$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft File: 5ABFE157E467A6732384B658909A9764D5D88AEC.mft (raw, json) Hash identifier: XRVIR71xpdrlle7qAVKogFShaWvx50YJLUuXjcVC46k= Subject key identifier: A2:CD:C6:D3:CD:9D:D5:A0:A6:7E:40:9D:1F:46:07:34:56:D2:58:72 Authority key identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC Certificate issuer: /CN=5ABFE157E467A6732384B658909A9764D5D88AEC Certificate serial: 3CB431204D95DADC1CEDCE23F24B89F7840B88F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 17:59:43 +0000 Manifest this update: Wed 02 Sep 2026 17:54:43 +0000 Manifest next update: Thu 03 Sep 2026 19:27:43 +0000 Files and hashes: 1: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (hash: WFBdDzYNGyGBPxFeYXB5Lb1GK9i9G1iuTrrdeZuMZkY=) 2: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: OYkbzaiaQarKQmGzbsa0kcIv0ahbBNrL8RA56NXr+2g=) 3: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: s1c5Xhjj1A4MpzLQqmtjwYb0lHUpDy9QxtX6cd6J7tw=) 4: 5ABFE157E467A6732384B658909A9764D5D88AEC.crl (hash: cfvB61OUCyCvJLSfzkthKgV0M1AnTteLMMcVVp92CfY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 19:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b4:31:20:4d:95:da:dc:1c:ed:ce:23:f2:4b:89:f7:84:0b:88:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABFE157E467A6732384B658909A9764D5D88AEC Validity Not Before: Sep 2 17:54:43 2026 GMT Not After : Sep 3 19:27:43 2026 GMT Subject: CN=A2CDC6D3CD9DD5A0A67E409D1F46073456D25872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f3:7e:ac:ee:2c:f4:88:71:5e:8d:7a:c2:e1: d1:a0:66:e7:a8:42:7d:e9:77:76:38:54:a2:ff:df: 0a:c3:66:e3:ba:7b:d9:f1:67:ad:42:0b:a5:26:fa: 4e:72:2d:3b:71:63:bf:45:a7:06:3b:b4:fb:fa:bf: e6:ed:23:20:ce:60:30:36:4e:d9:74:bd:c2:5f:1e: 13:3d:50:ee:52:cf:b4:44:2a:63:e7:ee:40:73:d4: 42:37:73:94:b2:b9:4d:84:ec:8b:f2:04:7e:be:ed: 13:78:df:7f:ea:31:ac:6e:7f:67:c8:b3:3c:47:2e: 7b:d6:6c:60:86:27:7f:8c:d3:75:d8:b1:ef:b1:c7: 0f:04:37:53:f8:eb:18:34:55:60:77:db:05:e3:8a: 4e:e3:86:3c:45:f4:5f:2c:1a:13:5c:b1:a1:98:ac: e3:04:57:6b:08:0c:ea:af:c7:c6:ab:d0:47:3c:9f: 20:a9:72:6f:35:9c:78:85:f7:36:c3:fc:da:6c:30: 6c:0f:f8:cb:79:8c:df:dd:bf:be:9d:7e:e7:c2:a6: ea:72:4c:5d:f1:fd:d0:1b:c0:06:9e:ca:f3:a6:14: 05:8f:56:97:e4:71:45:d3:99:5e:2b:9d:d7:10:ef: 76:2d:9d:c4:5b:09:14:4e:f2:b6:f1:3b:da:0d:13: 09:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CD:C6:D3:CD:9D:D5:A0:A6:7E:40:9D:1F:46:07:34:56:D2:58:72 X509v3 Authority Key Identifier: