$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft File: ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft (raw, json) Hash identifier: vgbSgjfcTTdgIttIf+/6AjtQjvF1+3bC/Xy++T1yaLE= Subject key identifier: 75:07:35:5E:81:8F:AB:06:EC:87:E7:B6:E2:F4:1C:EA:CF:4B:41:BE Authority key identifier: AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35 Certificate issuer: /CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235 Certificate serial: 32A1BC81A8F531A391916C600B05EC1014F83A0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft Manifest number: BE Signing time: Mon 21 Sep 2026 18:44:39 +0000 Manifest this update: Mon 21 Sep 2026 18:39:39 +0000 Manifest next update: Tue 22 Sep 2026 21:41:39 +0000 Files and hashes: 1: AS10217.roa (hash: rBN9V7NO+oNZzLzvFqCWOkrMsFmQrg1NnhxBG1/GfOM=) 2: AS45700.roa (hash: 4gylyPRrLCVxqv8jBeq1Y73wjMNwCZgjrx7f+jJHRfU=) 3: ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl (hash: ljuc66PCJGBfC+isKrVkiXrwoXoLNYwVs1/e5ABi04Y=) 4: AS147168.roa (hash: WiiJ0UINkkiQHu9jLgZQhKLsdBs17smAwZtsfZdz3PU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a1:bc:81:a8:f5:31:a3:91:91:6c:60:0b:05:ec:10:14:f8:3a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235 Validity Not Before: Sep 21 18:39:39 2026 GMT Not After : Sep 22 21:41:39 2026 GMT Subject: CN=7507355E818FAB06EC87E7B6E2F41CEACF4B41BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:d9:af:40:f2:c1:88:61:5e:47:e5:5e:94: 05:5c:af:ea:e8:14:93:17:75:e6:8d:b1:b9:c7:89: 25:d2:29:71:c2:33:79:a1:dd:80:df:38:fa:f6:b3: 90:c1:8b:45:67:e7:95:bc:0b:af:49:c7:ec:56:02: 81:3a:98:4b:54:14:58:a7:e2:00:72:76:51:97:e9: ec:64:3b:05:41:65:16:86:e2:4c:ff:9a:20:68:9d: e3:95:c4:0f:79:04:db:c1:a2:57:4c:f4:6f:90:9f: 4c:12:da:05:8e:ee:dd:0d:a3:5f:aa:be:c0:e3:79: bf:64:f0:13:aa:a9:2b:52:99:f6:23:f9:8e:41:05: 74:38:62:cf:be:2f:12:04:c0:d2:46:ff:36:28:1f: 9c:8d:9d:d3:1e:cc:38:67:39:f9:c5:6f:9a:b1:9a: 92:e4:05:9f:7e:1e:5a:bc:70:81:2a:17:0a:ff:02: e9:c1:5b:79:b4:f4:3a:5f:9f:12:5d:11:b9:60:91: c5:7b:7b:29:1e:02:63:74:c2:f5:6b:8f:78:1b:57: ab:7d:cc:8e:5d:52:04:1f:4d:60:fe:e9:fc:de:a0: a3:68:e3:f2:82:04:9d:52:9f:4c:f1:12:c6:0c:98: 4c:72:71:9c:2c:f4:73:41:03:8b:11:f8:f3:eb:48: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:07:35:5E:81:8F:AB:06:EC:87:E7:B6:E2:F4:1C:EA:CF:4B:41:BE X509v3 Authority Key Identifier: keyid:AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:dd:76:32:ba:6d:f3:65:2a:6b:58:d8:5a:88:d4:91:d3:90: