$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft File: 5ABFE157E467A6732384B658909A9764D5D88AEC.mft (raw, json) Hash identifier: SI0o5dCnkbP4tBBtZuHDy80Ggn0nL/pABIdAj1qfkno= Subject key identifier: CF:2D:A6:48:06:84:44:D4:F8:CE:20:46:86:3E:D0:C2:41:C5:07:36 Authority key identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC Certificate issuer: /CN=5ABFE157E467A6732384B658909A9764D5D88AEC Certificate serial: 4B77FE0C3B388325839504554ED891E23BA975D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:33:04 +0000 Manifest this update: Tue 16 Jun 2026 15:28:04 +0000 Manifest next update: Wed 17 Jun 2026 17:29:04 +0000 Files and hashes: 1: 5ABFE157E467A6732384B658909A9764D5D88AEC.crl (hash: T2IhGmvkkTaI7JTTRzkVLJ0QV6QgT8lGUP3OgDyUI/w=) 2: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: OYkbzaiaQarKQmGzbsa0kcIv0ahbBNrL8RA56NXr+2g=) 3: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: s1c5Xhjj1A4MpzLQqmtjwYb0lHUpDy9QxtX6cd6J7tw=) 4: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (hash: WFBdDzYNGyGBPxFeYXB5Lb1GK9i9G1iuTrrdeZuMZkY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:77:fe:0c:3b:38:83:25:83:95:04:55:4e:d8:91:e2:3b:a9:75:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABFE157E467A6732384B658909A9764D5D88AEC Validity Not Before: Jun 16 15:28:04 2026 GMT Not After : Jun 17 17:29:04 2026 GMT Subject: CN=CF2DA648068444D4F8CE2046863ED0C241C50736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:e0:c7:69:cc:e5:e4:a4:89:7e:13:d8:c8: d7:a3:7c:4d:13:ee:ba:a6:4e:98:b2:f1:89:fb:c8: c3:63:52:96:6f:80:14:64:7c:29:3a:1a:97:f9:24: a4:c2:b9:e0:49:ca:9c:70:a5:1b:cc:24:62:29:bb: 9f:c6:d9:e9:6d:9e:25:e1:f7:10:eb:af:f4:f1:7d: 09:ee:d5:ba:72:a4:96:45:ca:32:b2:74:53:14:96: 6b:8a:85:df:d6:88:db:34:43:1c:e5:ae:a9:0e:c5: 31:78:f3:a7:79:82:e4:b4:7f:ec:1a:48:2a:49:e9: b9:fa:26:f0:da:53:b8:5c:11:dd:f4:3f:4f:cf:31: b0:f9:10:e1:8b:61:f4:da:46:d7:ab:8c:3d:bd:d0: 84:b5:54:72:a5:05:42:de:d8:be:54:d9:88:d5:91: a1:3d:7e:d9:04:f8:74:d8:22:9f:b2:1c:e6:0c:d1: a8:0c:41:35:7b:45:0e:8c:89:7a:f9:ad:d0:f9:3f: cd:e7:7d:50:1d:90:3b:63:f7:f5:e6:84:de:56:3a: f3:ca:ce:48:0b:02:84:f2:94:71:38:17:03:00:4b: af:52:5a:bb:38:ca:be:5a:10:8f:3b:32:1e:b8:6b: 12:82:8d:aa:e4:a6:ba:3d:c1:b7:a1:dd:3c:34:a3: 2e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2D:A6:48:06:84:44:D4:F8:CE:20:46:86:3E:D0:C2:41:C5:07:36 X509v3 Authority Key Identifier: