$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft File: ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft (raw, json) Hash identifier: 4qjJNl21Yd2CaXM27X1mM3u1TUiWy+OgPH8c61B/zaQ= Subject key identifier: 22:C4:AD:D3:2E:D5:C3:1E:D1:AD:2F:40:7A:79:FC:B7:5E:05:78:25 Authority key identifier: AB:ED:71:E9:F6:44:DC:0B:71:AF:71:A2:59:01:C0:55:1B:1F:13:4B Certificate issuer: /CN=ABED71E9F644DC0B71AF71A25901C0551B1F134B Certificate serial: 0C148B7AFA9A0B35B6D7CF676A45E1224BC20847 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft Manifest number: BC Signing time: Sun 20 Sep 2026 11:05:53 +0000 Manifest this update: Sun 20 Sep 2026 11:00:53 +0000 Manifest next update: Mon 21 Sep 2026 14:25:53 +0000 Files and hashes: 1: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: QTvSNhE992wCS0VNXGZ4QrTW5fEG/UCs6bm/K+0HXAk=) 2: ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl (hash: z+oveoO6lpWy8MzSl8cUivtjZyB0PyYMTDEGVYzKaj0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:14:8b:7a:fa:9a:0b:35:b6:d7:cf:67:6a:45:e1:22:4b:c2:08:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED71E9F644DC0B71AF71A25901C0551B1F134B Validity Not Before: Sep 20 11:00:53 2026 GMT Not After : Sep 21 14:25:53 2026 GMT Subject: CN=22C4ADD32ED5C31ED1AD2F407A79FCB75E057825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:66:f4:4b:5b:62:f8:2b:cf:04:15:9b:d5:5c: bd:33:f7:c0:f4:ed:dc:3b:92:c1:8a:6b:3c:4f:37: fe:fa:40:ed:c5:f2:d3:e4:14:dd:8a:9f:a3:46:09: 61:26:25:19:67:d4:00:50:1f:9f:0d:22:3c:a2:1b: 81:c6:57:50:08:aa:75:2b:3e:af:68:94:17:a3:79: f8:0f:81:e8:ed:ec:b5:9a:4f:d3:67:a3:75:50:a5: 36:79:09:93:b4:2d:42:6a:9b:fb:07:48:ad:d0:0f: e4:b0:0e:6b:8f:08:d3:c3:39:39:b5:d8:d8:a0:89: 13:cf:17:b7:05:89:69:e0:94:f9:12:b5:7d:02:76: e7:ac:bd:52:9e:f2:f1:ee:f0:1b:55:cd:20:0c:eb: a0:a9:64:d2:50:71:a2:af:10:5c:a5:3e:18:c2:bd: 4b:4e:01:c5:35:8f:8d:74:32:2f:e3:32:1b:8a:1d: 05:b4:6d:d3:75:04:76:66:a2:2e:84:be:91:59:2f: 18:76:61:f8:9b:a2:24:07:b0:f5:fa:6b:5e:aa:23: e1:25:74:af:3d:ec:e1:78:27:cb:8f:cf:39:1c:07: 1c:39:1c:dc:80:0d:4c:34:af:f0:d8:83:d9:78:c1: 42:6d:53:74:c7:f4:1e:7e:43:ad:34:c3:ee:64:23: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C4:AD:D3:2E:D5:C3:1E:D1:AD:2F:40:7A:79:FC:B7:5E:05:78:25 X509v3 Authority Key Identifier: keyid:AB:ED:71:E9:F6:44:DC:0B:71:AF:71:A2:59:01:C0:55:1B:1F:13:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9c:69:00:7a:c0:32:db:64:a1:cd:53:01:f7:74:b1:d6:e7: