$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft File: 5ABFE157E467A6732384B658909A9764D5D88AEC.mft (raw, json) Hash identifier: /x8L45TnxuGyRgfkQ7zVlVWhTSKBIEfMwmtOL0Xcn0I= Subject key identifier: 3A:F9:6F:1A:C5:9F:52:F6:EF:C5:3C:39:AE:99:B8:AE:4F:F0:57:1F Authority key identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC Certificate issuer: /CN=5ABFE157E467A6732384B658909A9764D5D88AEC Certificate serial: 6B6A7BDA872BBCA0EA55EB98BF3BE53B978EED0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft Manifest number: BD Signing time: Sun 20 Sep 2026 22:14:20 +0000 Manifest this update: Sun 20 Sep 2026 22:09:20 +0000 Manifest next update: Mon 21 Sep 2026 23:00:20 +0000 Files and hashes: 1: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: OYkbzaiaQarKQmGzbsa0kcIv0ahbBNrL8RA56NXr+2g=) 2: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (hash: WFBdDzYNGyGBPxFeYXB5Lb1GK9i9G1iuTrrdeZuMZkY=) 3: 5ABFE157E467A6732384B658909A9764D5D88AEC.crl (hash: Qy9peH5jbYp//4OmK/JXOqGwZJ67zZUzXLQJSEnWl68=) 4: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: s1c5Xhjj1A4MpzLQqmtjwYb0lHUpDy9QxtX6cd6J7tw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6a:7b:da:87:2b:bc:a0:ea:55:eb:98:bf:3b:e5:3b:97:8e:ed:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABFE157E467A6732384B658909A9764D5D88AEC Validity Not Before: Sep 20 22:09:20 2026 GMT Not After : Sep 21 23:00:20 2026 GMT Subject: CN=3AF96F1AC59F52F6EFC53C39AE99B8AE4FF0571F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:57:fe:58:b5:46:04:a1:3f:4a:08:86:ae: b2:7d:9a:72:bd:d1:4e:b4:fa:a3:bd:a6:93:79:ed: 96:db:b0:43:2b:19:5b:bc:33:e7:1a:56:63:aa:bd: 7d:46:a3:4a:83:f6:86:9d:91:f5:dc:2d:a1:18:2d: 3a:a7:3e:4a:3e:4b:0d:a4:f0:1a:17:73:87:bc:de: e4:cf:70:d0:29:06:78:fd:b6:dd:84:be:96:73:a2: 6b:d1:40:ee:37:06:96:02:b2:19:1c:9a:21:35:9b: 1a:0e:81:cb:f4:95:cb:83:02:72:bf:7d:43:60:df: 3c:ca:8c:cf:1b:7d:52:30:76:0e:81:8a:4c:69:22: 09:09:79:e8:6c:27:ab:99:66:f7:ea:34:d6:db:36: b8:77:4d:13:d7:8b:50:9e:ab:a0:04:2e:fe:8a:d1: eb:0a:df:14:ca:56:ce:37:81:31:1c:3d:57:c3:ef: d6:3e:09:dd:54:b6:c9:cf:fb:7a:c6:f1:ea:94:c2: 56:54:a3:cf:12:de:f1:34:14:45:8e:fa:6c:0e:80: 6a:7d:a8:6d:f2:ea:6e:4b:95:39:45:88:4b:18:81: ae:eb:01:48:11:cb:73:1b:22:87:16:cb:a1:40:e7: b6:94:56:95:80:89:62:d4:87:fd:5e:10:8a:47:86: d7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F9:6F:1A:C5:9F:52:F6:EF:C5:3C:39:AE:99:B8:AE:4F:F0:57:1F X509v3 Authority Key Identifier: