$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft File: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft (raw, json) Hash identifier: nvdtRJWpUVk6b2gYaEIp1itGw8c/xWho0hDY1880h1M= Subject key identifier: 91:ED:02:BF:37:E8:11:FB:8F:0A:22:12:72:E9:AF:68:44:12:65:2A Authority key identifier: AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 Certificate issuer: /CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Certificate serial: 0D467781EC02EF065D85940DF15250F2708F8ECB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 03:50:18 +0000 Manifest this update: Thu 24 Sep 2026 03:45:18 +0000 Manifest next update: Fri 25 Sep 2026 07:49:18 +0000 Files and hashes: 1: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: GRM6rus6lwETinGsMNAHhMdqqrq7IGt093Aq5KEiOyM=) 2: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: Y3QjCeZ1GQuw+Af/4ElzHz4uj30AWOknv+PuSj10pQI=) 3: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl (hash: UGoXVbIo36g7Yq6VaW9H1ssrMUvugYi8VtVlYLWUfPI=) 4: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: uDv+UYL75QoUmpMlaL+3dQMgpVoz8iM4bxe1Z2EgXa4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:46:77:81:ec:02:ef:06:5d:85:94:0d:f1:52:50:f2:70:8f:8e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Validity Not Before: Sep 24 03:45:18 2026 GMT Not After : Sep 25 07:49:18 2026 GMT Subject: CN=91ED02BF37E811FB8F0A221272E9AF684412652A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:48:ad:34:c0:d7:c6:72:21:2c:5c:23:51: 55:a9:8b:8d:35:9d:09:b6:07:25:d6:5f:fd:75:a9: f4:38:3e:05:69:19:32:1c:cc:39:85:84:27:ed:e1: 45:e7:6d:c0:2c:4e:ca:57:05:48:6b:13:43:bf:74: ef:12:d9:ff:19:e9:a0:52:07:6f:3e:2b:93:6d:bf: b2:fe:2f:87:6c:ee:6f:11:43:fa:b6:a4:67:a8:b1: 90:1a:28:58:66:ff:ab:7a:5b:84:92:0e:7a:be:45: 05:85:c9:74:a8:38:99:ac:5f:98:3b:a2:07:ea:08: 18:84:da:f1:b4:0f:2e:e5:66:35:a9:6f:48:93:e6: 6d:79:0d:2e:95:6f:df:3e:d6:79:d7:dc:56:96:7a: ed:e8:85:2b:96:7f:5a:44:b4:43:2a:37:3a:f0:67: f1:5b:61:96:b5:eb:7a:42:54:78:b8:b7:60:9b:da: d2:ea:66:26:71:34:8b:e4:4b:6f:24:4b:33:2e:f0: 41:c1:a8:a4:c0:a6:7b:19:5d:23:06:b8:0c:ad:1f: 19:14:0c:42:5b:e3:93:16:0f:91:88:e5:3e:12:84: 8e:9d:0f:48:b8:12:e5:b5:54:37:ae:a2:c2:88:b7: 50:4a:1d:50:79:d7:e9:78:dd:0f:9e:c8:0f:d0:65: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:ED:02:BF:37:E8:11:FB:8F:0A:22:12:72:E9:AF:68:44:12:65:2A X509v3 Authority Key Identifier: keyid:AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c6:23:17:2f:5e:8c:66:65:49:09:af:82:d4:69:6d:34:30: eb:e2:31:7b:27:fd:84:f9:2a:ae:85:cd:24:02:b6:85:50:cb: fc:e0:9f:7d:45:37:8a:c1:dd:86:fe:37:ba:69:13:02:96:2b: 9c:a9:30:10:c4:06:60:62:db:1e:e5:39:d6:e2:9b:bd:a8:9a: e5:82:2f:7e:00:9b:0c:a5:33:82:bd:55:7c:26:47:d6:e9:2c: f4:96:6f:54:d0:69:c6:41:94:23:63:f3:6e:9e:35:2d:24:25: 50:3b:34:4c:c4:cf:e8:25:fe:24:dd:dd:1d:2f:d6:bb:1b:8e: d4:4b:53:89:6a:06:e2:3b:03:23:50:aa:78:24:10:d5:7b:cb: 94:e9:96:74:e1:ba:4e:bc:dd:dd:d0:a4:e2:44:28:7f:e4:2c: 69:a3:9c:ba:61:95:ad:e3:ac:8e:4e:a2:5e:0f:ff:86:23:73: 58:59:97:c2:93:50:f4:b8:ce:b7:c2:3b:05:f1:25:88:b1:ec: 2a:50:97:6d:63:c9:78:6c:50:2d:48:08:7c:c0:26:59:53:cb: c4:b2:93:cc:39:32:52:af:cd:1e:c6:a5:07:7b:41:fe:ef:c3: a6:a4:a8:31:29:75:25:12:53:37:e5:81:a5:90:17:a5:78:33: 8a:44:a4:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUZ3gewC7wZdhZQN8VJQ8nCPjsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0 RjRFRTBENTAeFw0yNjA5MjQwMzQ1MThaFw0yNjA5MjUwNzQ5MThaMDMxMTAvBgNV BAMTKDkxRUQwMkJGMzdFODExRkI4RjBBMjIxMjcyRTlBRjY4NDQxMjY1MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCEitNMDXxnIhLFwjUVWpi401 nQm2ByXWX/11qfQ4PgVpGTIczDmFhCft4UXnbcAsTspXBUhrE0O/dO8S2f8Z6aBS B28+K5Ntv7L+L4ds7m8RQ/q2pGeosZAaKFhm/6t6W4SSDnq+RQWFyXSoOJmsX5g7 ogfqCBiE2vG0Dy7lZjWpb0iT5m15DS6Vb98+1nnX3FaWeu3ohSuWf1pEtEMqNzrw Z/FbYZa163pCVHi4t2Cb2tLqZiZxNIvkS28kSzMu8EHBqKTApnsZXSMGuAytHxkU DEJb45MWD5GI5T4ShI6dD0i4EuW1VDeuosKIt1BKHVB51+l43Q+eyA/QZbiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUke0CvzfoEfuPCiIScumvaEQSZSowHwYDVR0j BBgwFoAUq1D9vwOEbjPS+MUYfeqfXk9O4NUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc1OTQ3NmUtNmFkYi00ZjJlLWJlNzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYw Mzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0RjRFRTBENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjUwRkRCRjAzODQ2RTMzRDJGOEM1MTg3REVBOUY1RTRGNEVF MEQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlG NUU0RjRFRTBENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrGIxcvXoxmZUkJr4LUaW00MOviMXsn/YT5 Kq6FzSQCtoVQy/zgn31FN4rB3Yb+N7ppEwKWK5ypMBDEBmBi2x7lOdbim72omuWC L34AmwylM4K9VXwmR9bpLPSWb1TQacZBlCNj826eNS0kJVA7NEzEz+gl/iTd3R0v 1rsbjtRLU4lqBuI7AyNQqngkENV7y5TplnThuk683d3QpOJEKH/kLGmjnLphla3j rI5Ool4P/4Yjc1hZl8KTUPS4zrfCOwXxJYix7CpQl21jyXhsUC1ICHzAJllTy8Sy k8w5MlKvzR7GpQd7Qf7vw6akqDEpdSUSUzflgaWQF6V4M4pEpPI= -----END CERTIFICATE-----Generated at Thu Sep 24 20:08:31 2026 by rpki-client