$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft File: ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft (raw, json) Hash identifier: FkEbHsXkWyUa9sLgucNUEQ5QcaCYfYESrCq8adDuUdo= Subject key identifier: CE:22:62:C6:2C:81:6A:83:8A:5D:5B:FB:C9:42:93:7B:FA:2F:21:18 Authority key identifier: AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35 Certificate issuer: /CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235 Certificate serial: 647B6905BED0F5D0ECDE87B3B0152F1AA1C8331B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 11:39:07 +0000 Manifest this update: Sat 14 Nov 2026 11:34:07 +0000 Manifest next update: Sun 15 Nov 2026 13:16:07 +0000 Files and hashes: 1: ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl (hash: mbNDr5E1IIV3jIwD7NZ7ot6Xd/XIUgEPhj5ve2JAAms=) 2: AS45700.roa (hash: 4gylyPRrLCVxqv8jBeq1Y73wjMNwCZgjrx7f+jJHRfU=) 3: AS147168.roa (hash: WiiJ0UINkkiQHu9jLgZQhKLsdBs17smAwZtsfZdz3PU=) 4: AS10217.roa (hash: rBN9V7NO+oNZzLzvFqCWOkrMsFmQrg1NnhxBG1/GfOM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7b:69:05:be:d0:f5:d0:ec:de:87:b3:b0:15:2f:1a:a1:c8:33:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235 Validity Not Before: Nov 14 11:34:07 2026 GMT Not After : Nov 15 13:16:07 2026 GMT Subject: CN=CE2262C62C816A838A5D5BFBC942937BFA2F2118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:a9:69:59:9d:e0:c0:9f:2c:05:dd:56:79: 8e:67:5f:fd:26:71:b9:23:1b:3c:71:04:99:cb:ab: 7c:bc:17:e1:44:52:a6:f7:a6:52:89:9a:88:52:41: ff:48:fd:33:c6:22:b5:05:a2:7c:e7:51:4a:bf:1a: 49:15:c5:0b:ea:d0:4e:60:e9:97:e7:5c:11:d5:19: 5a:6f:4f:ff:28:cb:27:f2:1e:a4:c9:7e:5d:55:b0: e8:e0:e6:e7:52:04:41:0f:57:f7:f3:69:d4:d9:ea: e7:62:ad:08:2e:1e:8a:bc:05:fe:6c:69:3a:5c:e0: d1:71:18:99:3b:76:1d:1e:93:69:c0:27:e9:fa:b6: 56:8c:85:6d:b4:8a:84:40:e0:e5:61:ba:84:17:01: 80:47:af:7c:ee:41:64:53:98:47:2d:52:5e:b8:6c: 98:63:ad:7c:f9:6a:9d:71:8f:59:72:ba:c5:6e:5f: b9:91:78:d2:8c:34:16:86:30:be:62:e1:b9:9c:a7: c5:b0:51:c8:04:53:4c:1c:bd:c3:1e:1e:2d:4c:ba: 71:46:a1:41:a8:d1:96:74:5d:c9:48:02:f5:a0:73: c7:32:82:2c:9c:43:24:4d:be:b5:20:46:c2:5e:fd: 3a:cb:09:c3:13:32:b2:3a:0d:91:21:d9:c1:d8:c2: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:22:62:C6:2C:81:6A:83:8A:5D:5B:FB:C9:42:93:7B:FA:2F:21:18 X509v3 Authority Key Identifier: keyid:AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:04:ad:7f:ed:7e:26:a5:00:20:2e:c4:6e:cc:bc:17:d2:7c: 