keyid:5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:51:68:b9:fd:35:af:92:32:07:61:ac:2b:7a:fa:28:8b:41: fd:a7:11:f9:aa:47:1a:ed:f1:c0:3e:54:78:53:b9:74:19:e8: 50:6f:8a:73:6a:ca:52:e6:09:11:50:ca:ec:c2:c0:80:cd:34: b9:23:5c:26:bb:41:33:96:e0:2f:d5:4e:f7:37:d6:6b:4d:bf: 38:dd:e0:0b:66:1d:be:e4:51:9e:e7:0c:f1:0b:8e:27:d2:b3: 6d:49:c7:21:0c:68:b3:ac:db:7e:c0:5a:d2:99:62:9a:9e:48: 28:d2:c6:11:ef:3c:ec:79:69:a5:d1:85:44:16:f2:52:b4:dc: f4:12:b0:96:09:be:e4:e8:16:a4:ff:20:30:12:0b:4e:c6:bb: 25:05:74:29:98:a9:f6:f2:69:cf:50:54:20:e1:eb:45:43:d1: ca:28:43:7b:8f:28:4a:5f:33:a0:b3:3d:60:04:97:53:21:60: 62:30:3d:4d:b9:24:95:f0:c7:ff:40:e2:c7:2f:9a:9b:99:4a: 8b:d7:ba:7f:7e:42:b5:83:d9:57:1b:5e:c2:ed:e0:a7:a2:09: e5:fd:cd:8e:bc:02:a2:49:a6:97:98:44:5a:cb:1c:81:34:5c: 43:ce:11:d4:b6:5d:b1:97:9b:46:88:b6:59:1d:d0:11:34:cb: 57:de:7d:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3f+DDs4gyWDlQRVTtiR4jupddEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3NjRE NUQ4OEFFQzAeFw0yNjA2MTYxNTI4MDRaFw0yNjA2MTcxNzI5MDRaMDMxMTAvBgNV BAMTKENGMkRBNjQ4MDY4NDQ0RDRGOENFMjA0Njg2M0VEMEMyNDFDNTA3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIuDHaczl5KSJfhPYyNejfE0T 7rqmTpiy8Yn7yMNjUpZvgBRkfCk6Gpf5JKTCueBJypxwpRvMJGIpu5/G2eltniXh 9xDrr/TxfQnu1bpypJZFyjKydFMUlmuKhd/WiNs0QxzlrqkOxTF486d5guS0f+wa SCpJ6bn6JvDaU7hcEd30P0/PMbD5EOGLYfTaRterjD290IS1VHKlBULe2L5U2YjV kaE9ftkE+HTYIp+yHOYM0agMQTV7RQ6MiXr5rdD5P83nfVAdkDtj9/XmhN5WOvPK zkgLAoTylHE4FwMAS69SWrs4yr5aEI87Mh64axKCjarkpro9wbeh3Tw0oy7DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzy2mSAaERNT4ziBGhj7QwkHFBzYwHwYDVR0j BBgwFoAUWr/hV+RnpnMjhLZYkJqXZNXYiuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJkMzA1ODctYTdjYS00MTk1LWEzNTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdF NDY3QTY3MzIzODRCNjU4OTA5QTk3NjRENUQ4OEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUJGRTE1N0U0NjdBNjczMjM4NEI2NTg5MDlBOTc2NEQ1RDg4 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3 NjRENUQ4OEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBRaLn9Na+SMgdhrCt6+iiLQf2nEfmqRxrt 8cA+VHhTuXQZ6FBvinNqylLmCRFQyuzCwIDNNLkjXCa7QTOW4C/VTvc31mtNvzjd 4AtmHb7kUZ7nDPELjifSs21JxyEMaLOs237AWtKZYpqeSCjSxhHvPOx5aaXRhUQW 8lK03PQSsJYJvuToFqT/IDASC07GuyUFdCmYqfbyac9QVCDh60VD0cooQ3uPKEpf M6CzPWAEl1MhYGIwPU25JJXwx/9A4scvmpuZSovXun9+QrWD2VcbXsLt4KeiCeX9 zY68AqJJppeYRFrLHIE0XEPOEdS2XbGXm0aItlkd0BE0y1fefWY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:43:47 2026 by rpki-client