$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: OFSzudiHb1vwX+SB0YQ/4kfY903V6qz4uJRdfKXO/1E= Subject key identifier: 05:7E:19:FC:58:8A:FA:51:15:F5:EE:45:E8:CD:C2:58:69:F2:98:36 Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 1FBC8E477CA3C0CBA8C39318A50C4C709F3AA3BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 054E Signing time: Sun 01 Mar 2026 16:11:22 +0000 Manifest this update: Sun 01 Mar 2026 16:06:22 +0000 Manifest next update: Wed 04 Mar 2026 21:59:22 +0000 Files and hashes: 1: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: GtPRtP464WpAY5mEznX+MG2Y26KpfK9+iuhXKPKnbLI=) 2: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: 3OhAvxNsRUQRikN2yaXRqBs4e08QCAoZbRjb4pOOfTU=) 3: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: HHh4yWOPjf+3eFvvhURi2TZowgG86xttRK9+B+PgPYQ=) 4: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: dUBpU1ehIxbV6F618KP38lS7LkigxBC/nUuk9FmPRks=) 5: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: sZdVNByPzhJV9m9Y9uWw0VmWp8VvlsFeFU25A1LbDYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bc:8e:47:7c:a3:c0:cb:a8:c3:93:18:a5:0c:4c:70:9f:3a:a3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Mar 1 16:06:22 2026 GMT Not After : Mar 4 21:59:22 2026 GMT Subject: CN=057E19FC588AFA5115F5EE45E8CDC25869F29836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ee:75:10:1d:03:46:31:0f:28:dd:5c:4c:1a: 1c:49:54:c1:ca:fc:5c:2f:0b:e7:f3:d2:57:f4:29: 3f:65:44:a2:5d:9d:91:a2:37:5d:36:e8:1b:ef:ac: fa:a8:1a:e8:f4:b8:3e:33:0b:f3:fb:39:12:2e:90: 70:5b:18:c3:ac:10:1d:7b:f9:dd:90:7a:f5:58:c7: 2e:89:e8:7d:5b:1c:be:f2:b6:be:7b:0c:67:71:98: 43:43:76:b1:ee:3b:a8:4e:1d:f0:f0:ec:d4:7f:43: 62:90:10:d6:68:2e:ca:4e:54:02:fb:c7:a4:2f:19: 7c:f8:bf:11:b4:24:d1:eb:25:52:7f:9a:2a:26:5a: 0b:cb:0f:37:55:7c:0f:61:a8:10:e3:e1:22:3c:15: 3a:24:48:d3:4b:25:b5:a1:f7:66:c2:51:1d:36:d1: 1b:ea:46:d6:b1:12:8c:f7:04:60:fd:0f:ba:78:2f: 30:a4:ad:22:7a:ab:38:7c:ad:55:6b:a6:e0:6a:df: aa:c9:67:88:b0:c5:03:04:0b:d1:0a:70:2d:49:50: dc:a2:b8:44:39:7a:aa:46:0f:02:cd:41:da:44:b4: 02:da:6a:77:19:38:f0:0b:d9:52:4d:a4:8e:31:5a: b4:90:61:94:76:51:8b:5f:5d:9e:cd:b9:3e:24:b4: 25:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7E:19:FC:58:8A:FA:51:15:F5:EE:45:E8:CD:C2:58:69:F2:98:36 X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9a:79:34:75:55:fa:d9:8d:da:fe:1e:51:40:5c:d5:42:7f: 7a:60:6b:5d:96:8c:79:0b:35:b5:17:7a:af:63:06:92:4d:65: e5:5f:7d:06:98:3e:09:ce:ac:df:a3:d4:51:c1:e3:84:c6:ab: 00:b3:27:b7:d2:a2:51:37:bf:4e:00:ef:2a:b1:49:8d:e1:04: 47:d3:46:ba:04:32:90:62:e5:64:31:ff:9c:92:8a:22:a2:c4: b0:28:06:3a:28:63:db:16:92:5a:75:06:bf:16:0e:6f:07:75: e8:69:07:d2:51:bf:70:4c:ab:c6:52:d6:d6:5a:61:d9:63:9f: 6b:3d:e2:75:10:82:50:e5:bc:c6:1d:e6:57:80:c7:0e:52:ac: 0a:be:62:36:27:a5:a9:df:f1:b0:1d:f4:2a:3f:7f:82:f9:a4: 17:33:14:91:b2:1e:80:9a:15:e3:ff:db:68:f1:02:40:0c:e4: f2:98:aa:04:ae:98:bc:1b:9b:5d:80:e9:06:c0:42:6b:85:9f: 82:aa:3d:9f:31:44:cd:d3:dd:b5:24:15:54:a7:e6:ad:02:d1: 89:7e:15:11:6a:ba:ff:20:72:08:4e:61:97:b0:d3:76:6c:01: bd:eb:40:80:d9:4a:c0:fa:fe:8a:86:24:0c:c3:38:95:46:a5: ba:8b:d7:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7yOR3yjwMuow5MYpQxMcJ86o7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNjAzMDExNjA2MjJaFw0yNjAzMDQyMTU5MjJaMDMxMTAvBgNV BAMTKDA1N0UxOUZDNTg4QUZBNTExNUY1RUU0NUU4Q0RDMjU4NjlGMjk4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw7nUQHQNGMQ8o3VxMGhxJVMHK /FwvC+fz0lf0KT9lRKJdnZGiN1026BvvrPqoGuj0uD4zC/P7ORIukHBbGMOsEB17 +d2QevVYxy6J6H1bHL7ytr57DGdxmENDdrHuO6hOHfDw7NR/Q2KQENZoLspOVAL7 x6QvGXz4vxG0JNHrJVJ/miomWgvLDzdVfA9hqBDj4SI8FTokSNNLJbWh92bCUR02 0RvqRtaxEoz3BGD9D7p4LzCkrSJ6qzh8rVVrpuBq36rJZ4iwxQMEC9EKcC1JUNyi uEQ5eqpGDwLNQdpEtALaancZOPAL2VJNpI4xWrSQYZR2UYtfXZ7NuT4ktCWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBX4Z/FiK+lEV9e5F6M3CWGnymDYwHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeaeTR1VfrZjdr+HlFAXNVCf3pga12WjHkL NbUXeq9jBpJNZeVffQaYPgnOrN+j1FHB44TGqwCzJ7fSolE3v04A7yqxSY3hBEfT RroEMpBi5WQx/5ySiiKixLAoBjooY9sWklp1Br8WDm8HdehpB9JRv3BMq8ZS1tZa Ydljn2s94nUQglDlvMYd5leAxw5SrAq+YjYnpanf8bAd9Co/f4L5pBczFJGyHoCa FeP/22jxAkAM5PKYqgSumLwbm12A6QbAQmuFn4KqPZ8xRM3T3bUkFVSn5q0C0Yl+ FRFquv8gcghOYZew03ZsAb3rQIDZSsD6/oqGJAzDOJVGpbqL17o= -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:54 2026 by rpki-client