$ rpki-client -vvvf rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft File: AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft (raw, json) Hash identifier: SG9i3UraC7f0KJPhqIsaemkFtzEjd17w+TE4g0Lopt4= Subject key identifier: F0:EA:9E:86:F4:86:A1:F7:72:A4:4D:1B:A5:23:7E:5E:40:1C:1B:EB Authority key identifier: AB:5F:90:55:2B:80:CD:C2:41:65:92:E5:FD:A7:73:F5:D6:6F:53:BE Certificate issuer: /CN=AB5F90552B80CDC2416592E5FDA773F5D66F53BE Certificate serial: 431292A7F2DF3396D76340BCB83CEA638AFEA39F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:48:47 +0000 Manifest this update: Mon 21 Sep 2026 09:43:47 +0000 Manifest next update: Tue 22 Sep 2026 12:38:47 +0000 Files and hashes: 1: AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl (hash: UIq+TJ8Z6O/jgLu6842Mgv4Z+2MuRfPS2IpMuye4vLA=) 2: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: 8mWztPKHecvNCBMMV0cUZVPOGf2iWRWZndzDVuRiFm4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:12:92:a7:f2:df:33:96:d7:63:40:bc:b8:3c:ea:63:8a:fe:a3:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB5F90552B80CDC2416592E5FDA773F5D66F53BE Validity Not Before: Sep 21 09:43:47 2026 GMT Not After : Sep 22 12:38:47 2026 GMT Subject: CN=F0EA9E86F486A1F772A44D1BA5237E5E401C1BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:15:18:83:49:54:4b:7f:cd:b9:f4:ae:d7: 1a:ef:93:19:fb:c2:f1:30:e6:21:d4:eb:f3:a6:bd: 54:ea:13:37:ea:9d:88:41:ab:ce:08:8a:39:a1:77: 28:db:6a:e4:19:7e:36:60:0c:c1:18:7b:ce:7b:4e: 42:a0:0e:c1:87:ab:72:46:1c:ff:f8:f4:d1:32:22: ea:c9:20:88:ef:23:32:48:87:b0:10:48:e7:b2:97: 42:16:44:da:ff:bd:c9:95:65:64:79:24:e3:f0:91: ab:dc:6b:b4:13:12:f7:90:23:09:1b:c0:3f:c2:01: dd:dd:23:1a:cd:ec:10:90:2c:f7:8e:e4:6f:c7:0f: 86:e7:8a:9e:60:d0:21:f4:90:20:e2:32:80:c6:6b: 16:82:c0:b7:43:4c:dd:bc:19:9b:8a:cf:3a:7d:6f: 09:82:d3:08:7b:b6:b8:2b:ad:b7:49:3a:41:f4:86: 63:4a:b8:bc:e6:69:ef:59:96:fd:b8:02:6f:d8:fe: 21:92:e2:67:2f:dd:79:69:7e:67:9d:ee:c3:6b:21: 66:ae:21:1f:e6:a9:de:33:58:fd:4e:ae:82:ee:00: 2b:70:a2:02:25:d4:e7:fe:6e:ed:c3:46:c4:6e:52: 6e:bd:01:6c:cc:f9:72:a3:b0:bb:92:42:9f:a7:2d: 13:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EA:9E:86:F4:86:A1:F7:72:A4:4D:1B:A5:23:7E:5E:40:1C:1B:EB X509v3 Authority Key Identifier: keyid:AB:5F:90:55:2B:80:CD:C2:41:65:92:E5:FD:A7:73:F5:D6:6F:53:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ea:8d:11:99:49:b2:52:dc:fb:cd:c7:aa:97:6c:25:ba:ee: ee:98:74:85:1e:5d:d0:61:27:ee:00:55:b5:d2:45:45:18:8e: 83:29:13:49:92:ec:ea:d2:de:9e:11:d5:9a:2e:93:d7:77:4a: bf:b9:87:ba:05:5a:81:18:ec:e4:90:04:74:1b:99:80:61:44: 42:31:aa:fd:4f:5e:ae:60:10:f2:3b:8d:85:ad:8c:97:55:be: ab:e6:d7:7e:af:61:99:8b:df:8d:50:3a:24:03:13:c1:d9:34: 6a:bc:63:05:b1:76:7e:43:8d:c9:82:60:a0:26:32:44:34:c2: 19:6e:16:8e:d7:c9:0f:8c:31:b0:16:d1:af:31:a3:02:be:df: ba:5c:9f:da:a0:47:30:86:1f:8d:61:e4:33:c1:f1:99:f8:33: 79:b8:b7:fc:25:29:89:41:2d:57:c5:5f:54:ae:a8:40:4b:f8: 17:0b:42:0e:92:ae:0f:27:8e:3f:95:6a:0c:2e:11:0e:ab:24: a2:d9:d5:3b:8a:33:f3:d7:9a:60:04:ab:56:ad:aa:ad:7d:37: f4:19:2c:ad:03:d6:44:4a:e5:81:96:79:91:b6:21:0b:87:a8: 50:e9:4f:13:60:4a:0c:2b:ca:96:36:66:35:c3:9c:f0:3d:8d: c3:03:20:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQxKSp/LfM5bXY0C8uDzqY4r+o58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1RjkwNTUyQjgwQ0RDMjQxNjU5MkU1RkRBNzczRjVE NjZGNTNCRTAeFw0yNjA5MjEwOTQzNDdaFw0yNjA5MjIxMjM4NDdaMDMxMTAvBgNV BAMTKEYwRUE5RTg2RjQ4NkExRjc3MkE0NEQxQkE1MjM3RTVFNDAxQzFCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmVRUYg0lUS3/NufSu1xrvkxn7 wvEw5iHU6/OmvVTqEzfqnYhBq84IijmhdyjbauQZfjZgDMEYe857TkKgDsGHq3JG HP/49NEyIurJIIjvIzJIh7AQSOeyl0IWRNr/vcmVZWR5JOPwkavca7QTEveQIwkb wD/CAd3dIxrN7BCQLPeO5G/HD4bnip5g0CH0kCDiMoDGaxaCwLdDTN28GZuKzzp9 bwmC0wh7trgrrbdJOkH0hmNKuLzmae9Zlv24Am/Y/iGS4mcv3Xlpfmed7sNrIWau IR/mqd4zWP1OroLuACtwogIl1Of+bu3DRsRuUm69AWzM+XKjsLuSQp+nLRMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8OqehvSGofdypE0bpSN+XkAcG+swHwYDVR0j BBgwFoAUq1+QVSuAzcJBZZLl/adz9dZvU74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQ4YjY1ODMtNDEyMi00NjlkLTgzODQtM2FmMWJjYzY2MDdmLzAvQUI1RjkwNTUy QjgwQ0RDMjQxNjU5MkU1RkRBNzczRjVENjZGNTNCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjVGOTA1NTJCODBDREMyNDE2NTkyRTVGREE3NzNGNUQ2NkY1 M0JFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvQUI1RjkwNTUyQjgwQ0RDMjQxNjU5MkU1RkRBNzcz RjVENjZGNTNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXqjRGZSbJS3PvNx6qXbCW67u6YdIUeXdBh J+4AVbXSRUUYjoMpE0mS7OrS3p4R1Zouk9d3Sr+5h7oFWoEY7OSQBHQbmYBhREIx qv1PXq5gEPI7jYWtjJdVvqvm136vYZmL341QOiQDE8HZNGq8YwWxdn5DjcmCYKAm MkQ0whluFo7XyQ+MMbAW0a8xowK+37pcn9qgRzCGH41h5DPB8Zn4M3m4t/wlKYlB LVfFX1SuqEBL+BcLQg6Srg8njj+VagwuEQ6rJKLZ1TuKM/PXmmAEq1atqq19N/QZ LK0D1kRK5YGWeZG2IQuHqFDpTxNgSgwrypY2ZjXDnPA9jcMDICI= -----END CERTIFICATE-----Generated at Mon Sep 21 18:02:29 2026 by rpki-client