$ rpki-client -vvf rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft File: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft (raw, json) Hash identifier: 80MzeL6xH+Pdm1W9oww31T/tKYmLBxVwOJ5HYJPzLec= Subject key identifier: DE:95:C3:6C:BA:58:CD:3B:BC:C6:E1:31:D1:F6:36:B5:DB:44:CB:1D Authority key identifier: AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD Certificate issuer: /CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD Certificate serial: 42A9E77C97A60C4540A6BA7F34D8174270EA40D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:01:37 +0000 Manifest this update: Tue 12 May 2026 19:56:37 +0000 Manifest next update: Wed 13 May 2026 21:03:37 +0000 Files and hashes: 1: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: P/QxCrf6WfKLvPGmKU57C3y4W+PW1Rf3us9X69RWmso=) 2: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: BWkQKxIfXCHfh/9a/7ZikuopxvR6ddCoDn8JEUuJXcg=) 3: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl (hash: kP+QvehDJ9j721zBXPsAYnMPbNP7zFGHRVzXdlHZglM=) 4: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: jRoJloKWdBD0ievbpq3l4pAS4f1axSNzf++s/yOl2zM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a9:e7:7c:97:a6:0c:45:40:a6:ba:7f:34:d8:17:42:70:ea:40:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD Validity Not Before: May 12 19:56:37 2026 GMT Not After : May 13 21:03:37 2026 GMT Subject: CN=DE95C36CBA58CD3BBCC6E131D1F636B5DB44CB1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:93:ed:47:d7:94:33:b9:b4:9d:cd:04:25:90: a6:5d:47:af:48:9b:22:06:f4:8e:f8:2d:19:aa:a7: 91:55:0b:ca:e8:ea:9b:14:39:eb:38:c3:ed:47:63: 11:35:76:35:7c:82:1b:d1:d3:0c:f5:6b:0d:b2:a7: fa:8a:3a:90:4e:0f:6e:f1:8a:ed:6d:3f:67:8b:c8: a8:3f:91:f9:de:da:df:c2:c7:40:67:fe:01:5a:c3: 9c:cd:57:f9:71:bf:0a:35:14:1b:0b:bf:b6:ca:dd: 3c:ad:e8:90:d0:13:e8:b7:58:45:b0:e2:bc:b8:42: bb:18:b1:a3:e9:bc:9b:48:62:87:80:f5:c4:d1:76: 94:de:ca:e1:5f:de:78:e0:d8:37:53:41:de:da:98: 1d:72:8b:01:e6:80:67:37:0a:0c:d6:08:e4:77:82: c7:03:19:b8:bc:a6:99:1b:73:7e:8b:83:82:81:24: f2:cf:31:b6:62:f0:5d:35:a0:06:80:20:14:52:12: 68:09:41:79:04:c5:1d:af:69:f0:fa:4f:d5:cc:8a: 8a:46:49:14:68:4e:f0:8f:d1:ca:04:93:af:d8:3e: 42:ad:85:d3:7e:14:ae:61:22:b9:f0:99:49:9c:dc: 20:35:82:98:c9:59:c7:8e:30:ad:e8:18:7b:69:fa: 5c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:95:C3:6C:BA:58:CD:3B:BC:C6:E1:31:D1:F6:36:B5:DB:44:CB:1D X509v3 Authority Key Identifier: keyid:AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3b:42:80:27:48:10:d9:3f:59:42:16:09:5e:64:25:43:9b: 9c:4a:63:73:75:89:8f:92:23:97:30:3c:50:b4:cd:b2:bc:21: 39:d3:01:80:47:65:81:6a:8b:24:1c:ce:e2:08:a0:87:66:77: 3a:60:7c:d4:29:24:93:a6:12:f6:a3:d7:48:39:c8:89:4c:6d: 5b:5f:9f:c9:de:4f:5a:9b:1b:6a:c4:49:b1:f4:84:15:34:08: 15:75:91:61:36:05:40:59:5f:c3:7b:fc:ac:df:86:c9:19:21: e0:22:5b:7e:bb:b8:55:86:42:74:f3:a4:a3:fa:20:66:69:cb: 16:91:bd:93:be:37:8a:36:29:83:e2:36:29:e2:6d:33:9d:70: 03:d0:9b:fa:c3:2f:2e:ee:9f:d0:7f:f2:5c:98:51:7a:c8:d8: ed:c4:e7:ef:b4:e7:d5:e8:b6:80:d5:f9:66:89:b4:42:8c:f6: 69:59:6f:6e:43:23:f2:8c:dc:d9:28:f5:66:0e:4b:69:89:9e: b3:cf:9d:7e:9c:de:39:d3:fb:4c:b6:0d:3b:29:3b:32:54:9d: 04:d1:05:31:38:ae:63:8d:b8:a3:97:9e:5f:54:05:31:b8:7e: e9:76:78:12:d9:bc:bb:4f:73:81:47:9c:23:77:c1:7a:87:18: 4c:0e:5d:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqnnfJemDEVAprp/NNgXQnDqQNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1NzExNDg2MDIzRjhGMERCRkVEMzhCQzdGRDdCQzkx NzM1RkZDRDAeFw0yNjA1MTIxOTU2MzdaFw0yNjA1MTMyMTAzMzdaMDMxMTAvBgNV BAMTKERFOTVDMzZDQkE1OENEM0JCQ0M2RTEzMUQxRjYzNkI1REI0NENCMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSk+1H15QzubSdzQQlkKZdR69I myIG9I74LRmqp5FVC8ro6psUOes4w+1HYxE1djV8ghvR0wz1aw2yp/qKOpBOD27x iu1tP2eLyKg/kfne2t/Cx0Bn/gFaw5zNV/lxvwo1FBsLv7bK3Tyt6JDQE+i3WEWw 4ry4QrsYsaPpvJtIYoeA9cTRdpTeyuFf3njg2DdTQd7amB1yiwHmgGc3CgzWCOR3 gscDGbi8ppkbc36Lg4KBJPLPMbZi8F01oAaAIBRSEmgJQXkExR2vafD6T9XMiopG SRRoTvCP0coEk6/YPkKthdN+FK5hIrnwmUmc3CA1gpjJWceOMK3oGHtp+lzrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3pXDbLpYzTu8xuEx0fY2tdtEyx0wHwYDVR0j BBgwFoAUq1cRSGAj+PDb/tOLx/17yRc1/80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRhZWM2NmMtOWUxZC00MzIxLWIwNjktZWVhYjQ3OTNhMDBiLzAvQUI1NzExNDg2 MDIzRjhGMERCRkVEMzhCQzdGRDdCQzkxNzM1RkZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjU3MTE0ODYwMjNGOEYwREJGRUQzOEJDN0ZEN0JDOTE3MzVG RkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvQUI1NzExNDg2MDIzRjhGMERCRkVEMzhCQzdGRDdC QzkxNzM1RkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD87QoAnSBDZP1lCFgleZCVDm5xKY3N1iY+S I5cwPFC0zbK8ITnTAYBHZYFqiyQczuIIoIdmdzpgfNQpJJOmEvaj10g5yIlMbVtf n8neT1qbG2rESbH0hBU0CBV1kWE2BUBZX8N7/KzfhskZIeAiW367uFWGQnTzpKP6 IGZpyxaRvZO+N4o2KYPiNinibTOdcAPQm/rDLy7un9B/8lyYUXrI2O3E5++059Xo toDV+WaJtEKM9mlZb25DI/KM3Nko9WYOS2mJnrPPnX6c3jnT+0y2DTspOzJUnQTR BTE4rmONuKOXnl9UBTG4ful2eBLZvLtPc4FHnCN3wXqHGEwOXRk= -----END CERTIFICATE-----Generated at Tue May 12 22:46:08 2026 by rpki-client