$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft File: ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft (raw, json) Hash identifier: gpbwNnb676vbLejawg87++8PejF+zpnFfavL1160FsI= Subject key identifier: F1:84:66:5F:7E:E5:1C:2C:2E:7D:FB:A7:94:BA:97:03:F5:91:09:71 Authority key identifier: AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35 Certificate issuer: /CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235 Certificate serial: 67AFCB049F92A8E85D0B4166BE4558043886407A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:52:00 +0000 Manifest this update: Thu 23 Jul 2026 13:47:00 +0000 Manifest next update: Fri 24 Jul 2026 16:54:00 +0000 Files and hashes: 1: AS147168.roa (hash: WiiJ0UINkkiQHu9jLgZQhKLsdBs17smAwZtsfZdz3PU=) 2: AS45700.roa (hash: 4gylyPRrLCVxqv8jBeq1Y73wjMNwCZgjrx7f+jJHRfU=) 3: ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl (hash: WIMDMfvJqgv/OjMyS42QLqdVYWNI6B8MD5ghpdQhR+Y=) 4: AS10217.roa (hash: rBN9V7NO+oNZzLzvFqCWOkrMsFmQrg1NnhxBG1/GfOM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:af:cb:04:9f:92:a8:e8:5d:0b:41:66:be:45:58:04:38:86:40:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235 Validity Not Before: Jul 23 13:47:00 2026 GMT Not After : Jul 24 16:54:00 2026 GMT Subject: CN=F184665F7EE51C2C2E7DFBA794BA9703F5910971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:6c:9a:59:de:ab:bd:15:4c:3e:67:2f:8d: d3:05:58:8b:d4:d7:ce:69:d3:c1:f8:f7:e2:44:d2: 5f:0c:70:c5:99:56:b7:31:bf:d5:e4:7e:38:c7:e1: df:5e:c8:50:75:75:4b:ee:6b:42:b5:d1:ae:86:7b: 41:ab:b2:7e:30:b6:e4:b1:fe:6e:b7:1c:56:cd:08: 05:52:4d:e3:dc:61:e2:99:1c:17:2c:b7:48:47:ea: 8c:cd:f9:8d:3a:f7:fd:e8:c5:41:62:d3:22:13:b2: 6d:60:39:43:e4:e2:b2:a8:ea:9c:b2:cb:df:f6:56: 9b:c8:9b:8c:ca:b4:de:68:9e:f0:a5:17:00:2a:63: 38:64:84:d1:de:d8:d5:64:b6:10:33:ba:f2:30:21: b1:cb:00:83:12:db:1a:85:b5:32:a1:2b:81:84:fa: cd:e9:5c:dd:5c:81:8b:25:c0:6e:fc:9d:81:e5:4d: 82:a1:49:11:6c:c9:4f:fd:d4:c4:21:61:28:3f:d7: 03:3f:03:66:dd:78:e3:a6:25:06:6e:fa:db:cf:ad: 90:5a:5c:a3:4d:03:19:6e:af:28:3c:c4:59:04:8b: 6c:a0:13:74:ad:a8:4c:7a:0d:4b:af:76:53:50:76: 98:8e:8d:48:05:b5:35:43:a0:27:e3:63:54:a3:eb: bf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:84:66:5F:7E:E5:1C:2C:2E:7D:FB:A7:94:BA:97:03:F5:91:09:71 X509v3 Authority Key Identifier: keyid:AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c3:6d:b4:54:44:f5:d2:82:75:25:32:38:88:d2:6f:38:a6: