$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft File: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft (raw, json) Hash identifier: Xd47RzD58QdnuqDlVKD4XQUEkHpDQuYBQIH5Uci6oHo= Subject key identifier: 04:D0:84:24:D8:09:B2:34:D6:A3:9E:7A:13:A5:1D:1B:F3:93:02:D3 Authority key identifier: AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 Certificate issuer: /CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Certificate serial: 4BFB9E6BF332196C65CCC77A2110453FF58E4832 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 12:44:53 +0000 Manifest this update: Sun 15 Nov 2026 12:39:53 +0000 Manifest next update: Mon 16 Nov 2026 14:47:53 +0000 Files and hashes: 1: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: uDv+UYL75QoUmpMlaL+3dQMgpVoz8iM4bxe1Z2EgXa4=) 2: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: Y3QjCeZ1GQuw+Af/4ElzHz4uj30AWOknv+PuSj10pQI=) 3: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: GRM6rus6lwETinGsMNAHhMdqqrq7IGt093Aq5KEiOyM=) 4: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl (hash: 6M+SuOUw//icPDYKvsnydpHC0CmcsQMA2aR5IEaih9M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:fb:9e:6b:f3:32:19:6c:65:cc:c7:7a:21:10:45:3f:f5:8e:48:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Validity Not Before: Nov 15 12:39:53 2026 GMT Not After : Nov 16 14:47:53 2026 GMT Subject: CN=04D08424D809B234D6A39E7A13A51D1BF39302D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ef:80:a4:b5:48:79:f8:10:16:e3:34:9d:3f: cd:64:fb:14:4c:27:6b:d2:85:a0:fe:37:0f:38:aa: 34:e6:a4:6a:04:2b:89:a7:d1:a7:0d:dc:de:95:81: 70:19:18:82:6e:a6:90:eb:17:1e:77:38:6c:29:27: e7:15:95:76:00:4e:45:f9:03:0f:b6:85:6d:4c:57: 88:9a:39:7e:99:ab:6e:7b:92:9e:db:b1:50:4d:30: 74:a0:ae:ed:2d:4e:34:a4:f7:4e:47:c3:d0:9e:7f: 48:75:ce:82:f5:f7:3f:79:a3:f8:e2:dc:d3:36:bb: 87:f1:59:52:aa:34:7e:68:16:1e:58:fd:81:6d:40: a5:c9:32:56:2e:90:e3:eb:81:79:33:b4:6b:56:10: 6f:6c:60:71:d0:2c:ef:e7:3e:ea:8c:d7:44:56:00: ca:31:de:f3:5c:b9:bf:e3:95:29:d5:db:6f:cf:98: e5:fb:23:db:f0:27:c0:44:00:0d:9d:1a:3c:22:4a: ea:5b:ab:e8:83:15:ec:e7:07:b2:fc:6a:d7:b5:af: 43:f8:52:c9:a1:f8:5c:30:40:8a:66:35:a8:f6:2a: ad:64:9c:ed:55:34:68:d2:c4:ca:54:42:6b:01:39: 53:83:b8:2c:4c:c9:3b:2a:ea:fe:44:b3:51:39:41: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D0:84:24:D8:09:B2:34:D6:A3:9E:7A:13:A5:1D:1B:F3:93:02:D3 X509v3 Authority Key Identifier: keyid:AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:89:9a:a5:34:be:e4:e0:09:5d:40:72:53:93:79:3d:82:f8: 57:3a:22:d4:a7:2c:20:5d:48:52:90:dd:03:b8:04:2d:3e:79: 43:d9:11:55:3c:7e:95:7c:64:f0:9e:32:17:b2:54:2a:0c:d5: bc:4b:61:eb:d8:e8:1f:0f:e4:f1:c6:e8:fd:ec:63:55:77:09: 76:7d:95:6c:05:ad:79:2e:66:76:f5:9f:51:8b:95:f8:4c:78: f2:89:6b:60:6f:32:4d:15:9d:eb:21:c7:db:d9:ab:a7:8c:45: 6b:dd:4e:61:44:53:96:9f:7b:83:25:e5:e8:a5:78:9b:68:e3: bf:12:05:5b:b4:e6:3b:da:91:c1:a8:a0:27:2e:b1:e5:31:ba: d5:3e:9f:5a:c2:8a:33:89:6a:7c:f5:8b:58:38:b1:b1:fc:b3: 0d:e5:dd:0d:42:db:63:46:6c:a2:54:5c:cf:30:09:39:12:6f: 8d:01:c9:dd:6e:b1:87:c1:ff:c5:f3:d0:a8:69:73:24:16:6f: c9:20:e3:3e:62:4d:2b:9c:5d:00:99:a3:f2:b4:2a:a4:75:44: ba:3b:2c:73:e6:34:e9:07:71:fd:10:dd:0e:e5:7b:3a:fa:f5: fc:18:37:2b:df:02:64:6d:03:7a:e2:36:e5:12:a3:80:72:a6: 0d:04:58:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/uea/MyGWxlzMd6IRBFP/WOSDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0 RjRFRTBENTAeFw0yNjExMTUxMjM5NTNaFw0yNjExMTYxNDQ3NTNaMDMxMTAvBgNV BAMTKDA0RDA4NDI0RDgwOUIyMzRENkEzOUU3QTEzQTUxRDFCRjM5MzAyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg74CktUh5+BAW4zSdP81k+xRM J2vShaD+Nw84qjTmpGoEK4mn0acN3N6VgXAZGIJuppDrFx53OGwpJ+cVlXYATkX5 Aw+2hW1MV4iaOX6Zq257kp7bsVBNMHSgru0tTjSk905Hw9Cef0h1zoL19z95o/ji 3NM2u4fxWVKqNH5oFh5Y/YFtQKXJMlYukOPrgXkztGtWEG9sYHHQLO/nPuqM10RW AMox3vNcub/jlSnV22/PmOX7I9vwJ8BEAA2dGjwiSupbq+iDFeznB7L8ate1r0P4 Usmh+FwwQIpmNaj2Kq1knO1VNGjSxMpUQmsBOVODuCxMyTsq6v5Es1E5QVq5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBNCEJNgJsjTWo556E6UdG/OTAtMwHwYDVR0j BBgwFoAUq1D9vwOEbjPS+MUYfeqfXk9O4NUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc1OTQ3NmUtNmFkYi00ZjJlLWJlNzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYw Mzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0RjRFRTBENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjUwRkRCRjAzODQ2RTMzRDJGOEM1MTg3REVBOUY1RTRGNEVF MEQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlG NUU0RjRFRTBENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWJmqU0vuTgCV1AclOTeT2C+Fc6ItSnLCBd SFKQ3QO4BC0+eUPZEVU8fpV8ZPCeMheyVCoM1bxLYevY6B8P5PHG6P3sY1V3CXZ9 lWwFrXkuZnb1n1GLlfhMePKJa2BvMk0Vneshx9vZq6eMRWvdTmFEU5afe4Ml5eil eJto478SBVu05jvakcGooCcuseUxutU+n1rCijOJanz1i1g4sbH8sw3l3Q1C22NG bKJUXM8wCTkSb40Byd1usYfB/8Xz0KhpcyQWb8kg4z5iTSucXQCZo/K0KqR1RLo7 LHPmNOkHcf0Q3Q7lezr69fwYNyvfAmRtA3riNuUSo4Bypg0EWCo= -----END CERTIFICATE-----Generated at Sun Nov 15 20:56:02 2026 by rpki-client