 2026 15:41:28 +0000 Manifest this update: Wed 01 Apr 2026 15:36:28 +0000 Manifest next update: Sat 04 Apr 2026 21:23:28 +0000 Files and hashes: 1: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: HHh4yWOPjf+3eFvvhURi2TZowgG86xttRK9+B+PgPYQ=) 2: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: dUBpU1ehIxbV6F618KP38lS7LkigxBC/nUuk9FmPRks=) 3: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: sZdVNByPzhJV9m9Y9uWw0VmWp8VvlsFeFU25A1LbDYY=) 4: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: GtPRtP464WpAY5mEznX+MG2Y26KpfK9+iuhXKPKnbLI=) 5: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: gK6ns/NSNOq+lILQD4AhJ+DV5F6T7lN+CTZ6srRy3z0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 11:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:51:bf:22:73:9b:f4:bb:24:d4:27:e0:24:60:8f:3d:62:c7:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Apr 1 15:36:28 2026 GMT Not After : Apr 4 21:23:28 2026 GMT Subject: CN=0CACCB8198C46D11F01FCC71AB4B1F7695CDD929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:90:01:71:c3:68:73:77:cf:b7:36:3b:68: 6f:20:92:1b:07:d9:99:16:1f:7c:91:b5:b1:23:49: 04:a1:2c:12:d2:ef:46:de:3e:d4:4d:81:ed:c5:cd: 9c:27:15:9f:83:56:a1:c7:e7:7d:0b:e3:63:f0:91: 81:1f:8c:76:b5:90:a2:6d:f0:a0:ed:98:ac:ff:b4: 50:f8:76:31:67:4d:0c:9b:48:fa:6f:76:78:ac:45: 78:6e:a4:af:cd:68:18:52:1a:fd:36:b0:09:34:01: 95:f7:dd:50:14:d7:11:3c:40:27:ab:67:b5:63:a0: fc:0d:ab:d8:2a:10:1a:e6:1a:86:8b:ac:73:e5:ee: 22:ca:d7:8e:c3:d1:a3:fb:18:98:58:87:1d:ee:b7: 72:e7:9d:68:b5:81:b8:d3:ff:50:16:eb:67:9f:1e: f9:19:01:f6:9b:be:4c:27:38:4f:f0:e8:00:58:07: 0a:d3:40:e9:9b:76:b5:92:ec:ea:48:3e:be:4a:e6: 7f:12:a3:74:e0:fc:4b:34:1c:03:3a:a9:63:05:56: 60:b7:5d:fb:8d:b0:21:71:3e:00:12:58:3e:05:fc: 88:30:27:98:25:d6:0c:1e:5b:7d:8b:10:c2:e7:fa: 1a:9c:5f:36:17:c4:a4:ae:06:39:82:c1:c7:57:92: 8b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AC:CB:81:98:C4:6D:11:F0:1F:CC:71:AB:4B:1F:76:95:CD:D9:29 X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:77:5e:60:9b:fb:fb:01:d8:95:11:a4:3c:22:77:ef:27:2f: 03:62:b6:20:26:54:2e:e7:c3:b0:25:53:63:ff:79:c6:ee:5b: c0:a6:75:a0:e0:ba:47:15:0a:23:c4:80:96:1e:51:07:69:be: 61:3b:c1:48:ea:c9:22:91:a6:dc:4c:2c:c1:e7:46:07:04:0e: 90:4e:e1:2b:8e:91:02:cf:dc:66:61:22:18:97:02:b1:d0:50: 70:f4:e0:f7:4d:33:59:22:3b:64:d0:69:1a:8c:07:9d:4e:2a: 89:40:66:d1:a8:e7:29:db:6b:31:75:af:bb:46:1e:e7:d0:db: 21:a9:3d:ce:76:59:dc:65:4d:0d:cc:11:13:77:94:f7:0f:77: 14:04:5c:b8:2d:cd:c8:33:aa:0a:77:1c:00:54:a2:cf:42:61: 6a:d1:a5:f7:a7:03:7b:10:17:9e:54:85:40:33:aa:45:a0:ec: da:33:7c:a7:48:f1:49:13:aa:3c:3b:e7:23:f8:cf:38:8a:44: 57:b2:4a:84:0e:f8:6c:f7:f7:02:9e:4c:7d:ef:38:95:bc:52: f3:e5:98:41:e3:8c:6b:da:7a:26:7f:c9:78:6e:26:cd:95:e2: 98:bd:84:6a:4a:5c:8a:a1:d5:75:18:5c:65:6f:a2:e9:cd:7b: a9:87:60:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMlG/InOb9Lsk1CfgJGCPPWLHckAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNjA0MDExNTM2MjhaFw0yNjA0MDQyMTIzMjhaMDMxMTAvBgNV BAMTKDBDQUNDQjgxOThDNDZEMTFGMDFGQ0M3MUFCNEIxRjc2OTVDREQ5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1t5ABccNoc3fPtzY7aG8gkhsH 2ZkWH3yRtbEjSQShLBLS70bePtRNge3FzZwnFZ+DVqHH530L42PwkYEfjHa1kKJt 8KDtmKz/tFD4djFnTQybSPpvdnisRXhupK/NaBhSGv02sAk0AZX33VAU1xE8QCer Z7VjoPwNq9gqEBrmGoaLrHPl7iLK147D0aP7GJhYhx3ut3LnnWi1gbjT/1AW62ef HvkZAfabvkwnOE/w6ABYBwrTQOmbdrWS7OpIPr5K5n8So3Tg/Es0HAM6qWMFVmC3 XfuNsCFxPgASWD4F/IgwJ5gl1gweW32LEMLn+hqcXzYXxKSuBjmCwcdXkovzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDKzLgZjEbRHwH8xxq0sfdpXN2SkwHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKt3XmCb+/sB2JURpDwid+8nLwNitiAmVC7n w7AlU2P/ecbuW8CmdaDgukcVCiPEgJYeUQdpvmE7wUjqySKRptxMLMHnRgcEDpBO 4SuOkQLP3GZhIhiXArHQUHD04PdNM1kiO2TQaRqMB51OKolAZtGo5ynbazF1r7tG HufQ2yGpPc52WdxlTQ3MERN3lPcPdxQEXLgtzcgzqgp3HABUos9CYWrRpfenA3sQ F55UhUAzqkWg7NozfKdI8UkTqjw75yP4zziKRFeySoQO+Gz39wKeTH3vOJW8UvPl mEHjjGvaeiZ/yXhuJs2V4pi9hGpKXIqh1XUYXGVvounNe6mHYHg= -----END CERTIFICATE-----Generated at Thu Apr 2 05:32:36 2026 by rpki-client