$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft File: ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft (raw, json) Hash identifier: LddP2WMlmJVc7n0J122hshoY6M4xQB+2Beej77UMo9Q= Subject key identifier: 07:16:AF:54:EE:75:FE:A5:04:4A:06:DE:B1:CA:5E:42:69:90:32:14 Authority key identifier: AB:ED:71:E9:F6:44:DC:0B:71:AF:71:A2:59:01:C0:55:1B:1F:13:4B Certificate issuer: /CN=ABED71E9F644DC0B71AF71A25901C0551B1F134B Certificate serial: 685DAF66016824A2CE660EC0BBACAB521F7E33D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 06:28:46 +0000 Manifest this update: Thu 24 Sep 2026 06:23:46 +0000 Manifest next update: Fri 25 Sep 2026 07:50:46 +0000 Files and hashes: 1: ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl (hash: czN8cVpMUHtu5UkpyPXGC3Ii/csKDuc+VvIYGDFFQsE=) 2: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: QTvSNhE992wCS0VNXGZ4QrTW5fEG/UCs6bm/K+0HXAk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5d:af:66:01:68:24:a2:ce:66:0e:c0:bb:ac:ab:52:1f:7e:33:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED71E9F644DC0B71AF71A25901C0551B1F134B Validity Not Before: Sep 24 06:23:46 2026 GMT Not After : Sep 25 07:50:46 2026 GMT Subject: CN=0716AF54EE75FEA5044A06DEB1CA5E4269903214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3a:52:d2:62:88:f0:f8:81:70:71:9a:76:55: e1:e4:50:64:73:75:2d:19:15:89:8a:4c:3f:d0:51: c1:8e:56:c6:4c:b9:53:7d:d2:e7:ea:aa:9d:4d:f5: 1b:db:53:6f:ec:e3:e3:96:b1:d1:57:40:01:84:04: 41:71:3a:e3:d0:b0:96:f3:3a:a7:bc:cb:9d:a0:45: 5a:f8:db:ed:d6:2c:95:d9:7c:10:d6:e4:d3:97:ee: 1a:e2:32:88:09:19:7e:24:35:64:ed:6d:26:06:11: 19:16:c1:23:50:7b:20:21:61:df:be:72:4a:de:ef: 4a:73:88:a2:e9:86:c2:7c:68:9d:af:3b:e2:f3:dc: 3f:b8:8e:50:3c:e2:e7:a9:58:f5:d3:9d:21:cf:f5: 0e:07:05:0c:4a:85:ac:2c:ad:97:59:82:80:c2:c2: 1a:ff:cd:79:18:b8:5a:db:19:1d:8d:c0:c0:f5:a7: 72:06:c0:7f:cb:02:52:e7:26:c6:b3:e7:06:bd:bc: 9c:de:03:4e:24:e9:b5:25:07:cb:0e:b7:63:09:8c: e6:c5:3a:c0:cd:b6:4e:0f:29:84:60:cb:81:42:05: 15:e6:e1:e8:17:cf:20:6f:c6:43:c6:d0:5f:fd:d6: 82:75:8f:4c:f9:1e:f3:5c:86:b1:a4:38:b4:6a:6f: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:16:AF:54:EE:75:FE:A5:04:4A:06:DE:B1:CA:5E:42:69:90:32:14 X509v3 Authority Key Identifier: keyid:AB:ED:71:E9:F6:44:DC:0B:71:AF:71:A2:59:01:C0:55:1B:1F:13:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c9:cf:09:f8:48:42:2e:11:29:b8:11:d7:3c:d2:fb:d3:c9: 