$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft File: 5ABFE157E467A6732384B658909A9764D5D88AEC.mft (raw, json) Hash identifier: W0ttlglb0hGoDMQdmkzV/N788hsQm7ZOktT4wWMXwrw= Subject key identifier: 68:AF:7B:87:DB:0F:9B:50:00:85:57:42:2E:DA:F0:4B:13:CD:0A:1D Authority key identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC Certificate issuer: /CN=5ABFE157E467A6732384B658909A9764D5D88AEC Certificate serial: 2B91F3D3777EB842E543EEF076367FD92F0C9192 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 06:42:31 +0000 Manifest this update: Sun 15 Nov 2026 06:37:31 +0000 Manifest next update: Mon 16 Nov 2026 09:28:31 +0000 Files and hashes: 1: 5ABFE157E467A6732384B658909A9764D5D88AEC.crl (hash: ndOYUES/sRxDB9GYsxz5ZnT9zoQnAvVJ/9a2J+2rOn0=) 2: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: s1c5Xhjj1A4MpzLQqmtjwYb0lHUpDy9QxtX6cd6J7tw=) 3: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (hash: WFBdDzYNGyGBPxFeYXB5Lb1GK9i9G1iuTrrdeZuMZkY=) 4: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: OYkbzaiaQarKQmGzbsa0kcIv0ahbBNrL8RA56NXr+2g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:91:f3:d3:77:7e:b8:42:e5:43:ee:f0:76:36:7f:d9:2f:0c:91:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABFE157E467A6732384B658909A9764D5D88AEC Validity Not Before: Nov 15 06:37:31 2026 GMT Not After : Nov 16 09:28:31 2026 GMT Subject: CN=68AF7B87DB0F9B50008557422EDAF04B13CD0A1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:af:b1:a6:d3:84:24:4d:0c:36:9d:45:0d:7b: 0e:05:7f:fb:27:22:4f:64:b7:ca:6e:94:83:ae:97: 9d:08:a3:25:e5:f3:c8:ab:25:1a:6c:9a:0a:5c:c2: b2:81:82:f2:ad:33:a1:92:50:a1:d3:05:1e:97:a2: fc:f8:29:ec:fb:62:81:cc:7b:3c:76:26:dc:e1:ad: 73:0d:ad:e0:bd:55:65:e7:51:29:49:96:60:63:8b: ad:bd:25:db:45:61:ac:b8:e2:81:70:46:5b:92:7f: 08:70:68:98:fb:ac:19:ec:85:57:d1:71:fc:61:c5: 05:0f:53:6a:bc:41:ab:c5:2a:f5:a5:45:ed:75:2f: a2:27:51:a9:44:1f:ec:5f:ed:1f:de:69:3e:1d:72: 6b:af:f2:9f:d3:1c:51:1a:c1:a9:16:91:88:a5:69: 13:d7:fa:d5:9e:97:78:d6:dd:4b:e9:08:97:49:84: 28:86:1d:29:f8:99:8a:ac:12:a7:04:f3:e7:21:8b: 20:f6:2e:a2:5c:a4:70:50:b7:b8:33:15:ba:75:3b: 86:88:76:c5:1d:5a:0b:e4:9d:bc:69:44:4a:78:5f: 73:b7:07:b9:b8:3b:4d:cb:a2:d4:98:b8:44:b7:51: 81:23:78:b9:f3:e0:e5:41:62:d5:3a:54:dc:ae:59: 65:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AF:7B:87:DB:0F:9B:50:00:85:57:42:2E:DA:F0:4B:13:CD:0A:1D X509v3 Authority Key Identifier: