$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft File: ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft (raw, json) Hash identifier: Bsx2OIRXqsxMqBu8Gzu2sCmSdfZrGM+s0h9+Be6d7k0= Subject key identifier: C3:A3:43:3C:F8:C1:58:A1:56:C6:E1:E0:5E:E8:9D:8D:42:D4:5E:92 Authority key identifier: AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35 Certificate issuer: /CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235 Certificate serial: 3B3E4200A5C3766A476A3DD9D6CD0F60B4BA975B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 02:05:33 +0000 Manifest this update: Thu 03 Sep 2026 02:00:33 +0000 Manifest next update: Fri 04 Sep 2026 05:00:33 +0000 Files and hashes: 1: AS147168.roa (hash: WiiJ0UINkkiQHu9jLgZQhKLsdBs17smAwZtsfZdz3PU=) 2: AS45700.roa (hash: 4gylyPRrLCVxqv8jBeq1Y73wjMNwCZgjrx7f+jJHRfU=) 3: AS10217.roa (hash: rBN9V7NO+oNZzLzvFqCWOkrMsFmQrg1NnhxBG1/GfOM=) 4: ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl (hash: rkf0Nq1q8gXdcPpbhGluVeKQ1n3ksletZJ/ThsUa/Pk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3e:42:00:a5:c3:76:6a:47:6a:3d:d9:d6:cd:0f:60:b4:ba:97:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235 Validity Not Before: Sep 3 02:00:33 2026 GMT Not After : Sep 4 05:00:33 2026 GMT Subject: CN=C3A3433CF8C158A156C6E1E05EE89D8D42D45E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:04:ba:83:b8:da:af:c8:e9:8e:16:aa:1d:25: 7d:21:1c:1a:4b:b6:90:1f:85:7d:3a:d1:dc:f3:3c: 6d:02:b1:b9:cc:a0:cc:a3:63:72:0a:d5:83:99:16: 00:cd:c4:c8:0d:b6:7e:37:ff:e7:2e:b0:40:92:29: 04:f2:f1:33:b5:03:a6:89:0e:d7:90:31:b6:3f:8e: 48:c9:6f:ab:51:52:e0:73:cb:8b:aa:c2:24:b2:ce: 89:91:5f:e2:8a:cb:1c:69:aa:51:e4:6e:fc:1a:4d: 50:db:2d:f7:d4:14:3f:15:80:80:d3:94:3d:77:78: 2c:06:0b:27:d2:55:83:51:c6:f8:c4:a7:b2:d7:c1: b1:c7:91:33:14:54:c2:cc:26:01:fa:dc:32:a3:c1: 09:af:fa:3b:92:1b:f8:47:19:18:c8:69:7c:96:ed: 6b:16:90:cd:39:78:e8:7b:5b:c0:a5:b4:3b:70:bd: 2b:73:25:59:ee:60:c5:17:ff:19:d5:8f:97:03:10: b8:a8:e1:29:4b:fc:a2:e3:13:b9:4e:12:d4:11:b7: ba:f1:8c:9c:b8:ef:c1:2b:91:04:52:41:df:d0:14: b3:e6:d7:ce:8c:0b:d0:25:be:91:ee:54:d9:f3:66: 65:ac:95:9b:9e:ef:df:dd:0b:8f:b4:c2:09:4c:ec: 87:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A3:43:3C:F8:C1:58:A1:56:C6:E1:E0:5E:E8:9D:8D:42:D4:5E:92 X509v3 Authority Key Identifier: keyid:AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:60:bc:57:63:de:e2:2d:5b:cf:66:f6:7e:07:63:9d:f5:b9: 