f7:7d:00:a6:4c:7a:c5:28:49:fd:4f:72:f2:2a:54:ad:45:e5: 5d:3f:e7:39:b0:6f:ab:13:bd:3e:1e:22:ef:ea:81:00:0b:ae: ed:09:d6:66:9c:3d:f0:e6:53:d8:d4:dd:85:1a:c6:56:09:a5: f9:ba:d2:7a:4c:4b:b6:94:96:c9:6c:8a:a1:b5:26:1a:19:a6: 24:3b:a2:b2:84:8c:e5:da:13:31:8e:76:47:0b:0f:e8:54:e9: 5a:1a:cc:60:af:2e:e8:d3:d2:1b:34:e3:9e:70:b2:8d:4c:fa: 58:ae:13:6f:af:60:9b:90:6a:fa:b2:b0:34:71:a6:bc:46:48: ee:53:81:1b:9d:08:da:6a:83:6a:b0:c4:10:ab:2d:4f:c7:68: bf:c9:24:2b:cf:ce:8b:88:62:a8:3a:11:98:57:04:24:26:73: 06:18:d9:b3:95:45:56:a9:a5:97:0c:98:42:53:f0:2b:79:06: bf:1d:4b:6e:9d:98:34:0f:b4:74:c3:02:b1:c0:b4:b8:8f:ff: 03:52:5c:bc:56:9b:08:45:b9:f5:af:1b:e6:8d:fa:e2:7e:c9: 6a:84:ec:04:61:9c:31:a1:67:3e:ef:71:d1:55:ca:e3:04:8b: d8:3d:2f:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMqG8gaj1MaORkWxgCwXsEBT4OgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJGRTZCMzE5NzE0NzMxMkVDMUZBRTA1QTI1MkEzOTY0 RTlCQjIzNTAeFw0yNjA5MjExODM5MzlaFw0yNjA5MjIyMTQxMzlaMDMxMTAvBgNV BAMTKDc1MDczNTVFODE4RkFCMDZFQzg3RTdCNkUyRjQxQ0VBQ0Y0QjQxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSctmvQPLBiGFeR+VelAVcr+ro FJMXdeaNsbnHiSXSKXHCM3mh3YDfOPr2s5DBi0Vn55W8C69Jx+xWAoE6mEtUFFin 4gBydlGX6exkOwVBZRaG4kz/miBoneOVxA95BNvBoldM9G+Qn0wS2gWO7t0No1+q vsDjeb9k8BOqqStSmfYj+Y5BBXQ4Ys++LxIEwNJG/zYoH5yNndMezDhnOfnFb5qx mpLkBZ9+Hlq8cIEqFwr/AunBW3m09DpfnxJdEblgkcV7eykeAmN0wvVrj3gbV6t9 zI5dUgQfTWD+6fzeoKNo4/KCBJ1Sn0zxEsYMmExycZws9HNBA4sR+PPrSEb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdQc1XoGPqwbsh+e24vQc6s9LQb4wHwYDVR0j BBgwFoAUq/5rMZcUcxLsH64FolKjlk6bsjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZiNzA4MTgtMjM2Ni00MmUwLTlkYmQtMjU0MzgxMDY5ZTU3LzAvQUJGRTZCMzE5 NzE0NzMxMkVDMUZBRTA1QTI1MkEzOTY0RTlCQjIzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQkZFNkIzMTk3MTQ3MzEyRUMxRkFFMDVBMjUyQTM5NjRFOUJC MjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvQUJGRTZCMzE5NzE0NzMxMkVDMUZBRTA1QTI1MkEz OTY0RTlCQjIzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPddjK6bfNlKmtY2FqI1JHTkPd9AKZMesUo Sf1PcvIqVK1F5V0/5zmwb6sTvT4eIu/qgQALru0J1macPfDmU9jU3YUaxlYJpfm6 0npMS7aUlslsiqG1JhoZpiQ7orKEjOXaEzGOdkcLD+hU6VoazGCvLujT0hs0455w so1M+liuE2+vYJuQavqysDRxprxGSO5TgRudCNpqg2qwxBCrLU/HaL/JJCvPzouI Yqg6EZhXBCQmcwYY2bOVRVappZcMmEJT8Ct5Br8dS26dmDQPtHTDArHAtLiP/wNS XLxWmwhFufWvG+aN+uJ+yWqE7ARhnDGhZz7vcdFVyuMEi9g9Lwg= -----END CERTIFICATE-----Generated at Mon Sep 21 23:42:32 2026 by rpki-client