$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft File: AB2FF74AE26C6B3D3C718834D700985B9160087D.mft (raw, json) Hash identifier: lBgj0yqrHBmim68nAckgVidVMM87ld6h7f6rtJcr1KI= Subject key identifier: FC:00:3F:C0:0C:93:1E:1B:39:A1:C7:EA:C8:FE:14:75:0C:BF:FA:7B Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D Certificate issuer: /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Certificate serial: 5C5FC9C2619832FB6B56ABD9FE3AFEAD414D5CE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft Manifest number: 0201 Signing time: Sat 06 Sep 2025 02:00:42 +0000 Manifest this update: Sat 06 Sep 2025 01:55:42 +0000 Manifest next update: Tue 09 Sep 2025 09:47:42 +0000 Files and hashes: 1: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: retIejZmjxqeZ5EcuYs/MJj74Hq3rSQEAaNJNEwhn2M=) 2: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: dgSXFEbFutIQLMHvwiuNx4TvCSZlmBK0qYA1AXK8tdM=) 3: AB2FF74AE26C6B3D3C718834D700985B9160087D.crl (hash: 8filiUsefW/DTSxjovTU4Guf5B4EHN90p+QEZTHDhvE=) 4: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: 1d1jglJQYamlwXmUTi2MB59pQxl/KjaHk7dpKNXOmuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 09:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5f:c9:c2:61:98:32:fb:6b:56:ab:d9:fe:3a:fe:ad:41:4d:5c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Validity Not Before: Sep 6 01:55:42 2025 GMT Not After : Sep 9 09:47:42 2025 GMT Subject: CN=FC003FC00C931E1B39A1C7EAC8FE14750CBFFA7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:14:9c:f0:a5:0c:3c:e4:24:55:f2:9c:16:53: 79:cb:38:92:92:be:72:cb:1b:e3:29:8d:f2:df:ef: cb:7a:fe:3c:b0:a0:bd:4c:53:52:57:bf:ab:cc:0d: d0:59:36:59:92:c9:2e:a4:cc:32:60:6e:f6:43:9f: 3e:2d:c9:34:b8:aa:00:27:1f:7b:e6:d6:5c:36:8f: 2b:6f:8f:d7:53:17:66:bb:44:bc:3d:dc:47:4f:23: d1:02:28:94:68:43:f2:b5:f2:c0:2e:a6:5d:64:39: 98:c2:c7:37:fa:57:75:03:8a:01:c4:a6:31:9e:34: b3:32:1b:0a:54:ac:21:dc:b7:29:09:02:f3:1d:63: c6:18:b0:35:cd:bd:00:23:44:6c:dc:f9:35:dc:d2: 18:78:bd:ff:69:9b:66:eb:cf:2a:3d:17:9d:2f:2c: c5:fc:94:d4:99:3b:0d:ec:90:68:0c:df:69:05:1d: 6f:92:57:6e:4b:0e:aa:da:f3:c3:4e:ff:03:48:57: be:c6:cc:45:ff:41:db:34:c3:50:2e:9c:36:d9:15: 0b:10:b8:4e:3c:34:c1:f8:7d:ec:ad:35:29:5a:37: db:ae:ba:54:65:3d:c3:0a:22:e8:9b:bb:9a:f7:bf: d6:8b:d3:48:2f:ed:51:c8:90:c3:c2:d3:3a:9d:c9: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:00:3F:C0:0C:93:1E:1B:39:A1:C7:EA:C8:FE:14:75:0C:BF:FA:7B X509v3 