$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft File: ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft (raw, json) Hash identifier: IYPFaY8eCUESTSBZExAk1CdyYw2kZCuz6+ufxGJgT44= Subject key identifier: EC:71:05:D1:5B:39:BC:90:0B:FD:9D:B4:83:30:35:0E:B3:48:2F:BE Authority key identifier: AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35 Certificate issuer: /CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235 Certificate serial: 112C7B445411AE4D89D3D624056E7058B2A7F2D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:14:53 +0000 Manifest this update: Tue 12 May 2026 15:09:53 +0000 Manifest next update: Wed 13 May 2026 16:07:53 +0000 Files and hashes: 1: AS10217.roa (hash: rBN9V7NO+oNZzLzvFqCWOkrMsFmQrg1NnhxBG1/GfOM=) 2: ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl (hash: Kxo8/068DJPHNAsClmDLogIhZlGpKIzXSiCQhgHzomk=) 3: AS147168.roa (hash: WiiJ0UINkkiQHu9jLgZQhKLsdBs17smAwZtsfZdz3PU=) 4: AS45700.roa (hash: 4gylyPRrLCVxqv8jBeq1Y73wjMNwCZgjrx7f+jJHRfU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2c:7b:44:54:11:ae:4d:89:d3:d6:24:05:6e:70:58:b2:a7:f2:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235 Validity Not Before: May 12 15:09:53 2026 GMT Not After : May 13 16:07:53 2026 GMT Subject: CN=EC7105D15B39BC900BFD9DB48330350EB3482FBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c9:74:4c:d2:47:57:66:50:f6:b1:a3:c1:71: bd:48:6c:0b:ff:b7:8d:71:0c:b1:06:d7:18:aa:c7: f5:24:cf:20:a9:72:c2:ed:92:da:dd:b1:49:0e:d6: b5:66:ac:c9:ba:62:9e:a6:9c:de:6c:bb:d2:fd:21: 50:76:43:1a:e6:f4:8d:42:88:85:d8:9f:10:ed:c2: 90:94:97:36:26:be:22:1d:1c:e2:22:11:c0:87:39: 36:87:7d:f2:00:b3:5c:c6:98:e2:20:7c:f0:4f:a6: bb:d8:a1:da:bd:8f:97:01:b6:57:d0:9a:78:7a:a4: 7a:98:b0:8f:a6:86:4e:cd:97:1c:a2:97:e4:f1:d8: ef:c7:49:97:69:3d:16:1e:8b:b3:f0:27:61:76:0c: 92:2f:7f:59:cb:f4:e7:e7:85:85:7a:83:d0:d9:e5: 87:b0:aa:67:4d:9c:6d:d4:7d:2a:fe:49:17:01:f4: f2:4c:d4:e1:4e:49:b1:64:4c:7a:c0:95:24:33:c9: 08:13:e2:b6:cd:7d:fe:af:85:34:25:d6:49:e6:58: 4b:0a:a7:18:ae:2a:92:ce:63:f1:1e:ad:6e:ad:90: eb:8b:39:24:bc:93:70:83:61:7d:8b:5f:82:64:74: 2a:a2:9f:6c:3d:fd:8b:11:16:59:86:c7:f7:c3:79: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:71:05:D1:5B:39:BC:90:0B:FD:9D:B4:83:30:35:0E:B3:48:2F:BE X509v3 Authority Key Identifier: keyid:AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f5:9d:46:00:c7:11:6d:5f:30:db:79:d6:c7:18:58:9f:16: 