$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: Yx+vAP9anG/EGUVvRWzyikgSftkjBWQnSdO3eaz+j10= Subject key identifier: B8:C4:BC:40:9D:AE:37:D1:0B:6B:AD:A3:BF:3A:D3:C5:61:65:7A:09 Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 74D418D078B80351738560B82735B20644A33638 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 0501 Signing time: Sun 07 Sep 2025 06:21:13 +0000 Manifest this update: Sun 07 Sep 2025 06:16:13 +0000 Manifest next update: Wed 10 Sep 2025 13:24:13 +0000 Files and hashes: 1: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: HHh4yWOPjf+3eFvvhURi2TZowgG86xttRK9+B+PgPYQ=) 2: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: dUBpU1ehIxbV6F618KP38lS7LkigxBC/nUuk9FmPRks=) 3: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: EsswmHK2b7vAX0Aovj507h5SnrO0z1ZGGMGPDV/iySE=) 4: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: GtPRtP464WpAY5mEznX+MG2Y26KpfK9+iuhXKPKnbLI=) 5: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: sZdVNByPzhJV9m9Y9uWw0VmWp8VvlsFeFU25A1LbDYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d4:18:d0:78:b8:03:51:73:85:60:b8:27:35:b2:06:44:a3:36:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Sep 7 06:16:13 2025 GMT Not After : Sep 10 13:24:13 2025 GMT Subject: CN=B8C4BC409DAE37D10B6BADA3BF3AD3C561657A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:be:70:76:bd:79:06:5b:d7:42:79:44:64: 3d:42:bd:70:b5:16:34:b3:c6:04:e3:da:d2:40:6e: 8d:b6:31:88:17:6c:5b:ed:57:b4:26:12:04:35:d9: 7e:de:a9:9a:fc:67:83:fb:6b:ec:97:2c:f9:30:6c: 20:09:89:3d:74:b3:1b:10:31:15:69:e7:5a:dc:bc: 0d:3c:e5:41:e2:31:fc:e3:e2:a2:52:b5:4e:9a:2e: 1f:5a:2f:34:46:0e:2a:69:af:89:a3:03:0f:2d:e3: 2b:84:f6:b4:97:3e:78:10:62:5a:71:29:b5:1c:ee: 9f:06:c4:f9:a4:f7:a5:d0:ca:55:73:27:d5:24:0e: 0e:46:88:b6:22:b2:c6:20:84:07:be:46:34:26:2e: 1b:2c:03:86:df:cf:bd:41:7a:e9:0f:19:c9:9d:58: 89:a5:6d:15:1a:1e:da:b3:56:58:c9:26:fa:26:11: 03:a6:e7:99:b2:7a:42:1f:ad:a8:4e:69:e0:7e:a8: fb:29:d8:59:fe:b3:cb:09:eb:11:89:7e:29:7c:2a: 60:78:b4:d0:55:19:5c:15:fc:d0:68:fb:c1:be:98: 5b:8a:28:77:c0:7e:31:b5:c1:95:82:cc:0f:34:be: 0d:83:10:01:55:3b:e1:0a:f2:35:cd:e3:d0:ec:dd: e9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C4:BC:40:9D:AE:37:D1:0B:6B:AD:A3:BF:3A:D3:C5:61:65:7A:09 X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:7f:29:4b:0f:54:1c:29:8d:a2:b9:1f:af:55:7e:79:60:dd: b3:c9:6d:ec:d5:83:b1:e0:59:44:4d:b9:c5:23:e8:3c:dd:fc: 9e:c2:bc:96:c7:14:d7:34:0b:7b:82:5a:76:66:5f:ac:b0:a4: 57:c9:4f:fc:fe:76:ad:2b:8b:ce:d9:86:86:f2:cf:5b:f4:34: b6:23:35:6a:e0:ff:9f:30:9c:d8:f8:7c:a1:72:5e:90:a7:ca: 13:63:42:e4:2a:e4:cf:46:96:31:54:00:e5:70:f5:67:13:ae: 54:ad:e4:6c:e4:ee:b2:d9:08:b1:ce:5c:a6:a1:88:74:a4:7c: 8e:d8:81:f3:82:47:d8:5c:b3:1f:28:58:42:c0:be:3b:0d:f2: d0:d5:89:0f:d6:54:44:1a:d7:c9:f2:1b:a5:c5:a0:5a:c6:87: 09:66:b5:ac:4a:58:20:0b:44:b3:ec:c4:fd:de:52:05:b6:21: 54:86:00:8a:f5:52:b2:8e:ba:98:38:9d:31:cf:5d:19:76:8e: d2:7b:b0:c8:37:f4:37:11:44:78:94:89:b7:1b:83:35:0e:1b: 29:b1:5e:ad:b6:ea:b9:45:9d:42:7e:dd:64:a2:c1:c3:e3:fd: fc:d7:c2:97:6c:00:3b:bd:63:cc:32:ca:be:22:94:74:7d:06: ce:85:4f:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNQY0Hi4A1FzhWC4JzWyBkSjNjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNTA5MDcwNjE2MTNaFw0yNTA5MTAxMzI0MTNaMDMxMTAvBgNV BAMTKEI4QzRCQzQwOURBRTM3RDEwQjZCQURBM0JGM0FEM0M1NjE2NTdBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+b5wdr15BlvXQnlEZD1CvXC1 FjSzxgTj2tJAbo22MYgXbFvtV7QmEgQ12X7eqZr8Z4P7a+yXLPkwbCAJiT10sxsQ MRVp51rcvA085UHiMfzj4qJStU6aLh9aLzRGDippr4mjAw8t4yuE9rSXPngQYlpx KbUc7p8GxPmk96XQylVzJ9UkDg5GiLYissYghAe+RjQmLhssA4bfz71BeukPGcmd WImlbRUaHtqzVljJJvomEQOm55myekIfrahOaeB+qPsp2Fn+s8sJ6xGJfil8KmB4 tNBVGVwV/NBo+8G+mFuKKHfAfjG1wZWCzA80vg2DEAFVO+EK8jXN49Ds3emzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuMS8QJ2uN9ELa62jvzrTxWFlegkwHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHl/KUsPVBwpjaK5H69Vfnlg3bPJbezVg7Hg WURNucUj6Dzd/J7CvJbHFNc0C3uCWnZmX6ywpFfJT/z+dq0ri87Zhobyz1v0NLYj NWrg/58wnNj4fKFyXpCnyhNjQuQq5M9GljFUAOVw9WcTrlSt5Gzk7rLZCLHOXKah iHSkfI7YgfOCR9hcsx8oWELAvjsN8tDViQ/WVEQa18nyG6XFoFrGhwlmtaxKWCAL RLPsxP3eUgW2IVSGAIr1UrKOupg4nTHPXRl2jtJ7sMg39DcRRHiUibcbgzUOGymx Xq226rlFnUJ+3WSiwcPj/fzXwpdsADu9Y8wyyr4ilHR9Bs6FT4Q= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:04 2025 by rpki-client