$ rpki-client -vvf repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft File: ABF793B534686EC2D5820CF153E43AAEF088BE41.mft (raw, json) Hash identifier: i4otSkGTb/z+zAgYVoDVRnmzR76dkOj4pvsYc9xX91g= Subject key identifier: A7:37:51:ED:65:0B:1B:CE:5B:70:8D:F9:EA:B5:30:1B:98:3D:D8:D1 Authority key identifier: AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41 Certificate issuer: /CN=ABF793B534686EC2D5820CF153E43AAEF088BE41 Certificate serial: 7FC280AB918B438FDC7C48BEC19CB7C376AA77C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft Manifest number: B8 Signing time: Mon 04 Aug 2025 06:21:00 +0000 Manifest this update: Mon 04 Aug 2025 06:16:00 +0000 Manifest next update: Thu 07 Aug 2025 07:06:00 +0000 Files and hashes: 1: ABF793B534686EC2D5820CF153E43AAEF088BE41.crl (hash: ZGI7AZaq5vmgP7+sClM+GPDi6Ln71B+u5iqAvmaSLoA=) 2: 3135372e36362e3133322e302f32342d3234203d3e20313431353831.roa (hash: 1q7NOrpSqOPfD7Cashe/RHzQJ9w+1Pv/PeYY6p7iaT0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 07:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c2:80:ab:91:8b:43:8f:dc:7c:48:be:c1:9c:b7:c3:76:aa:77:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABF793B534686EC2D5820CF153E43AAEF088BE41 Validity Not Before: Aug 4 06:16:00 2025 GMT Not After : Aug 7 07:06:00 2025 GMT Subject: CN=A73751ED650B1BCE5B708DF9EAB5301B983DD8D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:f3:ae:fd:34:54:18:41:97:11:07:52:91: 4a:97:5e:3c:85:f4:1a:a3:f0:f6:2c:d8:2b:f3:89: 38:35:a3:73:a7:a0:5f:96:c3:f7:f8:b2:58:af:f8: a3:62:c2:da:04:65:3f:b9:12:32:1c:df:ae:ae:92: 03:fa:30:fa:58:ce:7a:8f:53:09:3e:57:17:4f:ff: bf:cc:90:de:2a:a3:d7:9e:5f:87:94:31:42:0d:cf: 14:11:d3:b3:a3:86:df:dc:07:ac:e0:b0:55:4a:24: 73:a0:bb:2b:09:d9:00:0e:76:e4:35:23:cd:1e:fd: a3:84:ee:25:2f:e3:c3:f2:a4:9a:e2:36:f2:93:c6: d9:43:7c:c5:9f:16:a9:ef:41:79:7f:12:89:04:cd: 0c:34:b6:31:e6:34:5d:ef:47:42:d7:1f:bb:35:80: b3:9d:4c:38:c5:ab:b6:c7:c0:c9:80:28:1c:b8:b1: 67:e9:82:5e:87:7c:e1:e1:19:6b:8e:75:66:be:41: 6e:06:ba:aa:08:a8:d8:9c:1f:b4:16:44:cf:06:bb: 44:b0:82:c6:fb:26:2c:d1:5d:5e:3d:1f:d4:e3:33: 6e:77:8d:d5:7b:fc:6a:a9:7a:4a:12:bb:62:70:b3: 31:76:28:37:ce:f3:54:e3:23:c7:4d:e0:a5:50:f5: 91:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:37:51:ED:65:0B:1B:CE:5B:70:8D:F9:EA:B5:30:1B:98:3D:D8:D1 X509v3 Authority Key Identifier: