$ rpki-client -vvf repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft File: ABF793B534686EC2D5820CF153E43AAEF088BE41.mft (raw, json) Hash identifier: ZzIa0S4eKjTgXDNmMqMKx30Gi43ediE5C8zaDvdp7HI= Subject key identifier: 9B:26:F2:86:E4:D6:2A:81:8F:A3:DC:19:96:47:CA:5C:52:EF:43:65 Authority key identifier: AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41 Certificate issuer: /CN=ABF793B534686EC2D5820CF153E43AAEF088BE41 Certificate serial: 619853D10A4867F3FA0DF2FC3F838970F2238894 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft Manifest number: 89 Signing time: Sat 26 Apr 2025 18:40:59 +0000 Manifest this update: Sat 26 Apr 2025 18:35:59 +0000 Manifest next update: Wed 30 Apr 2025 00:22:59 +0000 Files and hashes: 1: 3135372e36362e3133322e302f32332d3233203d3e20313431353831.roa (hash: ciUy0UssIwD3zqr8/0zlXBgZIw/zkVM4rTUa8BUUQGs=) 2: ABF793B534686EC2D5820CF153E43AAEF088BE41.crl (hash: jAD3/xU0Ag+LmXkvKjpszOlDXPZ2pFXdGG7c59l2STk=) 3: 3135372e36362e3133322e302f32342d3234203d3e20313431353831.roa (hash: KdEaTKN6AleSQvVu+wySJtdluJCuau/WQhujVbfG1d8=) 4: 3135372e36362e3133332e302f32342d3234203d3e20313431353831.roa (hash: vE0iFM1EETfZXZSAiwCHT3tvK82AVhE2Ent645QVTOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:98:53:d1:0a:48:67:f3:fa:0d:f2:fc:3f:83:89:70:f2:23:88:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABF793B534686EC2D5820CF153E43AAEF088BE41 Validity Not Before: Apr 26 18:35:59 2025 GMT Not After : Apr 30 00:22:59 2025 GMT Subject: CN=9B26F286E4D62A818FA3DC199647CA5C52EF4365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:12:b2:14:23:a8:74:d6:8c:fa:ae:20:2e:fb: bd:97:53:98:63:5f:1e:f7:37:94:e5:99:8a:e7:af: a8:54:af:fa:c6:5f:3c:f9:56:30:2b:fd:7c:be:1f: 66:9e:ec:eb:96:8d:ca:33:d7:0a:41:d3:89:ef:ca: 2f:f7:b4:18:a5:e9:ba:5f:09:af:56:13:ee:ef:eb: 80:9a:76:22:02:17:58:46:69:ed:7b:6e:d6:f0:3b: 1b:fc:4f:68:04:8c:da:6c:d6:ab:87:e3:ec:00:cd: 05:dc:36:82:96:e9:fd:42:ac:00:57:c9:07:e7:48: 8e:d6:2b:17:75:88:4e:a3:9c:66:58:ad:d9:40:d1: 94:16:1a:24:0b:d8:8b:69:3a:25:6d:7a:a5:ef:ae: ea:e4:d3:96:94:6f:9b:31:e2:c5:f2:85:e4:62:bd: a8:7e:db:87:20:b3:58:9c:10:d7:94:19:b2:36:72: c4:90:6b:92:d2:bc:77:89:ce:b2:5b:1f:88:20:69: 65:b4:e0:6b:d6:67:6e:ff:c0:2c:0e:89:fe:52:ea: 46:9d:6a:cc:f9:01:1b:4a:a7:4c:34:a2:f3:db:60: 49:e6:36:e0:8d:5c:69:f7:9c:04:fd:84:0f:f9:28: 07:ef:5c:c3:2a:d5:a8:af:7b:5a:c6:3e:0a:ec:93: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:26:F2:86:E4:D6:2A:81:8F:A3:DC:19:96:47:CA:5C:52:EF:43:65 