$ rpki-client -vvf repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft File: ABF793B534686EC2D5820CF153E43AAEF088BE41.mft (raw, json) Hash identifier: 9Q4+s+crjTKthJAN/5/ObyONkE1pRVHLqglrXJMq8KU= Subject key identifier: D0:55:30:FD:35:4F:E1:74:6A:7F:25:F9:1E:A5:CC:1D:90:2A:1E:EE Authority key identifier: AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41 Certificate issuer: /CN=ABF793B534686EC2D5820CF153E43AAEF088BE41 Certificate serial: 489106E022F30D4C15F7B92CF1CB0175CF8A2671 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft Manifest number: CA Signing time: Sun 07 Sep 2025 22:01:01 +0000 Manifest this update: Sun 07 Sep 2025 21:56:01 +0000 Manifest next update: Thu 11 Sep 2025 05:28:01 +0000 Files and hashes: 1: ABF793B534686EC2D5820CF153E43AAEF088BE41.crl (hash: s7xWHTqNnnIuRJubfM2Ftj2DJvrylHnWH3WxV2at2Mg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 05:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:91:06:e0:22:f3:0d:4c:15:f7:b9:2c:f1:cb:01:75:cf:8a:26:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABF793B534686EC2D5820CF153E43AAEF088BE41 Validity Not Before: Sep 7 21:56:01 2025 GMT Not After : Sep 11 05:28:01 2025 GMT Subject: CN=D05530FD354FE1746A7F25F91EA5CC1D902A1EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:d9:11:87:6b:1e:24:8c:c2:30:bd:0a:af: ee:82:65:57:6b:15:28:50:48:cf:7a:59:49:1c:b0: 60:56:ac:f5:e0:c5:c3:7e:3c:86:25:d8:b5:85:55: d1:76:51:42:6e:07:40:7a:91:e0:82:ed:39:4a:d8: 26:ea:9a:0a:d4:47:fa:ef:03:af:d4:cb:e7:ad:dc: 14:85:97:62:7f:52:48:46:4c:69:c6:a4:56:c2:8b: 88:e0:73:28:e0:90:6f:83:3e:c3:cf:43:64:33:99: f5:d3:1b:e2:70:fa:44:21:ca:0f:47:b5:c2:a0:e6: 23:c9:27:2c:37:e7:5d:72:4f:f5:7a:dc:b4:0f:02: c3:9a:e8:83:f1:78:8c:af:2e:9c:cc:c1:6a:0e:be: db:40:c5:84:f0:36:0f:59:90:11:dc:8b:5c:51:08: b7:47:e9:31:16:c0:f6:bc:af:f1:73:9a:1f:9d:22: 4e:01:55:2e:10:ed:c9:5e:90:ae:fd:7a:72:78:4d: 6d:44:aa:bf:7a:38:04:7d:28:7e:11:f2:c0:37:e1: 42:c7:62:94:f9:c7:af:5d:eb:c4:14:97:15:7b:d0: 5f:f0:84:34:5f:b7:8b:02:c1:5a:0a:9b:16:25:1e: 9c:ef:dd:43:72:59:e4:43:0a:d6:38:d6:7a:14:f5: 1c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:55:30:FD:35:4F:E1:74:6A:7F:25:F9:1E:A5:CC:1D:90:2A:1E:EE X509v3 Authority Key Identifier: keyid:AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:91:17:a8:d2:e3:98:88:f7:03:27:2d:43:5c:dc:71:e1:8e: 84:d6:96:6a:41:73:e1:35:f2:1d:e4:4d:b3:8d:e2:5f:70:87: 93:e1:68:e9:4f:fd:61:f0:24:34:30:96:34:a7:8e:8c:aa:0f: 2e:f1:9b:3c:c0:9b:2a:61:63:45:9a:18:29:5d:f3:8f:87:a5: e7:f2:e2:d9:74:b2:5d:9c:de:03:61:66:f1:a8:40:af:94:a0: 46:92:a4:66:73:db:eb:a4:9d:d7:c3:f1:33:9b:1d:bd:cd:fc: ca:03:47:2f:a8:c3:ee:80:66:27:64:e0:26:c0:1e:2c:45:e0: e1:38:29:c1:c3:1b:53:85:7a:fa:80:ed:38:3c:b0:4b:5b:d5: 91:76:e5:c7:98:1d:ca:7d:ba:4d:e4:cd:20:1a:79:d7:80:a9: 50:c6:ee:43:a6:83:a6:2c:04:c3:f6:42:96:7e:73:49:43:9b: 8a:dc:e3:7e:6a:11:ef:a5:8e:00:cf:22:89:ae:33:f3:03:9f: e9:17:7e:f7:87:ba:82:2d:07:bb:14:94:e1:21:5b:b7:a1:b6: 08:a7:ae:af:97:8b:c2:43:dd:bc:6d:7e:e2:9b:40:82:29:6b: 66:ea:c5:3e:47:8e:7f:76:af:a9:36:02:46:39:d5:d0:9c:34: dd:c0:32:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJEG4CLzDUwV97ks8csBdc+KJnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNBQUVG MDg4QkU0MTAeFw0yNTA5MDcyMTU2MDFaFw0yNTA5MTEwNTI4MDFaMDMxMTAvBgNV BAMTKEQwNTUzMEZEMzU0RkUxNzQ2QTdGMjVGOTFFQTVDQzFEOTAyQTFFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCI9kRh2seJIzCML0Kr+6CZVdr FShQSM96WUkcsGBWrPXgxcN+PIYl2LWFVdF2UUJuB0B6keCC7TlK2CbqmgrUR/rv A6/Uy+et3BSFl2J/UkhGTGnGpFbCi4jgcyjgkG+DPsPPQ2QzmfXTG+Jw+kQhyg9H tcKg5iPJJyw3511yT/V63LQPAsOa6IPxeIyvLpzMwWoOvttAxYTwNg9ZkBHci1xR CLdH6TEWwPa8r/Fzmh+dIk4BVS4Q7clekK79enJ4TW1Eqr96OAR9KH4R8sA34ULH YpT5x69d68QUlxV70F/whDRft4sCwVoKmxYlHpzv3UNyWeRDCtY41noU9Rz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0FUw/TVP4XRqfyX5HqXMHZAqHu4wHwYDVR0j BBgwFoAUq/eTtTRobsLVggzxU+Q6rvCIvkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWE0Yjc4Mi1jMzdmLTQzNzktYThhNi00ZGE1ZDgyYjIzOWYvMC9BQkY3OTNCNTM0 Njg2RUMyRDU4MjBDRjE1M0U0M0FBRUYwODhCRTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNBQUVGMDg4 QkU0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNB QUVGMDg4QkU0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKRF6jS45iI9wMnLUNc3HHhjoTWlmpBc+E1 8h3kTbON4l9wh5PhaOlP/WHwJDQwljSnjoyqDy7xmzzAmyphY0WaGCld84+Hpefy 4tl0sl2c3gNhZvGoQK+UoEaSpGZz2+ukndfD8TObHb3N/MoDRy+ow+6AZidk4CbA HixF4OE4KcHDG1OFevqA7Tg8sEtb1ZF25ceYHcp9uk3kzSAaedeAqVDG7kOmg6Ys BMP2QpZ+c0lDm4rc435qEe+ljgDPIomuM/MDn+kXfveHuoItB7sUlOEhW7ehtgin rq+Xi8JD3bxtfuKbQIIpa2bqxT5Hjn92r6k2AkY51dCcNN3AMpA= -----END CERTIFICATE-----Generated at Mon Sep 8 08:32:11 2025 by rpki-client