$ rpki-client -vvf repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft File: AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft (raw, json) Hash identifier: 05khJKuWobBFveJe4dhv3oX5wCxN5oyX7i/1BabOPhk= Subject key identifier: 05:39:8C:C6:8F:77:EB:4F:AF:01:47:B9:62:BE:B8:79:4F:A3:CF:05 Authority key identifier: AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A Certificate issuer: /CN=AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A Certificate serial: 23006FFABE65B73B7D9F148E6B6AB175AC6232C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft Manifest number: 0248 Signing time: Fri 17 Apr 2026 10:51:11 +0000 Manifest this update: Fri 17 Apr 2026 10:46:11 +0000 Manifest next update: Mon 20 Apr 2026 11:30:11 +0000 Files and hashes: 1: 3130332e31362e3131392e302f32342d3234203d3e20313530323234.roa (hash: mdiRf1gpZ0kZJ3g60ZS7i1US/P92GU6YgLE8D2jfx4k=) 2: 3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa (hash: jGoedWD/HdT/XNGJYiilR3U313Ij63s087bSdLFU0QE=) 3: 3130332e31362e3131382e302f32332d3233203d3e20313530323234.roa (hash: Pkqeb2iWpCpMUL0o7JOl+LYQn5tVfn7IUSA3JeVNaTM=) 4: AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.crl (hash: DxU75PHdQWolES9HJCfDbhUZJlw94Lx+SRC6+X0ZQko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.crl rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:00:6f:fa:be:65:b7:3b:7d:9f:14:8e:6b:6a:b1:75:ac:62:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A Validity Not Before: Apr 17 10:46:11 2026 GMT Not After : Apr 20 11:30:11 2026 GMT Subject: CN=05398CC68F77EB4FAF0147B962BEB8794FA3CF05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2d:82:d9:9e:b3:c0:5e:b6:26:f3:03:1c:3a: f5:9e:c5:6c:db:25:21:70:a0:22:17:2a:ae:ee:64: 08:10:2c:e0:57:86:51:6c:cf:a0:05:24:b0:08:bd: 50:69:51:2e:6a:8b:b1:19:da:d9:7d:17:af:7d:43: 70:cc:17:e9:32:cb:f2:4c:67:cc:f3:88:1f:3f:53: 0a:87:0e:8e:ec:88:b1:cd:d9:bd:69:a8:d4:1e:7b: 15:45:c0:f3:34:53:a6:82:ba:de:44:d4:1d:52:5c: cd:b3:b2:97:d4:0b:39:d7:95:a7:63:31:1d:74:b0: 7f:52:85:f5:a8:48:a2:70:4a:9a:3e:67:02:48:48: 19:5e:bc:29:4d:51:7e:92:c4:5e:c0:e2:07:e5:f9: 4c:13:47:b3:c1:87:92:ce:bc:54:6c:56:0e:50:f0: e3:57:2b:47:87:a4:e7:02:2d:77:49:dc:88:15:55: d8:e2:8e:60:a7:4b:7c:9c:a6:47:11:57:a9:46:3a: a4:e3:b2:b7:8c:04:42:64:c0:74:a4:6a:08:4e:27: 16:04:cd:fd:97:3b:e9:86:4a:2e:23:0f:69:dd:e7: 22:a1:b7:b8:5c:b7:2b:97:7e:1a:ad:15:56:0c:ad: 8a:a9:9a:74:1b:a7:ea:36:07:be:0c:87:00:04:3a: 21:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:39:8C:C6:8F:77:EB:4F:AF:01:47:B9:62:BE:B8:79:4F:A3:CF:05 X509v3 Authority Key Identifier: keyid:AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ca:0f:32:ba:f9:0f:31:44:63:40:7f:fb:bd:6e:de:71:34: 96:fb:4c:af:47:5a:9f:6a:00:6b:f7:1b:16:d0:33:79:f3:76: 95:88:b1:9f:2a:56:71:0b:87:07:17:9b:fd:57:14:02:dc:32: b0:c3:b5:1a:d4:ff:33:44:43:cb:28:54:5e:4c:45:8d:f2:15: 10:6f:72:ef:24:3f:61:9b:16:b9:4f:10:1f:e2:bb:b8:59:8a: 42:e3:3a:4d:32:be:78:ec:25:8e:fd:83:6f:71:a1:fd:38:fc: f9:af:d7:0e:17:d0:16:9b:66:5e:de:75:cc:22:8a:65:b7:6f: 93:28:60:db:b5:86:ec:26:92:e3:ce:45:a7:30:e0:5d:8c:7e: 29:d5:1a:12:71:3e:c5:1d:0c:cf:a2:2d:35:32:3a:d5:20:47: 05:e9:91:03:f6:ac:4b:ca:d5:0d:9d:10:d1:9b:d3:29:84:d2: 32:ad:de:1f:2d:5b:7e:3b:b6:09:bf:11:b0:c8:94:5b:df:81: d6:80:ee:c4:b3:47:39:91:7c:11:85:35:15:f1:9c:6c:71:e8: ce:f2:63:ad:ad:1e:97:88:f4:01:99:b9:0a:b1:9e:24:d5:6e: 02:65:48:19:42:7a:ae:b1:7d:8f:59:83:81:2c:ce:82:e9:49: 7e:5f:82:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwBv+r5ltzt9nxSOa2qxdaxiMsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzQzNGQTFEMzI3NUUyODRCMDdBODRFQzk1MDg1REY5 QkM1QTIyQTAeFw0yNjA0MTcxMDQ2MTFaFw0yNjA0MjAxMTMwMTFaMDMxMTAvBgNV BAMTKDA1Mzk4Q0M2OEY3N0VCNEZBRjAxNDdCOTYyQkVCODc5NEZBM0NGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRLYLZnrPAXrYm8wMcOvWexWzb JSFwoCIXKq7uZAgQLOBXhlFsz6AFJLAIvVBpUS5qi7EZ2tl9F699Q3DMF+kyy/JM Z8zziB8/UwqHDo7siLHN2b1pqNQeexVFwPM0U6aCut5E1B1SXM2zspfUCznXladj MR10sH9ShfWoSKJwSpo+ZwJISBlevClNUX6SxF7A4gfl+UwTR7PBh5LOvFRsVg5Q 8ONXK0eHpOcCLXdJ3IgVVdjijmCnS3ycpkcRV6lGOqTjsreMBEJkwHSkaghOJxYE zf2XO+mGSi4jD2nd5yKht7hctyuXfhqtFVYMrYqpmnQbp+o2B74MhwAEOiGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBTmMxo9360+vAUe5Yr64eU+jzwUwHwYDVR0j BBgwFoAUqzw/odMnXihLB6hOyVCF35vFoiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OTg3OTc0NC1iODE4LTQ2ZGMtOGQ5Zi05YzM1NzkzZjRjYmIvMC9BQjNDM0ZBMUQz Mjc1RTI4NEIwN0E4NEVDOTUwODVERjlCQzVBMjJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUIzQzNGQTFEMzI3NUUyODRCMDdBODRFQzk1MDg1REY5QkM1 QTIyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTk4Nzk3NDQtYjgxOC00NmRjLThk OWYtOWMzNTc5M2Y0Y2JiLzAvQUIzQzNGQTFEMzI3NUUyODRCMDdBODRFQzk1MDg1 REY5QkM1QTIyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3KDzK6+Q8xRGNAf/u9bt5xNJb7TK9HWp9q AGv3GxbQM3nzdpWIsZ8qVnELhwcXm/1XFALcMrDDtRrU/zNEQ8soVF5MRY3yFRBv cu8kP2GbFrlPEB/iu7hZikLjOk0yvnjsJY79g29xof04/Pmv1w4X0BabZl7edcwi imW3b5MoYNu1huwmkuPORacw4F2MfinVGhJxPsUdDM+iLTUyOtUgRwXpkQP2rEvK 1Q2dENGb0ymE0jKt3h8tW347tgm/EbDIlFvfgdaA7sSzRzmRfBGFNRXxnGxx6M7y Y62tHpeI9AGZuQqxniTVbgJlSBlCeq6xfY9Zg4EszoLpSX5fgiM= -----END CERTIFICATE-----Generated at Sun Apr 19 10:34:12 2026 by rpki-client