$ rpki-client -vvf rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft File: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft (raw, json) Hash identifier: KCNy9BRkzMq++D0sNLKsLHd9QKGEKBeEudKjawVG/vY= Subject key identifier: EE:B7:97:FD:20:9B:D1:50:E8:15:B6:07:75:0D:47:E7:DC:5F:68:6D Authority key identifier: AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 Certificate issuer: /CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Certificate serial: 37762BFFD7BA4D18927D4BA7AB1E2E8E7BAE29B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:51:57 +0000 Manifest this update: Thu 23 Jul 2026 13:46:57 +0000 Manifest next update: Fri 24 Jul 2026 17:13:57 +0000 Files and hashes: 1: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: uDv+UYL75QoUmpMlaL+3dQMgpVoz8iM4bxe1Z2EgXa4=) 2: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl (hash: m2Rw4JO9ER/hdM2HZViDAhbmpe7KaqFwHxBEjdHeFmE=) 3: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: Y3QjCeZ1GQuw+Af/4ElzHz4uj30AWOknv+PuSj10pQI=) 4: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: GRM6rus6lwETinGsMNAHhMdqqrq7IGt093Aq5KEiOyM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:76:2b:ff:d7:ba:4d:18:92:7d:4b:a7:ab:1e:2e:8e:7b:ae:29:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Validity Not Before: Jul 23 13:46:57 2026 GMT Not After : Jul 24 17:13:57 2026 GMT Subject: CN=EEB797FD209BD150E815B607750D47E7DC5F686D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d0:b5:f4:b2:14:99:16:bc:b9:5c:3e:c7:9c: 66:db:e1:f8:9e:1d:e7:c2:d4:af:38:96:2b:6b:9b: d1:14:36:f3:23:6b:52:4b:7d:e0:5f:66:69:2b:cd: c0:62:02:c1:03:b1:90:24:b7:57:2e:00:89:0d:54: fa:7f:8f:fd:61:69:f7:64:d9:24:07:dc:78:d8:8a: 22:4d:5d:74:14:ca:c7:a2:b1:9e:4e:3c:4d:76:9e: d7:9c:47:2e:aa:c8:12:39:99:e8:95:93:a3:e8:a4: f5:23:03:17:af:8d:6a:b8:7c:d1:ab:5a:59:e7:80: f3:2d:3b:32:1e:c1:b6:f8:94:71:fa:9b:1b:9a:c4: 12:08:17:c5:0a:6d:a0:0d:1b:ea:ce:5f:80:96:12: b8:eb:b9:3d:16:0c:36:ee:cb:87:89:98:81:d4:d5: 27:56:23:6c:ef:8c:78:c3:ee:ee:08:40:fc:69:3f: 11:6a:72:61:d2:09:a1:a1:cc:b3:ae:ef:33:e6:bf: e4:de:52:fe:94:05:87:88:3f:6b:a9:f0:cd:77:9d: 47:23:5b:0c:b9:19:bf:a1:19:be:7a:df:83:b0:7e: 3c:27:91:5c:bb:78:bd:5d:e3:d6:d5:b8:77:b7:74: af:d6:d7:25:24:05:54:4b:df:95:2e:fe:ad:f2:61: 4e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B7:97:FD:20:9B:D1:50:E8:15:B6:07:75:0D:47:E7:DC:5F:68:6D X509v3 Authority Key Identifier: keyid:AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ff:9c:4b:e3:7f:ff:c7:65:52:e6:dc:ba:3c:7d:78:e9:0d: d5:f9:1f:45:0e:85:87:19:15:dc:64:75:c6:97:48:fe:9f:bb: 71:30:ca:43:cf:3b:e1:30:ef:41:0b:a4:46:89:b7:9a:5f:7f: 53:a9:b4:84:e3:2a:18:7b:d7:b7:dc:cf:51:ce:d9:32:ea:85: ac:f2:65:d2:57:27:f3:77:5f:74:95:c9:11:6c:31:78:5f:a7: b8:d2:1d:28:d1:49:01:db:69:91:4f:c6:80:bb:c9:b5:bd:4a: 42:9a:0f:aa:fb:fb:2d:fe:ec:67:fd:9d:f8:57:1b:f5:2c:b3: c9:78:26:53:e2:d0:a9:df:88:3f:ac:ab:84:f0:d0:f4:b9:9a: b1:96:d6:4b:d1:2a:04:23:a4:c9:d6:14:73:2e:de:52:76:aa: 7f:06:84:4c:2f:2f:2a:d2:fd:0f:fd:d8:18:f0:ea:75:68:65: 32:70:d1:90:73:17:79:5c:bf:14:c6:1c:fc:38:03:08:45:0a: e3:e0:79:d4:fa:f7:18:c0:b3:81:29:e9:7f:45:17:d0:0b:c2: 22:1f:a3:9e:60:e4:58:b0:83:11:e9:f4:88:81:c2:e1:f5:45: 00:ac:3f:ae:4f:ea:fc:0b:69:fc:97:11:a5:66:d6:cb:92:27: e1:21:37:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3Yr/9e6TRiSfUunqx4ujnuuKbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0 RjRFRTBENTAeFw0yNjA3MjMxMzQ2NTdaFw0yNjA3MjQxNzEzNTdaMDMxMTAvBgNV BAMTKEVFQjc5N0ZEMjA5QkQxNTBFODE1QjYwNzc1MEQ0N0U3REM1RjY4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT0LX0shSZFry5XD7HnGbb4fie HefC1K84litrm9EUNvMja1JLfeBfZmkrzcBiAsEDsZAkt1cuAIkNVPp/j/1hafdk 2SQH3HjYiiJNXXQUyseisZ5OPE12ntecRy6qyBI5meiVk6PopPUjAxevjWq4fNGr WlnngPMtOzIewbb4lHH6mxuaxBIIF8UKbaANG+rOX4CWErjruT0WDDbuy4eJmIHU 1SdWI2zvjHjD7u4IQPxpPxFqcmHSCaGhzLOu7zPmv+TeUv6UBYeIP2up8M13nUcj Wwy5Gb+hGb5634OwfjwnkVy7eL1d49bVuHe3dK/W1yUkBVRL35Uu/q3yYU61AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7reX/SCb0VDoFbYHdQ1H59xfaG0wHwYDVR0j BBgwFoAUq1D9vwOEbjPS+MUYfeqfXk9O4NUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc1OTQ3NmUtNmFkYi00ZjJlLWJlNzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYw Mzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0RjRFRTBENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjUwRkRCRjAzODQ2RTMzRDJGOEM1MTg3REVBOUY1RTRGNEVF MEQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlG NUU0RjRFRTBENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE//nEvjf//HZVLm3Lo8fXjpDdX5H0UOhYcZ FdxkdcaXSP6fu3EwykPPO+Ew70ELpEaJt5pff1OptITjKhh717fcz1HO2TLqhazy ZdJXJ/N3X3SVyRFsMXhfp7jSHSjRSQHbaZFPxoC7ybW9SkKaD6r7+y3+7Gf9nfhX G/Uss8l4JlPi0KnfiD+sq4Tw0PS5mrGW1kvRKgQjpMnWFHMu3lJ2qn8GhEwvLyrS /Q/92Bjw6nVoZTJw0ZBzF3lcvxTGHPw4AwhFCuPgedT69xjAs4Ep6X9FF9ALwiIf o55g5FiwgxHp9IiBwuH1RQCsP65P6vwLafyXEaVm1suSJ+EhN9c= -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:16 2026 by rpki-client