9b:81:0b:2e:33:ba:d1:2d:22:33:d9:71:c2:d6:e1:ff:2a:da: 06:d8:28:bb:76:0f:c8:b5:1b:6d:ef:1f:f3:b9:e3:d5:6b:b2: 1f:81:95:9b:80:d6:25:66:5c:c9:2c:1b:56:9b:3a:45:59:32: ea:5c:f4:67:0d:20:1b:c1:e4:50:03:df:ed:52:db:21:06:dc: ad:ed:60:36:14:a4:76:57:c5:29:92:14:5d:9e:11:68:00:47: 75:4e:d5:4e:05:6b:0c:4a:f2:9c:3d:4f:63:13:f6:11:5a:e5: b3:0f:87:5e:21:f6:7c:90:96:cd:b2:2e:4e:cb:2b:02:68:4c: a6:e0:19:7b:b6:1d:42:d5:73:fa:07:f9:4b:93:a1:00:3b:5b: e4:b9:18:72:5b:54:f9:25:41:99:24:c5:03:60:9b:b1:dd:23: 7d:b1:bb:da:59:2a:23:10:8c:bd:32:2d:27:61:34:da:e9:9f: 7d:fe:17:6c:2a:7b:87:53:f7:32:07:a1:98:6e:56:10:7d:20: 47:cc:9f:b9:c4:08:6c:53:e0:c1:5d:af:50:07:9a:40:ed:32: c0:ee:99:f0:68:ed:f4:42:98:59:e2:39:5b:b0:91:d6:cf:78: e8:cc:28:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUESx7RFQRrk2J09YkBW5wWLKn8tYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJGRTZCMzE5NzE0NzMxMkVDMUZBRTA1QTI1MkEzOTY0 RTlCQjIzNTAeFw0yNjA1MTIxNTA5NTNaFw0yNjA1MTMxNjA3NTNaMDMxMTAvBgNV BAMTKEVDNzEwNUQxNUIzOUJDOTAwQkZEOURCNDgzMzAzNTBFQjM0ODJGQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzyXRM0kdXZlD2saPBcb1IbAv/ t41xDLEG1xiqx/UkzyCpcsLtktrdsUkO1rVmrMm6Yp6mnN5su9L9IVB2Qxrm9I1C iIXYnxDtwpCUlzYmviIdHOIiEcCHOTaHffIAs1zGmOIgfPBPprvYodq9j5cBtlfQ mnh6pHqYsI+mhk7Nlxyil+Tx2O/HSZdpPRYei7PwJ2F2DJIvf1nL9OfnhYV6g9DZ 5YewqmdNnG3UfSr+SRcB9PJM1OFOSbFkTHrAlSQzyQgT4rbNff6vhTQl1knmWEsK pxiuKpLOY/EerW6tkOuLOSS8k3CDYX2LX4JkdCqin2w9/YsRFlmGx/fDeRADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7HEF0Vs5vJAL/Z20gzA1DrNIL74wHwYDVR0j BBgwFoAUq/5rMZcUcxLsH64FolKjlk6bsjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZiNzA4MTgtMjM2Ni00MmUwLTlkYmQtMjU0MzgxMDY5ZTU3LzAvQUJGRTZCMzE5 NzE0NzMxMkVDMUZBRTA1QTI1MkEzOTY0RTlCQjIzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQkZFNkIzMTk3MTQ3MzEyRUMxRkFFMDVBMjUyQTM5NjRFOUJC MjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvQUJGRTZCMzE5NzE0NzMxMkVDMUZBRTA1QTI1MkEz OTY0RTlCQjIzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIH1nUYAxxFtXzDbedbHGFifFpuBCy4zutEt IjPZccLW4f8q2gbYKLt2D8i1G23vH/O549Vrsh+BlZuA1iVmXMksG1abOkVZMupc 9GcNIBvB5FAD3+1S2yEG3K3tYDYUpHZXxSmSFF2eEWgAR3VO1U4FawxK8pw9T2MT 9hFa5bMPh14h9nyQls2yLk7LKwJoTKbgGXu2HULVc/oH+UuToQA7W+S5GHJbVPkl QZkkxQNgm7HdI32xu9pZKiMQjL0yLSdhNNrpn33+F2wqe4dT9zIHoZhuVhB9IEfM n7nECGxT4MFdr1AHmkDtMsDumfBo7fRCmFniOVuwkdbPeOjMKBs= -----END CERTIFICATE-----Generated at Wed May 13 02:25:41 2026 by rpki-client