keyid:5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:fe:a8:53:16:ad:ae:4e:4a:06:3f:f6:5c:05:25:bc:e9:91: f1:0d:75:f3:1d:83:15:5a:00:8b:e2:db:92:af:32:0e:01:df: ae:51:21:0a:ef:7c:07:d4:34:e2:f6:21:4e:89:62:bb:3b:33: a1:b0:94:81:85:f9:9e:c0:98:8e:c3:32:aa:a8:dc:16:3d:e3: b4:ad:cf:c8:a7:78:4a:04:52:53:0b:8e:df:fb:0c:01:86:f5: 9a:c5:59:45:41:62:69:a8:0c:be:a8:1a:4e:ad:1e:13:40:90: e6:a3:40:f6:0f:75:78:6e:2a:05:4a:1e:76:de:26:51:f6:ba: 3f:b7:3a:0a:cc:41:b6:c0:13:7f:cd:fe:83:e6:d9:44:75:2f: 56:71:a1:3c:44:b9:3f:3d:fa:02:78:09:ba:d9:4e:eb:5d:6f: 44:29:b3:0b:48:6f:e8:d8:c6:24:a5:ca:00:d1:3d:2f:3d:16: 50:bc:21:a5:0d:7f:b1:62:47:1d:86:6f:fc:a5:a2:43:4f:b3: 86:17:a5:95:c4:fb:9c:e0:95:d8:b0:c8:8f:c9:36:54:2f:06: 63:89:15:45:f5:4b:f4:44:03:9e:7d:53:b4:3e:98:42:a2:4f: a1:cc:c9:d7:6e:55:2a:27:e0:b7:53:12:dd:55:26:72:ea:14: da:6e:62:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPLQxIE2V2twc7c4j8kuJ94QLiPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3NjRE NUQ4OEFFQzAeFw0yNjA5MDIxNzU0NDNaFw0yNjA5MDMxOTI3NDNaMDMxMTAvBgNV BAMTKEEyQ0RDNkQzQ0Q5REQ1QTBBNjdFNDA5RDFGNDYwNzM0NTZEMjU4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy836s7iz0iHFejXrC4dGgZueo Qn3pd3Y4VKL/3wrDZuO6e9nxZ61CC6Um+k5yLTtxY79FpwY7tPv6v+btIyDOYDA2 Ttl0vcJfHhM9UO5Sz7REKmPn7kBz1EI3c5SyuU2E7IvyBH6+7RN433/qMaxuf2fI szxHLnvWbGCGJ3+M03XYse+xxw8EN1P46xg0VWB32wXjik7jhjxF9F8sGhNcsaGY rOMEV2sIDOqvx8ar0Ec8nyCpcm81nHiF9zbD/NpsMGwP+Mt5jN/dv76dfufCpupy TF3x/dAbwAaeyvOmFAWPVpfkcUXTmV4rndcQ73YtncRbCRRO8rbxO9oNEwnjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUos3G082d1aCmfkCdH0YHNFbSWHIwHwYDVR0j BBgwFoAUWr/hV+RnpnMjhLZYkJqXZNXYiuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJkMzA1ODctYTdjYS00MTk1LWEzNTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdF NDY3QTY3MzIzODRCNjU4OTA5QTk3NjRENUQ4OEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUJGRTE1N0U0NjdBNjczMjM4NEI2NTg5MDlBOTc2NEQ1RDg4 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3 NjRENUQ4OEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEH+qFMWra5OSgY/9lwFJbzpkfENdfMdgxVa AIvi25KvMg4B365RIQrvfAfUNOL2IU6JYrs7M6GwlIGF+Z7AmI7DMqqo3BY947St z8ineEoEUlMLjt/7DAGG9ZrFWUVBYmmoDL6oGk6tHhNAkOajQPYPdXhuKgVKHnbe JlH2uj+3OgrMQbbAE3/N/oPm2UR1L1ZxoTxEuT89+gJ4CbrZTutdb0QpswtIb+jY xiSlygDRPS89FlC8IaUNf7FiRx2Gb/ylokNPs4YXpZXE+5zgldiwyI/JNlQvBmOJ FUX1S/REA559U7Q+mEKiT6HMydduVSon4LdTEt1VJnLqFNpuYpk= -----END CERTIFICATE-----Generated at Thu Sep 3 12:37:02 2026 by rpki-client