keyid:5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:92:56:88:ae:db:ff:37:8b:06:88:07:35:90:a4:9f:b8:dd: c8:7c:03:3a:58:59:3b:be:19:f6:cb:1e:26:f3:52:65:12:e1: 4a:ff:ad:80:4b:81:65:75:fa:b2:a1:7a:25:c9:b1:bc:08:16: 22:16:12:7a:0d:12:6d:fd:77:c2:1b:48:8f:52:22:d1:ea:d1: cc:90:dd:eb:60:76:8a:61:67:c4:b5:4b:7b:10:fc:6b:e7:f9: 5a:23:b0:3d:e3:60:bd:d0:7c:c0:38:42:48:c9:43:d7:62:64: 1b:b6:0c:d8:3e:64:19:ae:32:93:73:73:6c:24:00:d0:c1:2e: c5:01:41:bb:67:74:51:00:a7:0d:59:04:38:32:3d:03:76:f0: a0:e8:4f:31:ea:d6:50:85:5a:41:90:fb:f4:27:94:ea:26:14: c5:53:76:40:be:68:17:16:ec:17:f7:c2:fb:77:55:18:36:fc: 0b:15:46:07:9a:9b:22:a2:ad:fe:50:e7:50:a6:3f:12:44:f8: 98:59:c2:84:eb:32:f1:37:8b:62:4d:dc:1a:2a:51:f1:a8:18: fc:99:a0:02:f3:6e:99:a0:23:ad:bc:ac:54:1b:56:2f:aa:78: 93:d7:f4:9b:af:fa:53:2f:44:e2:e8:1a:36:e6:63:11:65:81: 97:68:c2:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2p72ocrvKDqVeuYvzvlO5eO7Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3NjRE NUQ4OEFFQzAeFw0yNjA5MjAyMjA5MjBaFw0yNjA5MjEyMzAwMjBaMDMxMTAvBgNV BAMTKDNBRjk2RjFBQzU5RjUyRjZFRkM1M0MzOUFFOTlCOEFFNEZGMDU3MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qlf+WLVGBKE/SgiGrrJ9mnK9 0U60+qO9ppN57ZbbsEMrGVu8M+caVmOqvX1Go0qD9oadkfXcLaEYLTqnPko+Sw2k 8BoXc4e83uTPcNApBnj9tt2EvpZzomvRQO43BpYCshkcmiE1mxoOgcv0lcuDAnK/ fUNg3zzKjM8bfVIwdg6BikxpIgkJeehsJ6uZZvfqNNbbNrh3TRPXi1Ceq6AELv6K 0esK3xTKVs43gTEcPVfD79Y+Cd1UtsnP+3rG8eqUwlZUo88S3vE0FEWO+mwOgGp9 qG3y6m5LlTlFiEsYga7rAUgRy3MbIocWy6FA57aUVpWAiWLUh/1eEIpHhtd3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOvlvGsWfUvbvxTw5rpm4rk/wVx8wHwYDVR0j BBgwFoAUWr/hV+RnpnMjhLZYkJqXZNXYiuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJkMzA1ODctYTdjYS00MTk1LWEzNTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdF NDY3QTY3MzIzODRCNjU4OTA5QTk3NjRENUQ4OEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUJGRTE1N0U0NjdBNjczMjM4NEI2NTg5MDlBOTc2NEQ1RDg4 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3 NjRENUQ4OEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeSVoiu2/83iwaIBzWQpJ+43ch8AzpYWTu+ GfbLHibzUmUS4Ur/rYBLgWV1+rKheiXJsbwIFiIWEnoNEm39d8IbSI9SItHq0cyQ 3etgdophZ8S1S3sQ/Gvn+VojsD3jYL3QfMA4QkjJQ9diZBu2DNg+ZBmuMpNzc2wk ANDBLsUBQbtndFEApw1ZBDgyPQN28KDoTzHq1lCFWkGQ+/QnlOomFMVTdkC+aBcW 7Bf3wvt3VRg2/AsVRgeamyKirf5Q51CmPxJE+JhZwoTrMvE3i2JN3BoqUfGoGPyZ oALzbpmgI628rFQbVi+qeJPX9Juv+lMvROLoGjbmYxFlgZdowr0= -----END CERTIFICATE-----Generated at Mon Sep 21 16:07:18 2026 by rpki-client