keyid:AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ea:88:81:3d:db:90:4e:21:1c:37:1d:a0:be:2e:b6:4d:20: 01:c0:16:9f:ef:2f:23:4a:e1:98:5b:ff:62:8a:3f:93:13:20: 4e:d4:91:dc:15:09:7b:e4:0e:6d:2f:70:b0:3f:a0:e8:e5:47: a7:fc:15:99:a0:b2:86:51:9c:bd:50:c4:94:c3:87:bd:5b:d7: 19:c6:02:d8:d2:f3:7f:33:b3:c6:07:78:3a:c2:43:dc:2d:77: 91:8f:fa:c8:f9:b8:5c:b2:bd:03:e2:f0:bb:a3:f4:8d:1e:61: 69:4a:f6:37:0a:fe:cc:45:f0:0f:60:c5:ad:c7:60:21:e7:38: 45:38:8a:71:c9:6e:2d:1c:9d:28:3d:d4:db:e2:06:4b:ee:86: b3:20:a8:e5:75:f4:6b:da:b5:dc:59:a2:7e:b1:ee:72:a2:4e: e4:a6:3c:23:7e:11:3e:38:e0:3a:88:c7:d4:de:c2:ce:e8:94: 1f:8c:08:d7:75:36:93:91:ab:3d:74:ff:46:9a:c9:9c:61:08: 27:de:aa:57:1b:2d:2d:8f:65:d3:12:b2:a2:15:6f:a3:3e:32: 99:f8:d1:77:c0:0f:90:65:68:53:69:5f:81:d6:cd:b4:91:cf: a1:ea:68:d6:65:db:d1:bf:10:a9:71:d4:b0:26:06:cc:c1:2a: b3:83:71:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf8KAq5GLQ4/cfEi+wZy3w3aqd8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNBQUVG MDg4QkU0MTAeFw0yNTA4MDQwNjE2MDBaFw0yNTA4MDcwNzA2MDBaMDMxMTAvBgNV BAMTKEE3Mzc1MUVENjUwQjFCQ0U1QjcwOERGOUVBQjUzMDFCOTgzREQ4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClnfOu/TRUGEGXEQdSkUqXXjyF 9Bqj8PYs2CvziTg1o3OnoF+Ww/f4sliv+KNiwtoEZT+5EjIc366ukgP6MPpYznqP Uwk+VxdP/7/MkN4qo9eeX4eUMUINzxQR07Ojht/cB6zgsFVKJHOguysJ2QAOduQ1 I80e/aOE7iUv48PypJriNvKTxtlDfMWfFqnvQXl/EokEzQw0tjHmNF3vR0LXH7s1 gLOdTDjFq7bHwMmAKBy4sWfpgl6HfOHhGWuOdWa+QW4GuqoIqNicH7QWRM8Gu0Sw gsb7JizRXV49H9TjM253jdV7/GqpekoSu2JwszF2KDfO81TjI8dN4KVQ9ZF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpzdR7WULG85bcI356rUwG5g92NEwHwYDVR0j BBgwFoAUq/eTtTRobsLVggzxU+Q6rvCIvkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWE0Yjc4Mi1jMzdmLTQzNzktYThhNi00ZGE1ZDgyYjIzOWYvMC9BQkY3OTNCNTM0 Njg2RUMyRDU4MjBDRjE1M0U0M0FBRUYwODhCRTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNBQUVGMDg4 QkU0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNB QUVGMDg4QkU0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTqiIE925BOIRw3HaC+LrZNIAHAFp/vLyNK 4Zhb/2KKP5MTIE7UkdwVCXvkDm0vcLA/oOjlR6f8FZmgsoZRnL1QxJTDh71b1xnG AtjS838zs8YHeDrCQ9wtd5GP+sj5uFyyvQPi8Luj9I0eYWlK9jcK/sxF8A9gxa3H YCHnOEU4inHJbi0cnSg91NviBkvuhrMgqOV19GvatdxZon6x7nKiTuSmPCN+ET44 4DqIx9Tews7olB+MCNd1NpORqz10/0aayZxhCCfeqlcbLS2PZdMSsqIVb6M+Mpn4 0XfAD5BlaFNpX4HWzbSRz6HqaNZl29G/EKlx1LAmBszBKrODccI= -----END CERTIFICATE-----Generated at Tue Aug 5 22:57:08 2025 by rpki-client