0d:81:85:4e:d3:6a:c1:3e:a8:50:c2:f7:4f:0e:6f:89:6b:fd: 5f:1b:f2:ec:d8:f0:24:77:91:c7:22:96:37:bd:6b:d2:81:24: d9:b7:3e:f1:2a:2b:12:3a:c1:ce:e4:2f:8e:e8:d8:78:af:8f: ca:00:fe:e8:4c:46:a4:e3:bd:8e:78:2d:7b:d6:4c:c0:67:e0: 94:af:c9:f4:72:9c:f1:1b:8e:46:96:99:4e:a3:9e:0c:75:f0: f4:35:1b:5b:77:2b:8d:57:41:bf:6f:a7:ea:7f:dc:9e:3b:77: 15:31:72:7f:d1:a5:38:d4:f3:93:e5:fb:e3:6b:50:27:fd:e5: fa:68:80:b8:c1:f9:3d:b8:3a:bf:ca:d9:d0:0b:46:8d:cd:ad: 0d:f6:96:d1:cc:7a:17:7f:c4:5d:a9:81:80:8d:12:0b:49:ce: 2b:c3:0c:a4:4f:c4:8e:bc:ca:1f:28:58:ca:16:8c:e1:fd:20: 0c:ef:6b:86:be:d1:2c:b5:2f:ef:ee:a8:67:fb:7d:a1:d9:18: c9:a9:57:19:54:9b:25:43:c3:29:05:e9:8b:a2:3a:69:73:c0: 3f:03:b8:82:ca:32:1c:b8:fc:6e:64:96:2b:4c:17:8c:cd:64: 52:b0:37:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZHtpBb7Q9dDs3oezsBUvGqHIMxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJGRTZCMzE5NzE0NzMxMkVDMUZBRTA1QTI1MkEzOTY0 RTlCQjIzNTAeFw0yNjExMTQxMTM0MDdaFw0yNjExMTUxMzE2MDdaMDMxMTAvBgNV BAMTKENFMjI2MkM2MkM4MTZBODM4QTVENUJGQkM5NDI5MzdCRkEyRjIxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKKlpWZ3gwJ8sBd1WeY5nX/0m cbkjGzxxBJnLq3y8F+FEUqb3plKJmohSQf9I/TPGIrUFonznUUq/GkkVxQvq0E5g 6ZfnXBHVGVpvT/8oyyfyHqTJfl1VsOjg5udSBEEPV/fzadTZ6udirQguHoq8Bf5s aTpc4NFxGJk7dh0ek2nAJ+n6tlaMhW20ioRA4OVhuoQXAYBHr3zuQWRTmEctUl64 bJhjrXz5ap1xj1lyusVuX7mReNKMNBaGML5i4bmcp8WwUcgEU0wcvcMeHi1MunFG oUGo0ZZ0XclIAvWgc8cygiycQyRNvrUgRsJe/TrLCcMTMrI6DZEh2cHYwpq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUziJixiyBaoOKXVv7yUKTe/ovIRgwHwYDVR0j BBgwFoAUq/5rMZcUcxLsH64FolKjlk6bsjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZiNzA4MTgtMjM2Ni00MmUwLTlkYmQtMjU0MzgxMDY5ZTU3LzAvQUJGRTZCMzE5 NzE0NzMxMkVDMUZBRTA1QTI1MkEzOTY0RTlCQjIzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQkZFNkIzMTk3MTQ3MzEyRUMxRkFFMDVBMjUyQTM5NjRFOUJC MjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvQUJGRTZCMzE5NzE0NzMxMkVDMUZBRTA1QTI1MkEz OTY0RTlCQjIzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQErX/tfialACAuxG7MvBfSfA2BhU7TasE+ qFDC908Ob4lr/V8b8uzY8CR3kccilje9a9KBJNm3PvEqKxI6wc7kL47o2Hivj8oA /uhMRqTjvY54LXvWTMBn4JSvyfRynPEbjkaWmU6jngx18PQ1G1t3K41XQb9vp+p/ 3J47dxUxcn/RpTjU85Pl++NrUCf95fpogLjB+T24Or/K2dALRo3NrQ32ltHMehd/ xF2pgYCNEgtJzivDDKRPxI68yh8oWMoWjOH9IAzva4a+0Sy1L+/uqGf7faHZGMmp VxlUmyVDwykF6YuiOmlzwD8DuILKMhy4/G5klitMF4zNZFKwNys= -----END CERTIFICATE-----Generated at Sat Nov 14 22:43:27 2026 by rpki-client