$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: w+5ZI0d8FYhyDFjkGaEWlUUtXPTzWQ5P1kRbj/Iohnc= Subject key identifier: 21:E0:EC:F0:8B:F0:D8:89:38:ED:04:7D:5F:95:51:F9:46:8D:13:F1 Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 7DD97A2422F452932679DA95CD7CE6533D1DC3CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 0563 Signing time: Fri 17 Apr 2026 13:41:25 +0000 Manifest this update: Fri 17 Apr 2026 13:36:25 +0000 Manifest next update: Mon 20 Apr 2026 15:01:25 +0000 Files and hashes: 1: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: HHh4yWOPjf+3eFvvhURi2TZowgG86xttRK9+B+PgPYQ=) 2: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: qkCvF40yXsMnSXI9e64NcgIyOIvx/71wXlb/YSJkISs=) 3: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: sZdVNByPzhJV9m9Y9uWw0VmWp8VvlsFeFU25A1LbDYY=) 4: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: dUBpU1ehIxbV6F618KP38lS7LkigxBC/nUuk9FmPRks=) 5: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: GtPRtP464WpAY5mEznX+MG2Y26KpfK9+iuhXKPKnbLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d9:7a:24:22:f4:52:93:26:79:da:95:cd:7c:e6:53:3d:1d:c3:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Apr 17 13:36:25 2026 GMT Not After : Apr 20 15:01:25 2026 GMT Subject: CN=21E0ECF08BF0D88938ED047D5F9551F9468D13F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:66:d5:25:f9:a2:bf:a8:65:bb:32:c3:47: c3:b5:d1:d7:5e:41:4c:af:ea:46:a3:9a:50:29:36: c2:68:54:d1:2d:d7:66:02:ad:f3:19:bf:5b:ff:57: 21:c4:f9:a1:79:72:20:b3:e9:0d:fc:da:0d:87:86: 2a:01:41:0b:ca:ad:4a:a8:56:f3:4b:e5:7d:cf:27: 4a:e1:bc:5c:aa:5c:a7:b6:ad:6a:f5:77:ca:1b:d4: 1c:58:46:6c:13:9d:ff:a8:19:bf:d1:5a:85:57:6c: e3:af:10:ce:d7:a6:11:c2:d2:18:73:8c:ad:94:31: 06:80:8a:12:1e:e9:98:55:21:96:44:0a:bf:47:b7: 14:fa:ac:84:7f:d1:7b:d0:8c:71:73:41:ce:e6:f3: da:83:c9:a3:25:f1:c5:95:ff:c7:3e:17:5e:28:24: fe:69:fd:27:9b:fb:76:47:cc:f6:27:e6:38:a3:d0: 02:30:88:2b:f1:ee:dd:59:4e:cb:9f:98:25:4c:58: 6b:03:d8:c6:93:f7:11:4e:2c:2d:19:f6:e5:ed:3f: 15:d1:9f:8f:df:9e:6d:92:45:69:4b:7d:fc:47:96: c7:b9:51:5f:a6:39:e6:62:ba:58:aa:9d:b8:71:d2: b9:d4:c5:2e:f6:e2:ac:07:c2:9c:11:a8:93:ab:f2: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E0:EC:F0:8B:F0:D8:89:38:ED:04:7D:5F:95:51:F9:46:8D:13:F1 X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:14:74:0e:1d:f7:e8:da:c8:b4:ef:6c:e6:66:e5:65:d4:18: 4f:1a:72:2e:6a:28:25:16:29:9f:37:9c:9b:ba:31:de:9d:f6: 13:f9:fb:5e:7e:7b:19:94:b9:50:ce:c3:c7:c5:b6:b6:b3:51: dc:c8:34:f2:a1:ca:c9:85:a2:02:12:2e:af:f9:a7:56:2c:e4: c4:dc:47:06:d3:c3:98:74:2b:fc:8e:78:12:e8:3d:3e:16:cf: 62:cd:04:ae:0e:87:7c:df:44:ea:c3:56:97:3e:dc:99:31:d7: 02:d9:03:ce:69:42:77:df:ed:f9:23:04:ce:14:32:1d:01:39: c2:9c:b2:00:b4:63:b4:c9:40:6c:a6:c1:9b:ef:d4:e4:c3:22: f0:46:4c:e8:94:e7:fd:53:dc:41:72:4e:66:86:0c:8c:3e:a5: 68:da:c6:a2:66:a3:55:fb:5c:77:d6:b5:97:6f:c7:ef:d1:85: e0:8b:ce:20:6a:48:c9:06:68:2e:5b:24:30:76:9b:ae:e2:5a: ff:06:26:cf:d4:c3:2e:44:38:b0:bb:78:8f:4f:17:0a:da:a8: cc:68:63:15:3d:3f:28:30:7d:a1:32:25:e2:95:98:43:30:23: dc:40:73:23:84:0e:33:39:4d:96:b9:f9:b3:2c:79:79:10:c7: c4:58:d3:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdl6JCL0UpMmedqVzXzmUz0dw8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNjA0MTcxMzM2MjVaFw0yNjA0MjAxNTAxMjVaMDMxMTAvBgNV BAMTKDIxRTBFQ0YwOEJGMEQ4ODkzOEVEMDQ3RDVGOTU1MUY5NDY4RDEzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqE2bVJfmiv6hluzLDR8O10dde QUyv6kajmlApNsJoVNEt12YCrfMZv1v/VyHE+aF5ciCz6Q382g2HhioBQQvKrUqo VvNL5X3PJ0rhvFyqXKe2rWr1d8ob1BxYRmwTnf+oGb/RWoVXbOOvEM7XphHC0hhz jK2UMQaAihIe6ZhVIZZECr9HtxT6rIR/0XvQjHFzQc7m89qDyaMl8cWV/8c+F14o JP5p/Seb+3ZHzPYn5jij0AIwiCvx7t1ZTsufmCVMWGsD2MaT9xFOLC0Z9uXtPxXR n4/fnm2SRWlLffxHlse5UV+mOeZiuliqnbhx0rnUxS724qwHwpwRqJOr8kIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIeDs8Ivw2Ik47QR9X5VR+UaNE/EwHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUUdA4d9+jayLTvbOZm5WXUGE8aci5qKCUW KZ83nJu6Md6d9hP5+15+exmUuVDOw8fFtrazUdzINPKhysmFogISLq/5p1Ys5MTc RwbTw5h0K/yOeBLoPT4Wz2LNBK4Oh3zfROrDVpc+3Jkx1wLZA85pQnff7fkjBM4U Mh0BOcKcsgC0Y7TJQGymwZvv1OTDIvBGTOiU5/1T3EFyTmaGDIw+pWjaxqJmo1X7 XHfWtZdvx+/RheCLziBqSMkGaC5bJDB2m67iWv8GJs/Uwy5EOLC7eI9PFwraqMxo YxU9PygwfaEyJeKVmEMwI9xAcyOEDjM5TZa5+bMseXkQx8RY08o= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:35 2026 by rpki-client