$ rpki-client -vvf rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft File: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft (raw, json) Hash identifier: avjIiFwILU87+Rj833SwtR36vgi5sUowbMe/AsBM2WU= Subject key identifier: 6A:9A:3B:92:38:10:67:60:C6:08:20:92:E9:94:54:F4:18:58:0D:1F Authority key identifier: AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 Certificate issuer: /CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Certificate serial: 674E61C678B9966BF3838E4845775AB69D4114E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 13:36:05 +0000 Manifest this update: Sat 13 Jun 2026 13:31:05 +0000 Manifest next update: Sun 14 Jun 2026 16:04:05 +0000 Files and hashes: 1: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: uDv+UYL75QoUmpMlaL+3dQMgpVoz8iM4bxe1Z2EgXa4=) 2: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl (hash: elDI24CETdqZg/9QFOhlGFAgk8VKki6Ck7bwWUrBhfs=) 3: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: GRM6rus6lwETinGsMNAHhMdqqrq7IGt093Aq5KEiOyM=) 4: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: Y3QjCeZ1GQuw+Af/4ElzHz4uj30AWOknv+PuSj10pQI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4e:61:c6:78:b9:96:6b:f3:83:8e:48:45:77:5a:b6:9d:41:14:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Validity Not Before: Jun 13 13:31:05 2026 GMT Not After : Jun 14 16:04:05 2026 GMT Subject: CN=6A9A3B9238106760C6082092E99454F418580D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:ed:21:3a:a6:ed:93:a1:d9:f2:cc:30:da: e1:e1:e9:aa:f3:21:e1:39:e0:86:60:f1:2e:8a:71: 59:e9:d1:34:96:07:40:53:84:c9:91:70:ad:02:bc: 75:2a:3d:5c:42:df:0a:3f:3d:8f:f7:45:33:20:7f: 0e:0d:65:ec:00:12:3d:30:6c:67:77:66:91:92:82: f9:b8:2e:70:6d:0e:0d:1d:94:be:25:3d:dc:d3:c0: 42:c3:fc:63:0b:e1:80:93:66:82:ee:ac:d6:33:2c: f6:df:50:ad:ba:6e:86:e1:79:c9:1a:af:d9:ee:5d: f8:5f:69:9f:7b:04:d4:c2:af:d0:a2:96:5e:8d:07: bf:3f:db:29:e1:93:db:4d:68:bd:95:45:2e:5f:54: e9:3f:fd:6e:ec:ae:8b:0b:a1:e8:a5:99:85:f3:df: 3f:b8:44:65:1b:d4:8e:3b:8e:2d:c0:17:fb:b3:d8: 5c:13:e7:27:cb:46:ba:e7:df:a6:56:b2:9d:94:93: d0:22:42:06:99:74:bd:66:89:cf:b4:eb:91:66:5a: f4:1f:bc:92:47:67:d8:53:6e:18:c2:e5:ab:8f:bf: 82:5a:0e:1a:9b:e2:51:80:3e:d0:b2:72:df:16:da: 44:1c:5d:b6:7e:5d:be:a6:36:4b:a8:60:08:3b:23: 28:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9A:3B:92:38:10:67:60:C6:08:20:92:E9:94:54:F4:18:58:0D:1F X509v3 Authority Key Identifier: keyid:AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:7c:fe:3e:4e:9d:08:24:4b:20:0f:99:cd:ab:5b:09:b1:9d: 92:c6:53:9e:c3:69:c3:80:cd:d4:1d:ef:2d:00:c5:df:a7:b3: a5:a6:ea:7d:2d:5d:8e:2f:62:f6:c8:77:8b:c8:74:dd:f6:f6: f5:23:3a:50:a4:16:b7:d7:87:23:a0:bd:c0:ff:fb:2a:eb:30: a3:ee:d3:27:d6:d1:d1:15:b8:95:41:06:35:dc:0a:21:da:78: 7c:8e:3a:12:32:44:57:ea:09:e4:27:1f:72:6a:14:bd:4e:69: 5f:3f:c5:dc:83:6e:65:ce:4c:1a:4b:4b:39:4f:f3:b7:3c:1b: 4e:76:1f:09:59:e2:01:28:6f:80:6e:5e:67:f7:ba:47:1c:3d: 0c:d4:51:bf:5f:39:69:37:cd:67:64:7b:07:b1:6f:57:27:10: 3d:50:b8:66:7d:4b:6b:29:50:de:5c:cc:51:d5:79:fb:e4:60: de:63:2a:b3:e1:16:44:0b:8f:1e:33:04:44:93:e3:9f:8c:3f: f8:ac:03:1f:b3:77:a0:9d:89:7d:da:d3:d6:cb:01:42:a9:a7: 22:c9:5d:50:7c:1e:93:e0:45:f4:54:ac:e7:e2:ed:c7:b3:fd: 68:d1:07:b9:6f:f7:0c:a5:48:52:15:d5:7a:e5:c2:52:b2:22: 96:06:8f:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ05hxni5lmvzg45IRXdatp1BFOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0 RjRFRTBENTAeFw0yNjA2MTMxMzMxMDVaFw0yNjA2MTQxNjA0MDVaMDMxMTAvBgNV BAMTKDZBOUEzQjkyMzgxMDY3NjBDNjA4MjA5MkU5OTQ1NEY0MTg1ODBEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJ+0hOqbtk6HZ8sww2uHh6arz IeE54IZg8S6KcVnp0TSWB0BThMmRcK0CvHUqPVxC3wo/PY/3RTMgfw4NZewAEj0w bGd3ZpGSgvm4LnBtDg0dlL4lPdzTwELD/GML4YCTZoLurNYzLPbfUK26bobhecka r9nuXfhfaZ97BNTCr9Cill6NB78/2ynhk9tNaL2VRS5fVOk//W7srosLoeilmYXz 3z+4RGUb1I47ji3AF/uz2FwT5yfLRrrn36ZWsp2Uk9AiQgaZdL1mic+065FmWvQf vJJHZ9hTbhjC5auPv4JaDhqb4lGAPtCyct8W2kQcXbZ+Xb6mNkuoYAg7IyhdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUapo7kjgQZ2DGCCCS6ZRU9BhYDR8wHwYDVR0j BBgwFoAUq1D9vwOEbjPS+MUYfeqfXk9O4NUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc1OTQ3NmUtNmFkYi00ZjJlLWJlNzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYw Mzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0RjRFRTBENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjUwRkRCRjAzODQ2RTMzRDJGOEM1MTg3REVBOUY1RTRGNEVF MEQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlG NUU0RjRFRTBENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEF8/j5OnQgkSyAPmc2rWwmxnZLGU57DacOA zdQd7y0Axd+ns6Wm6n0tXY4vYvbId4vIdN329vUjOlCkFrfXhyOgvcD/+yrrMKPu 0yfW0dEVuJVBBjXcCiHaeHyOOhIyRFfqCeQnH3JqFL1OaV8/xdyDbmXOTBpLSzlP 87c8G052HwlZ4gEob4BuXmf3ukccPQzUUb9fOWk3zWdkewexb1cnED1QuGZ9S2sp UN5czFHVefvkYN5jKrPhFkQLjx4zBEST45+MP/isAx+zd6CdiX3a09bLAUKppyLJ XVB8HpPgRfRUrOfi7cez/WjRB7lv9wylSFIV1XrlwlKyIpYGj/c= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:31 2026 by rpki-client