$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: h/Tr5LjgWahEcFTJAHCiq78BD12bpa+J7L2w9efzIlk= Subject key identifier: 26:7D:F2:EA:B7:9D:EE:9A:38:B5:E3:7D:1D:A5:AE:48:24:76:3F:4F Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 549C1E3C1E89B8609D68EAB99D83F73A31A2F7E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 0519 Signing time: Fri 31 Oct 2025 18:01:14 +0000 Manifest this update: Fri 31 Oct 2025 17:56:14 +0000 Manifest next update: Tue 04 Nov 2025 06:00:14 +0000 Files and hashes: 1: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: sZdVNByPzhJV9m9Y9uWw0VmWp8VvlsFeFU25A1LbDYY=) 2: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: dUBpU1ehIxbV6F618KP38lS7LkigxBC/nUuk9FmPRks=) 3: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: GtPRtP464WpAY5mEznX+MG2Y26KpfK9+iuhXKPKnbLI=) 4: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: qJphw/I7Rin5Rwt3jfIdrH7bHhFDA7+qbz2u+G51RKg=) 5: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: HHh4yWOPjf+3eFvvhURi2TZowgG86xttRK9+B+PgPYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 06:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9c:1e:3c:1e:89:b8:60:9d:68:ea:b9:9d:83:f7:3a:31:a2:f7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Oct 31 17:56:14 2025 GMT Not After : Nov 4 06:00:14 2025 GMT Subject: CN=267DF2EAB79DEE9A38B5E37D1DA5AE4824763F4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:ec:ed:bd:3e:4b:a6:ed:9d:76:0e:49:80: 94:9f:0c:90:33:c3:62:cc:dc:e2:00:fd:0e:2f:77: 6b:eb:06:63:05:25:e6:9e:d2:93:cb:73:15:02:88: 1b:28:69:0f:9c:00:d6:e7:1e:b2:76:81:0c:6a:2d: f8:c1:ad:5b:f5:5a:44:2f:e1:64:1f:f8:5a:79:ca: 8a:67:c8:75:03:30:cf:b8:84:9d:17:a1:6e:f7:d6: ba:ae:d4:4a:69:37:ae:61:79:d1:3d:29:3b:7a:b4: 76:64:6f:3e:05:a9:c9:b9:a1:cb:bb:89:d9:a8:58: 46:fe:b8:19:43:e8:d1:86:9e:9e:f2:8d:86:a8:71: 92:42:c2:61:98:de:61:4d:f3:10:cb:b1:a6:0b:6b: 97:84:ab:4a:97:fe:59:cc:4a:03:77:f5:9d:c7:07: 74:2e:34:7f:43:f9:3f:b2:db:47:3d:81:5f:6a:c6: 20:10:aa:f6:bd:ee:ab:76:2c:a9:e3:66:ea:50:dc: b2:da:4b:67:a9:be:91:85:53:bf:64:47:4b:27:17: 0d:7f:04:f9:95:ab:51:23:54:94:c8:c4:a7:91:31: 2c:b3:0e:c8:9b:1d:f3:b5:02:21:f0:a2:85:01:04: a6:f3:a5:f5:08:39:1e:36:1a:60:89:f1:57:4f:c6: b2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7D:F2:EA:B7:9D:EE:9A:38:B5:E3:7D:1D:A5:AE:48:24:76:3F:4F X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:27:15:72:4c:7a:02:4b:2b:46:da:94:76:46:62:5a:00:95: d9:5f:19:86:65:04:99:c5:96:bc:93:9f:23:fc:a1:b1:e9:24: 2c:8d:4d:d7:f3:21:99:34:54:cc:79:92:cb:71:e2:92:f7:a8: 8e:5f:a6:1f:70:26:d8:6e:f9:de:d4:8b:f1:f1:20:90:65:79: 56:51:1e:6c:b9:83:e3:03:83:d1:be:90:c9:87:ee:fe:6b:06: 16:20:3c:7c:65:6b:14:1a:80:e1:a4:0a:ee:b4:fe:dc:4b:fe: 73:17:dd:10:e8:f1:d3:a5:4c:6c:8d:0d:22:6a:44:70:45:79: a8:92:30:20:51:ac:78:ef:57:49:4d:3c:5b:1b:46:28:4c:f3: ea:18:0d:5e:71:fa:0e:a6:e4:00:3f:f1:62:80:4f:81:e9:c7: eb:b3:2f:26:f0:43:ea:14:e4:55:a1:ee:20:11:c1:ef:01:08: 0a:99:12:fc:63:e6:a5:68:61:6f:b8:2d:81:9c:c3:96:32:5e: d0:42:a1:06:94:89:b9:10:90:54:d3:bd:0c:0c:16:8e:43:20: cb:31:a3:55:ea:6f:63:2c:f5:d5:d1:4c:e7:f7:28:e8:0c:11: 3f:b9:e5:f7:1b:e6:ed:a8:55:d3:6f:19:13:a0:dc:63:47:1c: 83:11:de:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJwePB6JuGCdaOq5nYP3OjGi9+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNTEwMzExNzU2MTRaFw0yNTExMDQwNjAwMTRaMDMxMTAvBgNV BAMTKDI2N0RGMkVBQjc5REVFOUEzOEI1RTM3RDFEQTVBRTQ4MjQ3NjNGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyreztvT5Lpu2ddg5JgJSfDJAz w2LM3OIA/Q4vd2vrBmMFJeae0pPLcxUCiBsoaQ+cANbnHrJ2gQxqLfjBrVv1WkQv 4WQf+Fp5yopnyHUDMM+4hJ0XoW731rqu1EppN65hedE9KTt6tHZkbz4Fqcm5ocu7 idmoWEb+uBlD6NGGnp7yjYaocZJCwmGY3mFN8xDLsaYLa5eEq0qX/lnMSgN39Z3H B3QuNH9D+T+y20c9gV9qxiAQqva97qt2LKnjZupQ3LLaS2epvpGFU79kR0snFw1/ BPmVq1EjVJTIxKeRMSyzDsibHfO1AiHwooUBBKbzpfUIOR42GmCJ8VdPxrInAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJn3y6red7po4teN9HaWuSCR2P08wHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgnFXJMegJLK0balHZGYloAldlfGYZlBJnF lryTnyP8obHpJCyNTdfzIZk0VMx5kstx4pL3qI5fph9wJthu+d7Ui/HxIJBleVZR Hmy5g+MDg9G+kMmH7v5rBhYgPHxlaxQagOGkCu60/txL/nMX3RDo8dOlTGyNDSJq RHBFeaiSMCBRrHjvV0lNPFsbRihM8+oYDV5x+g6m5AA/8WKAT4Hpx+uzLybwQ+oU 5FWh7iARwe8BCAqZEvxj5qVoYW+4LYGcw5YyXtBCoQaUibkQkFTTvQwMFo5DIMsx o1Xqb2Ms9dXRTOf3KOgMET+55fcb5u2oVdNvGROg3GNHHIMR3qI= -----END CERTIFICATE-----Generated at Sun Nov 2 21:38:30 2025 by rpki-client