1c:c7:59:52:ca:92:dc:70:4e:81:01:20:82:61:c1:52:4b:cf: 83:c0:5f:4b:37:44:79:2e:b6:67:5a:47:fc:0f:70:f6:3a:6b: 50:64:31:d5:d1:24:84:c9:0a:3f:da:8b:bc:e7:4f:2a:d9:ec: 02:38:2e:45:3e:5f:2f:c0:5d:8b:65:44:40:0f:4c:f0:45:a9: ae:3d:cc:eb:81:b3:c8:3b:50:46:59:a2:a6:4b:6d:29:9c:1b: 33:de:28:9a:98:de:a2:c0:d5:d8:ac:8e:36:44:81:d0:78:5e: 03:ce:35:e4:0d:80:55:2b:58:63:dc:74:67:4b:d3:f6:c2:72: 4b:7b:17:84:77:0b:b3:ae:04:88:26:00:76:c5:7d:c8:97:9e: 8e:f0:c3:64:00:5b:c4:a6:a4:7c:0c:69:fb:27:88:87:76:c6: 5e:12:01:5a:49:ad:51:9b:b1:95:2a:51:79:d4:3e:46:99:27: 1a:4d:e9:c8:25:af:cf:28:b1:7b:19:7a:f3:c2:7e:ca:ea:aa: f9:3f:93:8a:4d:79:32:4c:c6:23:7d:3e:ed:46:63:77:c5:38: bb:2c:4b:9c:25:84:b4:4e:9e:86:69:27:59:1e:ae:6d:ab:3b: e1:80:bc:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOz5CAKXDdmpHaj3Z1s0PYLS6l1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJGRTZCMzE5NzE0NzMxMkVDMUZBRTA1QTI1MkEzOTY0 RTlCQjIzNTAeFw0yNjA5MDMwMjAwMzNaFw0yNjA5MDQwNTAwMzNaMDMxMTAvBgNV BAMTKEMzQTM0MzNDRjhDMTU4QTE1NkM2RTFFMDVFRTg5RDhENDJENDVFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBLqDuNqvyOmOFqodJX0hHBpL tpAfhX060dzzPG0CsbnMoMyjY3IK1YOZFgDNxMgNtn43/+cusECSKQTy8TO1A6aJ DteQMbY/jkjJb6tRUuBzy4uqwiSyzomRX+KKyxxpqlHkbvwaTVDbLffUFD8VgIDT lD13eCwGCyfSVYNRxvjEp7LXwbHHkTMUVMLMJgH63DKjwQmv+juSG/hHGRjIaXyW 7WsWkM05eOh7W8CltDtwvStzJVnuYMUX/xnVj5cDELio4SlL/KLjE7lOEtQRt7rx jJy478ErkQRSQd/QFLPm186MC9AlvpHuVNnzZmWslZue79/dC4+0wglM7IfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw6NDPPjBWKFWxuHgXuidjULUXpIwHwYDVR0j BBgwFoAUq/5rMZcUcxLsH64FolKjlk6bsjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZiNzA4MTgtMjM2Ni00MmUwLTlkYmQtMjU0MzgxMDY5ZTU3LzAvQUJGRTZCMzE5 NzE0NzMxMkVDMUZBRTA1QTI1MkEzOTY0RTlCQjIzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQkZFNkIzMTk3MTQ3MzEyRUMxRkFFMDVBMjUyQTM5NjRFOUJC MjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvQUJGRTZCMzE5NzE0NzMxMkVDMUZBRTA1QTI1MkEz OTY0RTlCQjIzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZgvFdj3uItW89m9n4HY531uRzHWVLKktxw ToEBIIJhwVJLz4PAX0s3RHkutmdaR/wPcPY6a1BkMdXRJITJCj/ai7znTyrZ7AI4 LkU+Xy/AXYtlREAPTPBFqa49zOuBs8g7UEZZoqZLbSmcGzPeKJqY3qLA1disjjZE gdB4XgPONeQNgFUrWGPcdGdL0/bCckt7F4R3C7OuBIgmAHbFfciXno7ww2QAW8Sm pHwMafsniId2xl4SAVpJrVGbsZUqUXnUPkaZJxpN6cglr88osXsZevPCfsrqqvk/ k4pNeTJMxiN9Pu1GY3fFOLssS5wlhLROnoZpJ1kerm2rO+GAvLc= -----END CERTIFICATE-----Generated at Thu Sep 3 09:47:26 2026 by rpki-client