$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft File: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft (raw, json) Hash identifier: ytDaMD8+4o8b1dVb3zoik3zHQ/brUlyGvJ6tJ1VKV+E= Subject key identifier: 52:64:1B:F1:33:6E:8C:62:3D:EF:2D:8F:8B:3F:34:8C:64:9C:EE:8F Authority key identifier: AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 Certificate issuer: /CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Certificate serial: 6F2EEFFCA8B04472D6ADAB0D6D319FAD7FE845B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft Manifest number: BE Signing time: Mon 21 Sep 2026 16:52:23 +0000 Manifest this update: Mon 21 Sep 2026 16:47:23 +0000 Manifest next update: Tue 22 Sep 2026 20:49:23 +0000 Files and hashes: 1: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: uDv+UYL75QoUmpMlaL+3dQMgpVoz8iM4bxe1Z2EgXa4=) 2: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl (hash: OuzLfVfArty6ntn5YYQNKHDpNwEDvyC6kcKN4cjTw7s=) 3: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: Y3QjCeZ1GQuw+Af/4ElzHz4uj30AWOknv+PuSj10pQI=) 4: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: GRM6rus6lwETinGsMNAHhMdqqrq7IGt093Aq5KEiOyM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2e:ef:fc:a8:b0:44:72:d6:ad:ab:0d:6d:31:9f:ad:7f:e8:45:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Validity Not Before: Sep 21 16:47:23 2026 GMT Not After : Sep 22 20:49:23 2026 GMT Subject: CN=52641BF1336E8C623DEF2D8F8B3F348C649CEE8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5d:a6:bc:d5:46:84:44:3d:5b:e2:93:c1:5e: f6:fe:b3:bc:10:1c:5c:76:60:49:c2:ac:80:18:9f: 86:b1:0a:40:87:aa:fc:c6:27:ce:55:c7:db:11:f2: 3a:e6:e8:fb:fb:e8:de:d9:fa:c0:7d:c8:54:df:a7: f8:eb:f2:b0:c5:dc:fb:42:c7:42:84:1f:c8:b8:11: 3f:bc:71:7f:b1:fc:68:b4:ba:01:e4:67:8a:c6:15: c5:dd:7d:b7:84:ac:84:50:49:2d:9c:3d:8b:41:fc: 3b:96:fa:48:51:b8:b2:97:bb:88:6f:48:42:61:20: 4a:5c:c0:f5:44:f3:21:b9:ef:33:85:23:7d:cf:ea: 00:60:df:e3:0b:14:60:72:5e:b3:c6:8d:cc:a4:6b: 67:ba:94:69:1a:17:08:35:6d:bc:60:76:19:fb:0c: f1:62:5b:68:9d:21:2a:49:e2:20:e1:b6:a3:f0:13: 48:1f:fe:c3:2d:94:1f:86:70:df:bb:72:60:49:21: 77:84:a5:56:bc:d4:0d:bf:f4:d0:96:e7:e6:1c:c8: 9e:77:cb:6e:19:c0:15:84:54:34:3b:0d:12:2a:0b: f1:76:f8:84:18:b5:52:d8:ac:16:e9:f3:93:14:a0: 0c:97:98:5d:08:99:0a:c8:19:ee:53:f3:7d:e7:57: 13:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:64:1B:F1:33:6E:8C:62:3D:EF:2D:8F:8B:3F:34:8C:64:9C:EE:8F X509v3 Authority Key Identifier: keyid:AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:90:f5:ca:3d:23:b8:89:ee:68:82:51:b4:79:35:12:29:65: df:47:7a:38:cc:17:40:61:fc:30:c3:c4:09:e5:d0:cf:c6:d6: dd:ad:bb:5c:27:5a:9e:e8:13:27:c5:77:24:e1:91:26:a6:7b: 90:a0:78:a8:35:da:04:a3:55:03:c0:91:8a:b9:26:07:bb:92: e3:b5:e2:27:59:57:26:04:60:f2:ee:c8:55:1f:35:23:81:0d: 5e:2b:ac:21:61:ec:c2:53:8c:40:78:98:35:fa:2e:9a:e8:df: a1:58:2d:af:f0:20:f6:37:ba:89:97:69:68:7a:f3:ef:23:01: b7:e1:a9:e2:63:eb:1c:38:ae:20:b8:61:61:e7:4b:27:d8:53: 45:c2:81:7a:fb:c6:4a:04:ee:e9:78:27:dd:3f:38:60:06:fd: 7a:58:58:17:49:e4:bd:7c:ab:5b:23:04:4f:b2:39:ff:86:3e: 0f:09:1c:b0:72:bf:ca:a9:02:fe:42:89:ee:ca:3c:ed:84:4a: db:f5:e2:5f:a6:a3:0b:90:c2:89:a5:d5:20:ad:01:45:24:7a: 97:61:82:c7:cc:a1:e2:2b:ed:af:1c:f0:69:76:63:4c:9e:60: 37:64:36:83:66:20:98:84:4d:6a:80:27:af:6d:b7:3b:e1:95: 6d:b8:8f:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUby7v/KiwRHLWrasNbTGfrX/oRbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0 RjRFRTBENTAeFw0yNjA5MjExNjQ3MjNaFw0yNjA5MjIyMDQ5MjNaMDMxMTAvBgNV BAMTKDUyNjQxQkYxMzM2RThDNjIzREVGMkQ4RjhCM0YzNDhDNjQ5Q0VFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNXaa81UaERD1b4pPBXvb+s7wQ HFx2YEnCrIAYn4axCkCHqvzGJ85Vx9sR8jrm6Pv76N7Z+sB9yFTfp/jr8rDF3PtC x0KEH8i4ET+8cX+x/Gi0ugHkZ4rGFcXdfbeErIRQSS2cPYtB/DuW+khRuLKXu4hv SEJhIEpcwPVE8yG57zOFI33P6gBg3+MLFGByXrPGjcyka2e6lGkaFwg1bbxgdhn7 DPFiW2idISpJ4iDhtqPwE0gf/sMtlB+GcN+7cmBJIXeEpVa81A2/9NCW5+YcyJ53 y24ZwBWEVDQ7DRIqC/F2+IQYtVLYrBbp85MUoAyXmF0ImQrIGe5T833nVxNHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUmQb8TNujGI97y2Piz80jGSc7o8wHwYDVR0j BBgwFoAUq1D9vwOEbjPS+MUYfeqfXk9O4NUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc1OTQ3NmUtNmFkYi00ZjJlLWJlNzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYw Mzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0RjRFRTBENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjUwRkRCRjAzODQ2RTMzRDJGOEM1MTg3REVBOUY1RTRGNEVF MEQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlG NUU0RjRFRTBENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2Q9co9I7iJ7miCUbR5NRIpZd9HejjMF0Bh /DDDxAnl0M/G1t2tu1wnWp7oEyfFdyThkSame5CgeKg12gSjVQPAkYq5Jge7kuO1 4idZVyYEYPLuyFUfNSOBDV4rrCFh7MJTjEB4mDX6Lpro36FYLa/wIPY3uomXaWh6 8+8jAbfhqeJj6xw4riC4YWHnSyfYU0XCgXr7xkoE7ul4J90/OGAG/XpYWBdJ5L18 q1sjBE+yOf+GPg8JHLByv8qpAv5Cie7KPO2EStv14l+mowuQwoml1SCtAUUkepdh gsfMoeIr7a8c8Gl2Y0yeYDdkNoNmIJiETWqAJ69ttzvhlW24j0E= -----END CERTIFICATE-----Generated at Tue Sep 22 03:16:03 2026 by rpki-client