Authority Key Identifier: keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:6a:f4:04:2f:46:78:3b:43:a5:9d:a3:dc:29:ce:f0:8d:92: 1b:39:7a:df:c3:a1:41:ab:78:33:2b:42:99:22:be:8d:7a:a2: 99:ea:e0:72:05:1a:3a:b3:a9:fd:57:0d:9c:63:7a:90:fb:90: cc:e8:6e:b2:aa:0f:e1:78:53:4b:3a:c8:33:31:d3:12:16:01: 22:86:83:19:f9:8a:84:04:df:85:e0:e0:21:cc:09:01:85:23: c6:14:55:d6:a5:8e:ba:4e:f8:aa:b9:19:1a:5c:cc:b1:46:ad: 0b:00:84:7f:8d:12:61:85:80:73:dc:7b:6f:d8:c3:84:0e:83: 02:0e:b5:22:0a:48:a9:d9:5d:75:c1:db:94:d4:a4:63:c6:00: 44:74:aa:d8:42:54:1c:61:c1:68:9f:cb:9b:b0:43:3a:29:d3: 90:c7:2e:fd:cd:f1:e1:64:0c:fc:32:0a:1d:04:ce:9c:e7:6f: ea:10:21:03:63:21:49:9b:d9:44:e6:71:f1:07:e9:7a:c2:e0: d4:eb:ce:06:27:d9:03:84:57:9d:d7:98:a0:64:e0:78:d7:de: 52:01:de:4a:84:0b:8f:91:1b:f2:3e:2c:ff:0d:ba:a8:1d:db: c6:53:9e:d5:ba:9b:4c:03:ff:ab:f3:c1:5a:9b:8f:b6:85:51: 9a:3d:d6:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXF/JwmGYMvtrVqvZ/jr+rUFNXOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5 MTYwMDg3RDAeFw0yNTA5MDYwMTU1NDJaFw0yNTA5MDkwOTQ3NDJaMDMxMTAvBgNV BAMTKEZDMDAzRkMwMEM5MzFFMUIzOUExQzdFQUM4RkUxNDc1MENCRkZBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpFJzwpQw85CRV8pwWU3nLOJKS vnLLG+MpjfLf78t6/jywoL1MU1JXv6vMDdBZNlmSyS6kzDJgbvZDnz4tyTS4qgAn H3vm1lw2jytvj9dTF2a7RLw93EdPI9ECKJRoQ/K18sAupl1kOZjCxzf6V3UDigHE pjGeNLMyGwpUrCHctykJAvMdY8YYsDXNvQAjRGzc+TXc0hh4vf9pm2brzyo9F50v LMX8lNSZOw3skGgM32kFHW+SV25LDqra88NO/wNIV77GzEX/Qds0w1AunDbZFQsQ uE48NMH4feytNSlaN9uuulRlPcMKIuibu5r3v9aL00gv7VHIkMPC0zqdyY+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/AA/wAyTHhs5ocfqyP4UdQy/+nswHwYDVR0j BBgwFoAUqy/3SuJsaz08cYg01wCYW5FgCH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTRiYjRjOC02ZmNmLTRmZmYtYmRjYy1mZTFmY2NlZTEwNDUvMC9BQjJGRjc0QUUy NkM2QjNEM0M3MTg4MzRENzAwOTg1QjkxNjAwODdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5MTYw MDg3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4 NUI5MTYwMDg3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJq9AQvRng7Q6Wdo9wpzvCNkhs5et/DoUGr eDMrQpkivo16opnq4HIFGjqzqf1XDZxjepD7kMzobrKqD+F4U0s6yDMx0xIWASKG gxn5ioQE34Xg4CHMCQGFI8YUVdaljrpO+Kq5GRpczLFGrQsAhH+NEmGFgHPce2/Y w4QOgwIOtSIKSKnZXXXB25TUpGPGAER0qthCVBxhwWify5uwQzop05DHLv3N8eFk DPwyCh0Ezpznb+oQIQNjIUmb2UTmcfEH6XrC4NTrzgYn2QOEV53XmKBk4HjX3lIB 3kqEC4+RG/I+LP8Nuqgd28ZTntW6m0wD/6vzwVqbj7aFUZo91nc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:24 2025 by rpki-client