f2:ee:7b:cc:53:18:e9:1f:c5:7f:67:d0:d8:9a:98:aa:21:e6: b6:50:c2:b4:82:b2:52:ba:68:f4:e6:a9:83:6c:5b:01:d9:9f: 84:50:b4:b0:7d:37:78:d7:3e:f0:9c:fe:c7:68:eb:20:89:b9: 7e:03:29:f4:b9:88:3e:eb:7a:7f:2b:04:13:4e:01:33:e8:95: 91:c4:a4:5f:bc:5e:a1:d1:4a:87:13:b8:47:01:99:45:2e:c1: 82:bb:66:c7:a7:84:a4:5c:02:e1:07:6a:00:ee:5e:55:a1:c8: d0:6a:47:97:6e:74:78:13:6b:22:e9:43:6b:f9:85:42:6c:14: 20:49:85:79:90:d1:42:bc:7d:03:06:78:5a:2b:38:25:38:6c: 9e:c4:c3:31:c5:6b:e2:66:41:92:b6:8f:19:4c:0e:ce:5e:d2: 76:59:8e:1e:e5:2f:2b:a6:d0:2d:3c:a0:56:df:17:60:29:98: 25:0b:45:ef:63:10:b2:db:46:ee:cc:db:3e:97:eb:2a:53:51: 17:eb:6a:4d:29:db:8d:16:3b:22:29:8a:13:32:3a:31:2a:de: 1b:f5:f6:bc:63:b6:4f:fc:78:bd:d1:78:1a:7a:1f:20:07:06: 94:a7:d9:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDBSLevqaCzW2189nakXhIkvCCEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJFRDcxRTlGNjQ0REMwQjcxQUY3MUEyNTkwMUMwNTUx QjFGMTM0QjAeFw0yNjA5MjAxMTAwNTNaFw0yNjA5MjExNDI1NTNaMDMxMTAvBgNV BAMTKDIyQzRBREQzMkVENUMzMUVEMUFEMkY0MDdBNzlGQ0I3NUUwNTc4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeZvRLW2L4K88EFZvVXL0z98D0 7dw7ksGKazxPN/76QO3F8tPkFN2Kn6NGCWEmJRln1ABQH58NIjyiG4HGV1AIqnUr Pq9olBejefgPgejt7LWaT9Nno3VQpTZ5CZO0LUJqm/sHSK3QD+SwDmuPCNPDOTm1 2NigiRPPF7cFiWnglPkStX0CduesvVKe8vHu8BtVzSAM66CpZNJQcaKvEFylPhjC vUtOAcU1j410Mi/jMhuKHQW0bdN1BHZmoi6EvpFZLxh2YfiboiQHsPX6a16qI+El dK897OF4J8uPzzkcBxw5HNyADUw0r/DYg9l4wUJtU3TH9B5+Q600w+5kI5/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIsSt0y7Vwx7RrS9Aenn8t14FeCUwHwYDVR0j BBgwFoAUq+1x6fZE3Atxr3GiWQHAVRsfE0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE5YjgyMmEtOGI5MS00OGQyLTliYzEtYWUwZDkwMGJmOWM3LzAvQUJFRDcxRTlG NjQ0REMwQjcxQUY3MUEyNTkwMUMwNTUxQjFGMTM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQkVENzFFOUY2NDREQzBCNzFBRjcxQTI1OTAxQzA1NTFCMUYx MzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvQUJFRDcxRTlGNjQ0REMwQjcxQUY3MUEyNTkwMUMw NTUxQjFGMTM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICcaQB6wDLbZKHNUwH3dLHW5/Lue8xTGOkf xX9n0NiamKoh5rZQwrSCslK6aPTmqYNsWwHZn4RQtLB9N3jXPvCc/sdo6yCJuX4D KfS5iD7ren8rBBNOATPolZHEpF+8XqHRSocTuEcBmUUuwYK7ZsenhKRcAuEHagDu XlWhyNBqR5dudHgTayLpQ2v5hUJsFCBJhXmQ0UK8fQMGeForOCU4bJ7EwzHFa+Jm QZK2jxlMDs5e0nZZjh7lLyum0C08oFbfF2ApmCULRe9jELLbRu7M2z6X6ypTURfr ak0p240WOyIpihMyOjEq3hv19rxjtk/8eL3ReBp6HyAHBpSn2QA= -----END CERTIFICATE-----Generated at Sun Sep 20 22:19:41 2026 by rpki-client