$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft File: AB2FF74AE26C6B3D3C718834D700985B9160087D.mft (raw, json) Hash identifier: NOdOHG1XmWROLh3/ddbUH8H/B0s0GZpOt3hewFfazLQ= Subject key identifier: 28:95:EA:AB:A2:21:64:77:33:3F:E1:D1:94:5D:9C:18:B6:51:24:5C Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D Certificate issuer: /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Certificate serial: 09A1A5672F1FD32ACA3E7FD5C7B1C2FDDBDCF601 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft Manifest number: 024F Signing time: Sun 01 Mar 2026 06:10:48 +0000 Manifest this update: Sun 01 Mar 2026 06:05:48 +0000 Manifest next update: Wed 04 Mar 2026 08:57:48 +0000 Files and hashes: 1: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: 1d1jglJQYamlwXmUTi2MB59pQxl/KjaHk7dpKNXOmuU=) 2: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: dgSXFEbFutIQLMHvwiuNx4TvCSZlmBK0qYA1AXK8tdM=) 3: AB2FF74AE26C6B3D3C718834D700985B9160087D.crl (hash: 1gkfBiJfufk66niGvHVNIJWxo5HGQqt+AK59FzV1lS4=) 4: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: retIejZmjxqeZ5EcuYs/MJj74Hq3rSQEAaNJNEwhn2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a1:a5:67:2f:1f:d3:2a:ca:3e:7f:d5:c7:b1:c2:fd:db:dc:f6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Validity Not Before: Mar 1 06:05:48 2026 GMT Not After : Mar 4 08:57:48 2026 GMT Subject: CN=2895EAABA2216477333FE1D1945D9C18B651245C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ae:35:43:f6:8e:5b:eb:a5:d7:bc:f9:14:a0: 3f:e7:f0:c5:c2:f5:79:b7:67:f9:4c:97:65:d8:18: 88:16:21:26:55:8d:23:a1:55:22:6b:e5:53:c4:8f: cd:14:aa:e2:c2:15:16:9b:75:dd:86:99:47:50:27: f2:35:1a:ef:4e:39:dd:a7:6c:5f:20:ca:21:2c:4e: c5:f6:c1:01:0e:52:d7:27:33:0c:02:66:77:e3:40: 88:d2:cc:5c:ef:c4:13:68:df:5e:5b:cd:74:c3:cd: c7:e4:a3:18:06:db:c7:97:64:2f:09:42:0c:c9:54: 9d:77:48:d4:f7:5b:5e:b9:fa:a2:1e:e8:a6:21:c7: ee:ac:6f:85:e6:f9:f1:75:41:ee:11:0e:17:a4:1a: eb:83:87:ed:4b:a7:82:62:17:42:84:1c:f5:81:0f: 27:1c:63:6a:7d:d7:48:14:ef:39:f5:51:6f:38:e7: ea:7b:1c:53:3b:fb:48:21:43:fc:0f:4f:ce:c1:3e: c2:ee:cf:5f:c7:20:b2:75:3d:fc:e5:f3:a9:fb:a1: 26:0d:a9:02:ad:b6:6a:ca:90:0c:49:4c:ab:a5:53: 9d:7c:bb:af:61:3b:66:39:88:e8:bf:56:a5:6c:bf: f8:13:42:51:38:86:96:b1:f8:91:4f:dd:fb:70:24: eb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:95:EA:AB:A2:21:64:77:33:3F:E1:D1:94:5D:9C:18:B6:51:24:5C X509v3 Authority Key Identifier: keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:47:b7:b7:53:12:37:b6:6e:49:9c:21:e1:84:5d:86:bd:16: 5f:98:48:a3:40:86:d2:07:94:9a:cb:f3:32:a9:d0:15:c7:4c: d1:ba:af:f9:6b:9d:d9:6c:d4:cd:e0:38:fd:d9:de:4d:00:c0: 77:84:c1:40:46:1a:88:20:b5:76:be:77:01:1d:4f:fc:d5:40: 1d:cf:1a:13:00:c8:51:80:6d:cc:e3:cc:5f:c6:3b:2c:7c:53: 6e:42:0e:19:86:94:00:4c:b0:3a:83:10:03:bb:58:58:98:ea: 03:6c:62:c3:3e:c1:9c:94:86:ed:53:3a:93:81:5b:a1:84:13: f8:a8:72:95:2c:90:df:a5:0d:67:49:e1:6e:07:8c:1a:a0:e7: 00:ab:56:c3:fb:04:91:9d:fe:ff:7c:a8:f5:2e:2f:90:64:9f: f5:bc:5f:c1:e8:86:a5:d8:ca:97:02:e4:ac:1d:cb:cd:46:4f: 1d:bc:c2:67:6d:fa:fa:17:ce:89:fa:b3:b3:6d:2d:55:ba:ee: 2e:a2:83:c1:2e:bf:89:32:77:8a:b5:a1:99:b8:3e:b8:b3:56: cf:47:65:08:29:d5:29:eb:24:77:64:b0:af:0c:95:23:ca:42: 93:ab:69:4e:35:78:a3:fa:0f:83:4a:f7:e7:e6:f0:1b:7a:27: c8:13:26:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCaGlZy8f0yrKPn/Vx7HC/dvc9gEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5 MTYwMDg3RDAeFw0yNjAzMDEwNjA1NDhaFw0yNjAzMDQwODU3NDhaMDMxMTAvBgNV BAMTKDI4OTVFQUFCQTIyMTY0NzczMzNGRTFEMTk0NUQ5QzE4QjY1MTI0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKrjVD9o5b66XXvPkUoD/n8MXC 9Xm3Z/lMl2XYGIgWISZVjSOhVSJr5VPEj80UquLCFRabdd2GmUdQJ/I1Gu9OOd2n bF8gyiEsTsX2wQEOUtcnMwwCZnfjQIjSzFzvxBNo315bzXTDzcfkoxgG28eXZC8J QgzJVJ13SNT3W165+qIe6KYhx+6sb4Xm+fF1Qe4RDhekGuuDh+1Lp4JiF0KEHPWB DyccY2p910gU7zn1UW845+p7HFM7+0ghQ/wPT87BPsLuz1/HILJ1Pfzl86n7oSYN qQKttmrKkAxJTKulU518u69hO2Y5iOi/VqVsv/gTQlE4hpax+JFP3ftwJOubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKJXqq6IhZHczP+HRlF2cGLZRJFwwHwYDVR0j BBgwFoAUqy/3SuJsaz08cYg01wCYW5FgCH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTRiYjRjOC02ZmNmLTRmZmYtYmRjYy1mZTFmY2NlZTEwNDUvMC9BQjJGRjc0QUUy NkM2QjNEM0M3MTg4MzRENzAwOTg1QjkxNjAwODdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5MTYw MDg3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4 NUI5MTYwMDg3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINHt7dTEje2bkmcIeGEXYa9Fl+YSKNAhtIH lJrL8zKp0BXHTNG6r/lrndls1M3gOP3Z3k0AwHeEwUBGGoggtXa+dwEdT/zVQB3P GhMAyFGAbczjzF/GOyx8U25CDhmGlABMsDqDEAO7WFiY6gNsYsM+wZyUhu1TOpOB W6GEE/iocpUskN+lDWdJ4W4HjBqg5wCrVsP7BJGd/v98qPUuL5Bkn/W8X8HohqXY ypcC5Kwdy81GTx28wmdt+voXzon6s7NtLVW67i6ig8Euv4kyd4q1oZm4PrizVs9H ZQgp1SnrJHdksK8MlSPKQpOraU41eKP6D4NK9+fm8Bt6J8gTJog= -----END CERTIFICATE-----Generated at Mon Mar 2 04:05:22 2026 by rpki-client