fc:6f:16:84:9d:54:12:cf:4c:4f:ed:19:c2:67:25:02:1b:6a: 80:b3:51:09:69:bf:e8:e3:ba:5f:2c:4f:7c:e4:7d:70:79:da: 06:6e:6a:4f:2c:36:8e:9a:fa:11:61:a1:e1:56:6b:f0:59:8b: b6:1e:24:55:59:be:b3:04:8b:36:fc:7a:aa:3a:20:b3:e3:f2: b4:dd:94:0e:23:b4:80:99:b2:72:ea:fb:dd:28:66:69:8f:7a: 56:89:16:4d:1f:21:8d:46:01:0f:6f:bb:1d:2c:79:25:19:b2: 48:68:a4:7c:c0:be:14:1f:68:d8:2d:00:12:f1:ad:99:3a:0e: 06:93:35:36:32:f8:92:14:11:d8:4a:22:46:9c:34:d6:7d:fd: 25:5d:ba:fa:20:0f:86:40:8c:fe:ae:71:d9:46:3f:55:a2:87: 21:63:3f:7c:8f:1c:01:98:ef:94:65:ce:6a:4b:ee:60:ea:e9: e1:49:eb:3b:a3:40:5c:a6:f2:17:a7:ba:07:64:65:58:3f:ac: b5:a5:2a:dc:50:04:f3:c3:d5:39:b4:9c:a5:c7:1a:20:18:c5: 91:07:04:89:08:da:ea:c3:85:76:58:3f:d8:3e:8a:51:3b:d5: 1a:65:11:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6/LBJ+SqOhdC0FmvkVYBDiGQHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJGRTZCMzE5NzE0NzMxMkVDMUZBRTA1QTI1MkEzOTY0 RTlCQjIzNTAeFw0yNjA3MjMxMzQ3MDBaFw0yNjA3MjQxNjU0MDBaMDMxMTAvBgNV BAMTKEYxODQ2NjVGN0VFNTFDMkMyRTdERkJBNzk0QkE5NzAzRjU5MTA5NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsG2yaWd6rvRVMPmcvjdMFWIvU 185p08H49+JE0l8McMWZVrcxv9XkfjjH4d9eyFB1dUvua0K10a6Ge0Grsn4wtuSx /m63HFbNCAVSTePcYeKZHBcst0hH6ozN+Y069/3oxUFi0yITsm1gOUPk4rKo6pyy y9/2VpvIm4zKtN5onvClFwAqYzhkhNHe2NVkthAzuvIwIbHLAIMS2xqFtTKhK4GE +s3pXN1cgYslwG78nYHlTYKhSRFsyU/91MQhYSg/1wM/A2bdeOOmJQZu+tvPrZBa XKNNAxluryg8xFkEi2ygE3StqEx6DUuvdlNQdpiOjUgFtTVDoCfjY1Sj67/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8YRmX37lHCwuffunlLqXA/WRCXEwHwYDVR0j BBgwFoAUq/5rMZcUcxLsH64FolKjlk6bsjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZiNzA4MTgtMjM2Ni00MmUwLTlkYmQtMjU0MzgxMDY5ZTU3LzAvQUJGRTZCMzE5 NzE0NzMxMkVDMUZBRTA1QTI1MkEzOTY0RTlCQjIzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQkZFNkIzMTk3MTQ3MzEyRUMxRkFFMDVBMjUyQTM5NjRFOUJC MjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvQUJGRTZCMzE5NzE0NzMxMkVDMUZBRTA1QTI1MkEz OTY0RTlCQjIzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7DbbRURPXSgnUlMjiI0m84pvxvFoSdVBLP TE/tGcJnJQIbaoCzUQlpv+jjul8sT3zkfXB52gZuak8sNo6a+hFhoeFWa/BZi7Ye JFVZvrMEizb8eqo6ILPj8rTdlA4jtICZsnLq+90oZmmPelaJFk0fIY1GAQ9vux0s eSUZskhopHzAvhQfaNgtABLxrZk6DgaTNTYy+JIUEdhKIkacNNZ9/SVduvogD4ZA jP6ucdlGP1WihyFjP3yPHAGY75RlzmpL7mDq6eFJ6zujQFym8henugdkZVg/rLWl KtxQBPPD1Tm0nKXHGiAYxZEHBIkI2urDhXZYP9g+ilE71RplEVQ= -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:38 2026 by rpki-client