$ rpki-client -vvf rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft File: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft (raw, json) Hash identifier: 8C9/Ich2qxEqBhGtBR6l3YDFeRe4UJrFMTPgDLijrLw= Subject key identifier: 2A:E0:BA:D9:59:C7:C3:4D:A5:D8:0E:81:C6:30:C0:16:95:9B:F9:AD Authority key identifier: AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 Certificate issuer: /CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Certificate serial: 377FE9E539EA234724223B6BCCB27F3D4DEE6A67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 19:35:40 +0000 Manifest this update: Tue 28 Jul 2026 19:30:40 +0000 Manifest next update: Wed 29 Jul 2026 20:17:40 +0000 Files and hashes: 1: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl (hash: racWhO8PudhKqaAh2x26JCXv2JXowNFCgZmjZpqOzoE=) 2: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: uDv+UYL75QoUmpMlaL+3dQMgpVoz8iM4bxe1Z2EgXa4=) 3: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: Y3QjCeZ1GQuw+Af/4ElzHz4uj30AWOknv+PuSj10pQI=) 4: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: GRM6rus6lwETinGsMNAHhMdqqrq7IGt093Aq5KEiOyM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7f:e9:e5:39:ea:23:47:24:22:3b:6b:cc:b2:7f:3d:4d:ee:6a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Validity Not Before: Jul 28 19:30:40 2026 GMT Not After : Jul 29 20:17:40 2026 GMT Subject: CN=2AE0BAD959C7C34DA5D80E81C630C016959BF9AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:1d:37:4d:8c:44:c0:26:b7:cb:bc:1d:c9: f4:a0:4d:03:ab:76:1c:9e:73:41:32:e0:23:2a:1a: b0:ca:97:6b:98:d6:9e:03:f5:1a:42:e6:50:fd:0a: 60:d4:42:96:fa:e5:3f:10:46:df:a3:df:8d:d9:bf: 92:2c:7f:b6:5f:eb:a1:2a:c0:25:b3:c6:4b:82:1f: ea:8d:ec:36:1a:de:78:b8:35:02:71:39:a2:70:aa: cf:96:9b:be:c6:c7:d9:7c:58:36:9b:87:cb:60:69: 47:76:fb:8c:c7:c1:65:ec:c2:4e:c6:57:14:3d:1b: 5e:99:81:50:09:69:c3:02:29:b4:0b:38:f9:8b:04: df:ab:55:a0:01:08:3f:78:ee:91:19:3b:0e:1f:a2: 25:2b:10:c5:47:1a:59:1e:dd:0d:47:bb:ca:ba:7f: a1:56:a4:dd:2b:a1:89:f3:3a:78:41:7f:f6:d7:54: d0:62:aa:ee:35:ef:f8:b8:c2:9b:fc:05:06:02:56: e0:57:97:eb:e1:1d:b6:a4:24:7c:d1:6b:2b:b8:db: 57:c9:d5:77:68:c8:35:a6:6f:2d:5e:f3:bc:5b:42: 57:72:5a:d0:09:dd:22:6c:da:49:69:e1:2e:ac:28: 8e:1f:f7:9d:42:ed:6e:ea:ee:91:8c:df:0f:66:46: 63:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E0:BA:D9:59:C7:C3:4D:A5:D8:0E:81:C6:30:C0:16:95:9B:F9:AD X509v3 Authority Key Identifier: keyid:AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:89:8f:fd:07:4b:1d:ca:3b:17:b3:95:01:bf:7f:77:c3:d8: 0f:f2:ca:82:56:86:e9:2e:78:70:4b:18:29:f7:53:8b:4e:10: 65:a6:bd:df:33:9e:20:87:ca:aa:b9:9f:e9:76:9b:cf:d8:a7: 62:63:ad:32:79:74:47:97:4b:0b:ca:92:83:a7:4a:f4:7c:93: 00:ff:df:e5:c9:05:4a:41:56:9f:e4:cd:53:44:80:59:c2:8e: 9e:31:fa:88:81:46:09:cb:00:1c:42:28:b8:0c:79:3b:0f:79: a1:2e:ee:74:3f:e6:09:d7:5b:89:2e:d0:3c:ec:9c:30:b3:fd: 3f:2d:d8:29:e7:65:44:ca:c1:0a:b8:f5:79:bf:5c:b9:a8:e0: f6:ed:fc:b5:dd:4b:1a:d7:7b:7d:35:a0:83:1f:49:bb:79:81: f2:56:e4:9b:b6:ce:5f:25:ee:41:91:9c:a9:24:9e:91:07:b2: 02:43:52:d0:fc:1b:a8:87:b2:57:1c:10:37:95:45:c5:32:f3: 03:3d:4e:8f:db:81:df:7c:2a:4e:94:fc:37:9e:4e:5b:f9:e7: 56:4b:d2:86:19:ac:ca:aa:63:63:e7:aa:b1:ff:83:bc:53:e1: d5:3c:be:08:3c:d2:4a:dc:41:02:50:8f:e0:49:d7:e6:41:3e: 37:69:4c:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3/p5TnqI0ckIjtrzLJ/PU3uamcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0 RjRFRTBENTAeFw0yNjA3MjgxOTMwNDBaFw0yNjA3MjkyMDE3NDBaMDMxMTAvBgNV BAMTKDJBRTBCQUQ5NTlDN0MzNERBNUQ4MEU4MUM2MzBDMDE2OTU5QkY5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmiB03TYxEwCa3y7wdyfSgTQOr dhyec0Ey4CMqGrDKl2uY1p4D9RpC5lD9CmDUQpb65T8QRt+j343Zv5Isf7Zf66Eq wCWzxkuCH+qN7DYa3ni4NQJxOaJwqs+Wm77Gx9l8WDabh8tgaUd2+4zHwWXswk7G VxQ9G16ZgVAJacMCKbQLOPmLBN+rVaABCD947pEZOw4foiUrEMVHGlke3Q1Hu8q6 f6FWpN0roYnzOnhBf/bXVNBiqu417/i4wpv8BQYCVuBXl+vhHbakJHzRayu421fJ 1XdoyDWmby1e87xbQldyWtAJ3SJs2klp4S6sKI4f951C7W7q7pGM3w9mRmNPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKuC62VnHw02l2A6BxjDAFpWb+a0wHwYDVR0j BBgwFoAUq1D9vwOEbjPS+MUYfeqfXk9O4NUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc1OTQ3NmUtNmFkYi00ZjJlLWJlNzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYw Mzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0RjRFRTBENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjUwRkRCRjAzODQ2RTMzRDJGOEM1MTg3REVBOUY1RTRGNEVF MEQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlG NUU0RjRFRTBENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaJj/0HSx3KOxezlQG/f3fD2A/yyoJWhuku eHBLGCn3U4tOEGWmvd8zniCHyqq5n+l2m8/Yp2JjrTJ5dEeXSwvKkoOnSvR8kwD/ 3+XJBUpBVp/kzVNEgFnCjp4x+oiBRgnLABxCKLgMeTsPeaEu7nQ/5gnXW4ku0Dzs nDCz/T8t2CnnZUTKwQq49Xm/XLmo4Pbt/LXdSxrXe301oIMfSbt5gfJW5Ju2zl8l 7kGRnKkknpEHsgJDUtD8G6iHslccEDeVRcUy8wM9To/bgd98Kk6U/DeeTlv551ZL 0oYZrMqqY2PnqrH/g7xT4dU8vgg80krcQQJQj+BJ1+ZBPjdpTOI= -----END CERTIFICATE-----Generated at Wed Jul 29 05:40:55 2026 by rpki-client