$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: 39QAFayd1tlQmcPrGOqHo0mE5bMGewm/RpMRd/KRnHE= Subject key identifier: CD:76:FB:01:24:76:E2:CD:AB:39:AC:2C:2E:01:EA:B1:C9:24:91:C8 Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 0E6FC7030BDC7318522134C0EB0FEB88B5FF6050 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 051A Signing time: Mon 03 Nov 2025 06:01:16 +0000 Manifest this update: Mon 03 Nov 2025 05:56:16 +0000 Manifest next update: Thu 06 Nov 2025 06:38:16 +0000 Files and hashes: 1: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: GtPRtP464WpAY5mEznX+MG2Y26KpfK9+iuhXKPKnbLI=) 2: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: 7kXSb2suxEtZTBWvipqIxJRMBR76zuKpPEbc9lAEqpc=) 3: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: sZdVNByPzhJV9m9Y9uWw0VmWp8VvlsFeFU25A1LbDYY=) 4: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: dUBpU1ehIxbV6F618KP38lS7LkigxBC/nUuk9FmPRks=) 5: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: HHh4yWOPjf+3eFvvhURi2TZowgG86xttRK9+B+PgPYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:6f:c7:03:0b:dc:73:18:52:21:34:c0:eb:0f:eb:88:b5:ff:60:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Nov 3 05:56:16 2025 GMT Not After : Nov 6 06:38:16 2025 GMT Subject: CN=CD76FB012476E2CDAB39AC2C2E01EAB1C92491C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:99:e5:d2:c4:18:29:87:fc:40:df:8d:f7: 5e:30:be:d8:3c:e2:cb:21:d8:3a:a9:9c:c9:16:c9: 32:90:94:22:88:09:72:bd:8d:87:fa:0e:41:bf:4f: b6:cf:65:6d:77:37:f4:26:b0:12:9f:22:3a:73:fb: eb:b1:4f:13:06:0a:9b:55:fe:d4:e5:e6:6e:c8:fa: bb:29:75:35:65:43:e1:ba:9c:28:3b:c7:61:17:cf: a6:74:7b:ef:7c:fb:c2:d1:6e:c2:08:da:e8:ab:ba: bb:09:52:5f:cd:5d:73:9a:39:56:f1:9d:0f:ec:83: 98:c7:65:c0:05:45:7c:55:a1:48:27:35:72:c5:be: 9e:a1:89:ec:cb:b4:8b:da:f8:dc:4a:28:d0:88:34: 73:c0:18:2e:f6:87:aa:2a:6d:a8:6a:7c:7e:97:c1: 39:80:5e:ac:bd:2a:a8:c2:e2:7e:ab:8b:cf:8c:35: a9:fa:c6:f9:c8:5f:6c:e6:13:e7:ed:a1:ab:d4:4e: 49:b6:83:67:53:a4:ca:b0:0c:ec:af:eb:9b:44:18: 36:e0:9a:04:0e:c1:43:52:2d:4c:db:46:f4:d2:46: 31:86:48:ef:40:7e:d3:f6:03:6b:d0:ff:3e:ad:9d: f2:bc:70:35:0d:66:7e:43:6b:84:51:86:62:0c:da: 02:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:76:FB:01:24:76:E2:CD:AB:39:AC:2C:2E:01:EA:B1:C9:24:91:C8 X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a8:b3:45:80:fc:7d:70:48:f8:14:ff:82:ec:8f:f1:96:7d: 82:3e:52:ee:fd:e2:4f:aa:f5:e7:9b:2e:85:ea:e4:e3:4d:c5: 4c:bd:4a:cc:21:0b:3b:7a:21:08:e0:40:4e:59:a7:00:8b:6f: 7d:7c:45:65:42:54:88:ef:17:a4:0f:97:c1:7e:25:23:87:aa: c9:91:f8:8d:e6:45:ee:2c:64:52:ef:fb:38:36:a8:e8:fd:99: e7:50:e9:b0:f8:32:57:9a:59:66:89:96:af:bd:00:51:de:d4: 6b:ca:e1:1b:07:39:e6:b8:bb:26:1a:6a:66:10:cb:7e:4a:56: ab:79:0d:35:90:12:5b:e9:4f:ce:51:ba:f3:d6:34:80:6d:b9: 63:34:86:35:e7:39:9c:89:28:d5:c2:10:db:b4:8b:cb:98:c5: 7c:81:c5:d0:13:18:f9:ca:3a:d6:4f:31:1e:ed:3f:88:75:20: 65:9d:9e:10:02:8e:a6:11:0a:4e:d2:6a:5a:e2:e2:0a:42:72: 3b:d0:8b:a9:d6:35:2e:8e:0d:95:1f:8d:53:97:58:8c:69:67: cd:c0:83:0b:c7:82:64:25:f6:5d:81:b9:ee:12:c4:52:b6:21: 95:4f:41:41:87:7f:57:0e:ca:a7:f9:ec:da:bf:be:3d:13:b0: 1e:a4:eb:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDm/HAwvccxhSITTA6w/riLX/YFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNTExMDMwNTU2MTZaFw0yNTExMDYwNjM4MTZaMDMxMTAvBgNV BAMTKENENzZGQjAxMjQ3NkUyQ0RBQjM5QUMyQzJFMDFFQUIxQzkyNDkxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDpnl0sQYKYf8QN+N914wvtg8 4ssh2DqpnMkWyTKQlCKICXK9jYf6DkG/T7bPZW13N/QmsBKfIjpz++uxTxMGCptV /tTl5m7I+rspdTVlQ+G6nCg7x2EXz6Z0e+98+8LRbsII2uirursJUl/NXXOaOVbx nQ/sg5jHZcAFRXxVoUgnNXLFvp6hiezLtIva+NxKKNCINHPAGC72h6oqbahqfH6X wTmAXqy9KqjC4n6ri8+MNan6xvnIX2zmE+ftoavUTkm2g2dTpMqwDOyv65tEGDbg mgQOwUNSLUzbRvTSRjGGSO9AftP2A2vQ/z6tnfK8cDUNZn5Da4RRhmIM2gINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzXb7ASR24s2rOawsLgHqsckkkcgwHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKos0WA/H1wSPgU/4Lsj/GWfYI+Uu794k+q 9eebLoXq5ONNxUy9SswhCzt6IQjgQE5ZpwCLb318RWVCVIjvF6QPl8F+JSOHqsmR +I3mRe4sZFLv+zg2qOj9medQ6bD4MleaWWaJlq+9AFHe1GvK4RsHOea4uyYaamYQ y35KVqt5DTWQElvpT85RuvPWNIBtuWM0hjXnOZyJKNXCENu0i8uYxXyBxdATGPnK OtZPMR7tP4h1IGWdnhACjqYRCk7Salri4gpCcjvQi6nWNS6ODZUfjVOXWIxpZ83A gwvHgmQl9l2Bue4SxFK2IZVPQUGHf1cOyqf57Nq/vj0TsB6k6+w= -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:43 2025 by rpki-client