43:3f:9e:f6:ea:17:83:7f:93:d6:73:f5:1a:9b:cc:5b:79:d4: 6a:07:6f:3f:4e:ca:74:f1:93:44:08:85:93:fc:db:99:57:1d: 45:8c:4a:82:13:72:01:a7:25:f8:9c:9e:47:df:27:74:21:15: e4:b9:5d:94:23:4d:8b:50:18:be:da:c9:9d:e6:39:e1:1e:f8: a9:5c:31:12:45:16:23:07:0e:65:04:29:f5:82:f3:f2:e3:20: bc:93:fc:93:63:2e:8b:6d:08:ef:e1:eb:56:4b:3e:bb:28:ae: 04:b9:64:66:a5:af:96:f0:a9:9d:2d:86:66:ab:2a:52:0e:d2: 53:d5:e1:48:ab:9f:be:5c:fa:07:00:5a:80:c2:80:fb:81:00: 69:fb:c4:84:39:d2:e7:99:3b:2e:b4:3b:7a:ba:fc:a3:02:85: ec:66:ca:e9:f5:6d:b7:87:4e:1d:cc:d8:3e:65:52:16:ab:05: 47:dc:96:c0:62:79:13:c9:3f:b1:23:f4:b7:1a:a0:a1:f8:4e: d0:2f:a0:10:49:28:9d:e3:f8:c5:25:5b:d0:08:15:6d:08:93: e2:a2:2f:79:44:aa:7e:e4:25:72:ed:88:2c:1e:af:dc:35:e0: b9:e1:b4:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaF2vZgFoJKLOZg7Au6yrUh9+M9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJFRDcxRTlGNjQ0REMwQjcxQUY3MUEyNTkwMUMwNTUx QjFGMTM0QjAeFw0yNjA5MjQwNjIzNDZaFw0yNjA5MjUwNzUwNDZaMDMxMTAvBgNV BAMTKDA3MTZBRjU0RUU3NUZFQTUwNDRBMDZERUIxQ0E1RTQyNjk5MDMyMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdOlLSYojw+IFwcZp2VeHkUGRz dS0ZFYmKTD/QUcGOVsZMuVN90ufqqp1N9RvbU2/s4+OWsdFXQAGEBEFxOuPQsJbz Oqe8y52gRVr42+3WLJXZfBDW5NOX7hriMogJGX4kNWTtbSYGERkWwSNQeyAhYd++ ckre70pziKLphsJ8aJ2vO+Lz3D+4jlA84uepWPXTnSHP9Q4HBQxKhawsrZdZgoDC whr/zXkYuFrbGR2NwMD1p3IGwH/LAlLnJsaz5wa9vJzeA04k6bUlB8sOt2MJjObF OsDNtk4PKYRgy4FCBRXm4egXzyBvxkPG0F/91oJ1j0z5HvNchrGkOLRqbylLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBxavVO51/qUESgbescpeQmmQMhQwHwYDVR0j BBgwFoAUq+1x6fZE3Atxr3GiWQHAVRsfE0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE5YjgyMmEtOGI5MS00OGQyLTliYzEtYWUwZDkwMGJmOWM3LzAvQUJFRDcxRTlG NjQ0REMwQjcxQUY3MUEyNTkwMUMwNTUxQjFGMTM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQkVENzFFOUY2NDREQzBCNzFBRjcxQTI1OTAxQzA1NTFCMUYx MzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvQUJFRDcxRTlGNjQ0REMwQjcxQUY3MUEyNTkwMUMw NTUxQjFGMTM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPJzwn4SEIuESm4Edc80vvTyUM/nvbqF4N/ k9Zz9RqbzFt51GoHbz9OynTxk0QIhZP825lXHUWMSoITcgGnJficnkffJ3QhFeS5 XZQjTYtQGL7ayZ3mOeEe+KlcMRJFFiMHDmUEKfWC8/LjILyT/JNjLottCO/h61ZL PrsorgS5ZGalr5bwqZ0thmarKlIO0lPV4Uirn75c+gcAWoDCgPuBAGn7xIQ50ueZ Oy60O3q6/KMChexmyun1bbeHTh3M2D5lUharBUfclsBieRPJP7Ej9LcaoKH4TtAv oBBJKJ3j+MUlW9AIFW0Ik+KiL3lEqn7kJXLtiCwer9w14LnhtJo= -----END CERTIFICATE-----Generated at Thu Sep 24 11:27:48 2026 by rpki-client