keyid:5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:0d:dc:b8:ec:10:a8:6d:ba:8f:a3:a3:bc:38:e9:d0:e5:c4: 1b:d8:19:fc:fb:87:16:e9:27:fd:3b:ce:8c:b6:d6:00:ed:79: af:81:3e:45:e1:bc:31:0f:b1:38:cb:47:65:50:61:30:38:a9: f0:59:7e:8e:85:46:59:30:56:ec:f3:40:7d:97:ef:c2:ca:b2: 64:41:c4:7e:af:e0:a0:3e:60:5b:9a:04:fc:2a:f3:bb:59:89: 7d:01:40:a8:2b:ce:0b:13:5d:75:d9:6d:db:56:03:a4:50:c3: 91:3c:20:bb:19:62:18:d1:3e:92:d9:df:ab:89:ef:05:5e:5a: 1f:27:7e:f0:a3:50:f9:4a:a3:9a:bd:a5:9d:8d:12:f8:b1:1b: 3f:ae:35:fc:4f:62:30:54:11:c9:1d:82:9c:40:0f:a5:6c:a2: cb:1a:43:c2:f4:22:49:a5:2f:cf:ce:f7:f1:cb:e3:2e:ea:38: 4b:9b:09:29:09:be:d1:51:aa:f7:9f:6c:76:c3:2d:a4:ef:0a: eb:ec:56:2f:d1:aa:b1:e5:aa:76:4e:52:0e:34:42:1f:ca:a8: 03:05:7d:7c:34:8c:48:44:9a:8f:1f:52:a7:80:38:89:58:f8: 93:be:7d:89:09:ca:29:d0:df:82:dc:98:a1:d0:c9:18:b5:14: a7:6f:c3:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK5Hz03d+uELlQ+7wdjZ/2S8MkZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3NjRE NUQ4OEFFQzAeFw0yNjExMTUwNjM3MzFaFw0yNjExMTYwOTI4MzFaMDMxMTAvBgNV BAMTKDY4QUY3Qjg3REIwRjlCNTAwMDg1NTc0MjJFREFGMDRCMTNDRDBBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcr7Gm04QkTQw2nUUNew4Ff/sn Ik9kt8pulIOul50IoyXl88irJRpsmgpcwrKBgvKtM6GSUKHTBR6Xovz4Kez7YoHM ezx2JtzhrXMNreC9VWXnUSlJlmBji629JdtFYay44oFwRluSfwhwaJj7rBnshVfR cfxhxQUPU2q8QavFKvWlRe11L6InUalEH+xf7R/eaT4dcmuv8p/THFEawakWkYil aRPX+tWel3jW3UvpCJdJhCiGHSn4mYqsEqcE8+chiyD2LqJcpHBQt7gzFbp1O4aI dsUdWgvknbxpREp4X3O3B7m4O03LotSYuES3UYEjeLnz4OVBYtU6VNyuWWWHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaK97h9sPm1AAhVdCLtrwSxPNCh0wHwYDVR0j BBgwFoAUWr/hV+RnpnMjhLZYkJqXZNXYiuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJkMzA1ODctYTdjYS00MTk1LWEzNTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdF NDY3QTY3MzIzODRCNjU4OTA5QTk3NjRENUQ4OEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUJGRTE1N0U0NjdBNjczMjM4NEI2NTg5MDlBOTc2NEQ1RDg4 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3 NjRENUQ4OEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkN3LjsEKhtuo+jo7w46dDlxBvYGfz7hxbp J/07zoy21gDtea+BPkXhvDEPsTjLR2VQYTA4qfBZfo6FRlkwVuzzQH2X78LKsmRB xH6v4KA+YFuaBPwq87tZiX0BQKgrzgsTXXXZbdtWA6RQw5E8ILsZYhjRPpLZ36uJ 7wVeWh8nfvCjUPlKo5q9pZ2NEvixGz+uNfxPYjBUEckdgpxAD6VsossaQ8L0Ikml L8/O9/HL4y7qOEubCSkJvtFRqvefbHbDLaTvCuvsVi/RqrHlqnZOUg40Qh/KqAMF fXw0jEhEmo8fUqeAOIlY+JO+fYkJyinQ34LcmKHQyRi1FKdvw/U= -----END CERTIFICATE-----Generated at Sun Nov 15 21:04:41 2026 by rpki-client