$ rpki-client -vvf repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft File: ABF793B534686EC2D5820CF153E43AAEF088BE41.mft (raw, json) Hash identifier: S3lexfl5nuqa2DZ/r9s0+xLgsW2P0EbYHtlnLwHWEcY= Subject key identifier: 7C:90:7F:D7:F8:4B:5F:CD:DA:E5:21:43:C8:BD:99:3E:F2:1A:10:23 Authority key identifier: AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41 Certificate issuer: /CN=ABF793B534686EC2D5820CF153E43AAEF088BE41 Certificate serial: 0C1C7382E695C323F5AD8763556EA00EFF33CBF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft Manifest number: E3 Signing time: Sun 02 Nov 2025 19:31:04 +0000 Manifest this update: Sun 02 Nov 2025 19:26:04 +0000 Manifest next update: Thu 06 Nov 2025 01:44:04 +0000 Files and hashes: 1: ABF793B534686EC2D5820CF153E43AAEF088BE41.crl (hash: vJ+aczVmZhJqjT8A7bp5JggcS6k3sJWyuKuB8DbKj2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1c:73:82:e6:95:c3:23:f5:ad:87:63:55:6e:a0:0e:ff:33:cb:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABF793B534686EC2D5820CF153E43AAEF088BE41 Validity Not Before: Nov 2 19:26:04 2025 GMT Not After : Nov 6 01:44:04 2025 GMT Subject: CN=7C907FD7F84B5FCDDAE52143C8BD993EF21A1023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:d6:55:21:b5:0a:74:26:f9:26:88:1a:9d: 1c:0b:7a:7d:3d:e4:24:83:aa:70:78:e0:fd:f4:02: c6:cc:a1:4f:f7:f3:3e:76:f8:94:bb:bd:0e:16:70: e9:d3:5a:08:be:f1:07:d2:9c:71:f4:09:a5:cc:fd: 57:0f:6e:e1:35:44:4c:6a:d6:3f:fe:bd:6a:64:2d: 34:dc:4c:5d:f5:3e:4c:62:20:e7:fa:22:2f:06:ba: fc:25:b9:d2:40:90:3d:5d:95:53:c5:d3:af:ec:de: cc:c7:86:30:a7:0b:e6:2f:a6:70:b7:68:7a:f2:a6: 86:2f:c8:c2:66:a7:da:10:34:71:58:02:fe:e6:e2: fc:68:82:04:4c:c7:c8:15:e4:ea:f5:02:12:3a:1a: 9f:c7:08:94:5d:2d:88:08:76:12:60:08:d2:74:a7: db:b3:f6:5c:64:9d:03:69:52:75:d4:0e:64:56:73: 18:03:c3:91:52:e6:af:88:60:02:4e:5c:28:38:b4: 27:d4:60:9e:b6:52:ce:b0:80:d2:ce:ef:f3:04:63: 6a:01:51:4e:9a:c1:c3:fa:a7:4e:2e:60:35:55:28: 5c:21:ae:76:7c:93:6c:7b:00:7f:93:2d:dc:12:9c: 34:a3:6e:22:1b:2f:92:fc:ce:5c:38:35:fe:c2:d9: e9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:90:7F:D7:F8:4B:5F:CD:DA:E5:21:43:C8:BD:99:3E:F2:1A:10:23 X509v3 Authority Key Identifier: keyid:AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:7f:90:81:b2:63:00:47:ed:de:e7:7e:d4:81:3b:15:03:ca: 4f:fa:0e:00:8c:fb:3a:a8:b6:1c:92:2d:40:da:9e:94:64:b9: f8:2c:42:09:59:78:a9:15:af:5d:89:05:5b:ed:df:da:81:26: 90:8a:41:38:53:1b:09:9a:68:61:e7:bd:ab:04:bf:6f:ad:1a: 5e:26:5f:07:5d:9e:8f:64:98:13:52:1d:76:4a:0a:f5:5f:a5: 71:44:b1:f8:58:15:f4:a5:1a:09:28:14:71:49:b9:9d:13:bb: ba:9b:63:71:b4:34:3e:ce:04:9e:63:f6:fa:61:37:b9:e2:88: 44:84:03:97:9d:a2:2e:61:63:12:06:15:65:3c:92:eb:c9:28: be:6d:78:67:5f:8f:14:ab:fb:ac:01:6a:0f:98:72:6d:66:27: a9:9c:8d:ac:6c:e1:0c:a4:0a:b9:5b:df:df:96:d5:ff:a4:a1: de:cc:e1:96:f6:d5:50:ab:37:4d:ec:f0:33:60:14:9c:47:20: 02:09:8b:2e:68:d0:cc:93:51:dd:89:d3:52:cf:b2:5a:a9:34: a5:8c:95:a9:2c:f6:a7:31:29:dc:82:56:73:19:68:93:e4:64: 70:88:31:69:79:89:3b:96:56:23:2e:9b:df:5f:f8:5e:4a:06: 8f:72:30:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDBxzguaVwyP1rYdjVW6gDv8zy/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNBQUVG MDg4QkU0MTAeFw0yNTExMDIxOTI2MDRaFw0yNTExMDYwMTQ0MDRaMDMxMTAvBgNV BAMTKDdDOTA3RkQ3Rjg0QjVGQ0REQUU1MjE0M0M4QkQ5OTNFRjIxQTEwMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MtZVIbUKdCb5JoganRwLen09 5CSDqnB44P30AsbMoU/38z52+JS7vQ4WcOnTWgi+8QfSnHH0CaXM/VcPbuE1RExq 1j/+vWpkLTTcTF31PkxiIOf6Ii8GuvwludJAkD1dlVPF06/s3szHhjCnC+YvpnC3 aHrypoYvyMJmp9oQNHFYAv7m4vxoggRMx8gV5Or1AhI6Gp/HCJRdLYgIdhJgCNJ0 p9uz9lxknQNpUnXUDmRWcxgDw5FS5q+IYAJOXCg4tCfUYJ62Us6wgNLO7/MEY2oB UU6awcP6p04uYDVVKFwhrnZ8k2x7AH+TLdwSnDSjbiIbL5L8zlw4Nf7C2ekBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfJB/1/hLX83a5SFDyL2ZPvIaECMwHwYDVR0j BBgwFoAUq/eTtTRobsLVggzxU+Q6rvCIvkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWE0Yjc4Mi1jMzdmLTQzNzktYThhNi00ZGE1ZDgyYjIzOWYvMC9BQkY3OTNCNTM0 Njg2RUMyRDU4MjBDRjE1M0U0M0FBRUYwODhCRTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNBQUVGMDg4 QkU0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNB QUVGMDg4QkU0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMx/kIGyYwBH7d7nftSBOxUDyk/6DgCM+zqo thySLUDanpRkufgsQglZeKkVr12JBVvt39qBJpCKQThTGwmaaGHnvasEv2+tGl4m Xwddno9kmBNSHXZKCvVfpXFEsfhYFfSlGgkoFHFJuZ0Tu7qbY3G0ND7OBJ5j9vph N7niiESEA5edoi5hYxIGFWU8kuvJKL5teGdfjxSr+6wBag+Ycm1mJ6mcjaxs4Qyk Crlb39+W1f+kod7M4Zb21VCrN03s8DNgFJxHIAIJiy5o0MyTUd2J01LPslqpNKWM laks9qcxKdyCVnMZaJPkZHCIMWl5iTuWViMum99f+F5KBo9yMCE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:37:38 2025 by rpki-client