X509v3 Authority Key Identifier: keyid:AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a3:f5:df:38:ba:81:2e:5d:c6:f8:63:4f:69:50:8f:b6:78: 3f:56:d8:f9:9e:58:e0:b8:c5:66:81:93:f1:d8:c0:65:67:2b: f8:48:8b:05:f3:e7:fd:7d:8b:40:70:e9:73:25:19:5b:5d:90: f9:dd:83:19:0c:5f:0f:28:44:dd:0a:c6:17:81:bb:16:f1:a3: 64:0c:d7:77:0c:ed:e5:af:ff:ad:c6:2d:f4:a0:4e:b3:5c:29: 41:f5:1a:76:83:dc:45:6d:95:07:6f:a2:af:1e:b9:99:3f:7b: dd:29:82:d4:e1:3a:dc:bc:8a:59:5a:cf:5a:81:97:50:f8:90: b7:e5:2f:6e:ae:ce:4e:4a:04:06:a5:68:fb:ec:5a:97:00:8e: 5a:b3:f1:ec:60:19:59:c6:f3:ce:b2:55:db:68:64:b6:8c:f7: 0f:91:ea:49:14:bb:11:ff:0a:1d:7f:5d:8c:15:ab:49:94:68: cb:a7:64:de:99:28:30:45:44:c3:69:4b:e7:4e:59:b5:23:cc: 33:87:42:b3:2a:ba:bd:dc:bb:c6:1e:94:71:b8:77:fa:28:04: 2b:6f:3f:2e:5a:28:47:43:10:cb:fb:a5:54:bf:2d:d5:64:19: 91:b0:43:31:74:1c:6b:8c:d1:a3:88:52:23:b6:93:73:39:35: 85:f9:37:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYZhT0QpIZ/P6DfL8P4OJcPIjiJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNBQUVG MDg4QkU0MTAeFw0yNTA0MjYxODM1NTlaFw0yNTA0MzAwMDIyNTlaMDMxMTAvBgNV BAMTKDlCMjZGMjg2RTRENjJBODE4RkEzREMxOTk2NDdDQTVDNTJFRjQzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJErIUI6h01oz6riAu+72XU5hj Xx73N5TlmYrnr6hUr/rGXzz5VjAr/Xy+H2ae7OuWjcoz1wpB04nvyi/3tBil6bpf Ca9WE+7v64CadiICF1hGae17btbwOxv8T2gEjNps1quH4+wAzQXcNoKW6f1CrABX yQfnSI7WKxd1iE6jnGZYrdlA0ZQWGiQL2ItpOiVteqXvrurk05aUb5sx4sXyheRi vah+24cgs1icENeUGbI2csSQa5LSvHeJzrJbH4ggaWW04GvWZ27/wCwOif5S6kad asz5ARtKp0w0ovPbYEnmNuCNXGn3nAT9hA/5KAfvXMMq1aive1rGPgrsk5GhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmybyhuTWKoGPo9wZlkfKXFLvQ2UwHwYDVR0j BBgwFoAUq/eTtTRobsLVggzxU+Q6rvCIvkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWE0Yjc4Mi1jMzdmLTQzNzktYThhNi00ZGE1ZDgyYjIzOWYvMC9BQkY3OTNCNTM0 Njg2RUMyRDU4MjBDRjE1M0U0M0FBRUYwODhCRTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNBQUVGMDg4 QkU0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvQUJGNzkzQjUzNDY4NkVDMkQ1ODIwQ0YxNTNFNDNB QUVGMDg4QkU0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+j9d84uoEuXcb4Y09pUI+2eD9W2PmeWOC4 xWaBk/HYwGVnK/hIiwXz5/19i0Bw6XMlGVtdkPndgxkMXw8oRN0KxheBuxbxo2QM 13cM7eWv/63GLfSgTrNcKUH1GnaD3EVtlQdvoq8euZk/e90pgtThOty8illaz1qB l1D4kLflL26uzk5KBAalaPvsWpcAjlqz8exgGVnG886yVdtoZLaM9w+R6kkUuxH/ Ch1/XYwVq0mUaMunZN6ZKDBFRMNpS+dOWbUjzDOHQrMqur3cu8YelHG4d/ooBCtv Py5aKEdDEMv7pVS/LdVkGZGwQzF0HGuM0aOIUiO2k3M5NYX5N+w= -----END CERTIFICATE-----Generated at Sun Apr 27 23:18:17 2025 by rpki-client