$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: 31iuhuDykb/O/SGAz03OjhG6X/etHOly3iC98/mVrVI= Subject key identifier: 49:59:5C:FF:CC:53:4A:56:E5:7A:AB:4F:9E:26:26:48:B6:05:AB:B6 Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 713224B824E04E84508A0D807543EF80FF11C018 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 04DC Signing time: Sun 15 Jun 2025 20:41:18 +0000 Manifest this update: Sun 15 Jun 2025 20:36:18 +0000 Manifest next update: Thu 19 Jun 2025 03:09:18 +0000 Files and hashes: 1: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: 1JEbXTDlyY9iTamfa6bZFk76Ay45ArR/DoiHhm0P9iI=) 2: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: sZdVNByPzhJV9m9Y9uWw0VmWp8VvlsFeFU25A1LbDYY=) 3: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: HHh4yWOPjf+3eFvvhURi2TZowgG86xttRK9+B+PgPYQ=) 4: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: dUBpU1ehIxbV6F618KP38lS7LkigxBC/nUuk9FmPRks=) 5: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: GtPRtP464WpAY5mEznX+MG2Y26KpfK9+iuhXKPKnbLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:32:24:b8:24:e0:4e:84:50:8a:0d:80:75:43:ef:80:ff:11:c0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Jun 15 20:36:18 2025 GMT Not After : Jun 19 03:09:18 2025 GMT Subject: CN=49595CFFCC534A56E57AAB4F9E262648B605ABB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:66:18:b1:00:fd:a7:52:6b:c8:0d:7b:04:35: 83:15:ac:29:d5:74:c5:33:43:1e:d7:99:f2:e3:92: 5b:c2:01:68:d8:92:a7:26:2f:47:a9:9c:f5:07:e0: bd:25:41:44:be:71:81:51:a8:0b:14:de:49:0d:62: 32:33:32:56:76:11:40:0d:bc:9e:42:b8:ab:f3:d1: c4:2a:66:a6:2b:56:14:ce:19:fa:cf:4b:ef:6a:da: 9f:51:08:40:8c:4c:c7:24:fc:5c:c6:78:48:62:d2: d7:f5:cf:fd:14:6d:85:23:98:0b:63:ca:42:39:48: 5e:95:63:11:8c:e4:4e:42:33:89:b1:43:e0:8b:ec: 83:2d:d7:6b:d2:60:91:92:e7:34:3e:e6:40:00:13: 97:b9:87:c4:c7:07:d9:d1:b9:ac:d7:16:df:3b:15: 3e:04:34:c1:07:3d:8a:91:1a:5c:82:5c:fc:b0:7b: db:f8:43:13:ce:8b:1b:82:03:ca:b0:77:85:d4:67: 3a:ac:57:ce:61:f5:1e:a4:5c:9e:61:10:50:f2:ca: 37:c8:fc:54:27:9c:57:31:91:a2:5c:50:9f:c3:40: c5:d2:1e:23:ac:fd:05:c2:61:ab:ef:83:ed:19:ee: 89:a7:9d:77:90:47:bc:d5:56:99:72:97:3e:53:ee: f7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:59:5C:FF:CC:53:4A:56:E5:7A:AB:4F:9E:26:26:48:B6:05:AB:B6 X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:26:c6:34:43:d8:69:97:67:b5:36:95:22:d5:45:39:aa:60: 34:1f:b8:49:cb:27:4b:15:3d:f2:ee:68:a8:95:9b:06:b8:7c: 5e:20:f6:3e:c1:7d:79:c6:d5:a6:e7:8e:c9:69:80:72:89:5b: 31:5a:8d:75:cc:b7:9b:16:75:45:bf:36:6c:01:c7:e4:45:1c: a8:35:95:95:3c:26:54:42:dd:f3:9c:54:31:c9:51:66:03:67: 17:a5:e8:73:40:d9:36:fd:49:d1:9e:6f:b5:0d:82:f8:f5:90: c9:ae:b6:ed:7c:9b:48:90:05:b5:88:3e:fe:28:e0:dc:1c:ce: d0:55:66:1c:71:99:e6:a9:21:9b:6b:e8:d7:eb:16:33:6d:f6: 03:62:f1:54:91:cd:e6:46:a3:96:e3:4d:ad:a5:eb:56:d6:21: 90:8a:0b:0d:e8:8c:e6:ba:c1:c3:e2:d8:17:52:e1:3f:19:fa: 3f:da:e7:32:54:e5:62:33:1d:76:d0:11:ad:c5:08:cc:c5:42: 4d:09:57:0e:56:d5:2d:d4:37:09:e6:15:5d:91:50:b8:ef:4a: 9c:a2:de:88:a2:a1:ff:ca:e0:90:0d:aa:52:31:48:91:02:3b: 83:13:bd:1a:e3:be:24:f1:fe:26:1a:f3:e0:5e:1b:97:da:2e: ac:13:1e:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTIkuCTgToRQig2AdUPvgP8RwBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNTA2MTUyMDM2MThaFw0yNTA2MTkwMzA5MThaMDMxMTAvBgNV BAMTKDQ5NTk1Q0ZGQ0M1MzRBNTZFNTdBQUI0RjlFMjYyNjQ4QjYwNUFCQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZhixAP2nUmvIDXsENYMVrCnV dMUzQx7XmfLjklvCAWjYkqcmL0epnPUH4L0lQUS+cYFRqAsU3kkNYjIzMlZ2EUAN vJ5CuKvz0cQqZqYrVhTOGfrPS+9q2p9RCECMTMck/FzGeEhi0tf1z/0UbYUjmAtj ykI5SF6VYxGM5E5CM4mxQ+CL7IMt12vSYJGS5zQ+5kAAE5e5h8THB9nRuazXFt87 FT4ENMEHPYqRGlyCXPywe9v4QxPOixuCA8qwd4XUZzqsV85h9R6kXJ5hEFDyyjfI /FQnnFcxkaJcUJ/DQMXSHiOs/QXCYavvg+0Z7omnnXeQR7zVVplylz5T7vcDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSVlc/8xTSlbleqtPniYmSLYFq7YwHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsmxjRD2GmXZ7U2lSLVRTmqYDQfuEnLJ0sV PfLuaKiVmwa4fF4g9j7BfXnG1abnjslpgHKJWzFajXXMt5sWdUW/NmwBx+RFHKg1 lZU8JlRC3fOcVDHJUWYDZxel6HNA2Tb9SdGeb7UNgvj1kMmutu18m0iQBbWIPv4o 4NwcztBVZhxxmeapIZtr6NfrFjNt9gNi8VSRzeZGo5bjTa2l61bWIZCKCw3ojOa6 wcPi2BdS4T8Z+j/a5zJU5WIzHXbQEa3FCMzFQk0JVw5W1S3UNwnmFV2RULjvSpyi 3oiiof/K4JANqlIxSJECO4MTvRrjviTx/iYa8+BeG5faLqwTHmU= -----END CERTIFICATE-----Generated at Tue Jun 17 12:38:23 2025 by rpki-client