$ rpki-client -vvvf rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft File: AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft (raw, json) Hash identifier: 27hUU/9a/VPqxGgAsqnmD1RdP+VIMTI16iBRpDZJRrA= Subject key identifier: BF:82:97:5B:C8:D1:8F:48:8E:32:C9:94:8D:5F:9F:89:D3:14:C6:32 Authority key identifier: AB:5F:90:55:2B:80:CD:C2:41:65:92:E5:FD:A7:73:F5:D6:6F:53:BE Certificate issuer: /CN=AB5F90552B80CDC2416592E5FDA773F5D66F53BE Certificate serial: 6FECAAD51FC6651149CAB457EE8DC0BB5404BED3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft Manifest number: F9 Signing time: Thu 05 Nov 2026 05:56:22 +0000 Manifest this update: Thu 05 Nov 2026 05:51:22 +0000 Manifest next update: Fri 06 Nov 2026 06:23:22 +0000 Files and hashes: 1: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: 8mWztPKHecvNCBMMV0cUZVPOGf2iWRWZndzDVuRiFm4=) 2: AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl (hash: S7RlD36PaDGvK+DcmCiVVUtPUgOP0YoS4moHQVYdMlQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 06:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ec:aa:d5:1f:c6:65:11:49:ca:b4:57:ee:8d:c0:bb:54:04:be:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB5F90552B80CDC2416592E5FDA773F5D66F53BE Validity Not Before: Nov 5 05:51:22 2026 GMT Not After : Nov 6 06:23:22 2026 GMT Subject: CN=BF82975BC8D18F488E32C9948D5F9F89D314C632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9e:f1:ef:0a:2a:1c:62:2c:09:4f:85:98:9c: dc:9c:65:53:a6:b4:49:68:28:a5:50:d8:36:0d:fc: 56:48:f9:13:7b:5e:3c:3c:d4:8c:55:5a:bf:ef:12: a4:1a:ae:aa:f0:22:d5:e6:ab:61:51:11:d1:96:47: d2:27:94:d5:50:82:c0:48:d3:d4:af:92:78:a1:9b: 87:77:90:63:3d:5d:71:1e:88:9c:23:ee:32:e0:33: c6:1c:06:b7:6e:9d:d7:3c:27:b8:d2:ec:bd:db:75: 7d:10:2e:f3:c8:00:c8:68:7c:57:7d:88:8e:ad:d6: bc:db:a5:da:49:b9:c2:21:51:c4:36:54:20:94:18: 21:6d:cd:75:18:ac:d9:f1:f5:32:57:89:19:c7:75: 3b:ad:82:d9:e9:b8:2f:76:3f:81:ac:24:89:06:59: 52:db:be:84:42:fa:d1:60:95:c8:29:16:15:e0:e4: f3:a4:85:fd:04:aa:92:af:a9:c3:a6:7b:6c:d8:2f: 2a:f0:37:b9:5f:f8:06:fc:dc:ef:fc:91:49:0d:25: dd:fa:39:a7:64:c2:1d:55:f1:84:4d:bf:96:a7:28: 42:25:cc:4f:e9:80:d9:41:a2:98:d0:91:2a:fb:7d: b4:22:d1:2e:5b:56:b8:0a:0a:f7:64:56:54:a4:13: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:82:97:5B:C8:D1:8F:48:8E:32:C9:94:8D:5F:9F:89:D3:14:C6:32 X509v3 Authority Key Identifier: keyid:AB:5F:90:55:2B:80:CD:C2:41:65:92:E5:FD:A7:73:F5:D6:6F:53:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:46:e1:d0:c2:e6:23:2f:54:92:4e:b1:1a:88:f7:42:dd:84: d9:eb:73:3f:76:1e:62:ac:b3:61:24:84:0e:e1:0d:c3:49:51: 34:2b:11:95:22:dd:78:56:a9:4f:05:4b:3c:b5:cb:26:67:79: eb:43:75:03:ea:5e:3c:f6:db:9d:45:e3:9f:26:25:8c:3b:e6: 51:82:25:fa:ae:43:5c:a9:0d:93:5c:b3:ec:98:38:7a:6e:78: e4:aa:66:23:01:e5:ef:05:b5:25:f1:98:6f:74:d8:b5:02:60: 24:fc:6a:0a:59:a2:d4:45:0d:54:db:6a:3a:ac:09:84:a1:59: aa:6d:c4:3b:de:9a:9d:c0:14:79:88:48:e9:0c:36:f6:7f:19: ec:e1:7e:1f:04:9e:d1:9c:61:75:9f:39:44:35:76:98:8d:c4: 23:d7:98:1d:fd:58:15:f9:41:31:e7:7b:04:49:2a:af:e1:4b: 56:88:75:76:46:14:ac:39:03:ed:ec:53:e9:44:06:e3:98:58: 70:22:f4:45:bf:b5:d6:3e:ac:a2:ad:fa:39:05:14:3e:9f:5b: 55:be:b2:f6:ab:62:d8:f5:f3:05:d8:22:96:37:15:ca:d5:7b: 45:02:52:41:f9:e7:31:56:76:01:6b:99:e5:b3:1d:71:f7:02: 17:ba:e0:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+yq1R/GZRFJyrRX7o3Au1QEvtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1RjkwNTUyQjgwQ0RDMjQxNjU5MkU1RkRBNzczRjVE NjZGNTNCRTAeFw0yNjExMDUwNTUxMjJaFw0yNjExMDYwNjIzMjJaMDMxMTAvBgNV BAMTKEJGODI5NzVCQzhEMThGNDg4RTMyQzk5NDhENUY5Rjg5RDMxNEM2MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgnvHvCiocYiwJT4WYnNycZVOm tEloKKVQ2DYN/FZI+RN7Xjw81IxVWr/vEqQarqrwItXmq2FREdGWR9InlNVQgsBI 09Svknihm4d3kGM9XXEeiJwj7jLgM8YcBrdundc8J7jS7L3bdX0QLvPIAMhofFd9 iI6t1rzbpdpJucIhUcQ2VCCUGCFtzXUYrNnx9TJXiRnHdTutgtnpuC92P4GsJIkG WVLbvoRC+tFglcgpFhXg5POkhf0EqpKvqcOme2zYLyrwN7lf+Ab83O/8kUkNJd36 Oadkwh1V8YRNv5anKEIlzE/pgNlBopjQkSr7fbQi0S5bVrgKCvdkVlSkExPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv4KXW8jRj0iOMsmUjV+fidMUxjIwHwYDVR0j BBgwFoAUq1+QVSuAzcJBZZLl/adz9dZvU74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQ4YjY1ODMtNDEyMi00NjlkLTgzODQtM2FmMWJjYzY2MDdmLzAvQUI1RjkwNTUy QjgwQ0RDMjQxNjU5MkU1RkRBNzczRjVENjZGNTNCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjVGOTA1NTJCODBDREMyNDE2NTkyRTVGREE3NzNGNUQ2NkY1 M0JFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvQUI1RjkwNTUyQjgwQ0RDMjQxNjU5MkU1RkRBNzcz RjVENjZGNTNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1G4dDC5iMvVJJOsRqI90LdhNnrcz92HmKs s2EkhA7hDcNJUTQrEZUi3XhWqU8FSzy1yyZneetDdQPqXjz2251F458mJYw75lGC JfquQ1ypDZNcs+yYOHpueOSqZiMB5e8FtSXxmG902LUCYCT8agpZotRFDVTbajqs CYShWaptxDvemp3AFHmISOkMNvZ/Gezhfh8EntGcYXWfOUQ1dpiNxCPXmB39WBX5 QTHnewRJKq/hS1aIdXZGFKw5A+3sU+lEBuOYWHAi9EW/tdY+rKKt+jkFFD6fW1W+ svarYtj18wXYIpY3FcrVe0UCUkH55zFWdgFrmeWzHXH3Ahe64D8= -----END CERTIFICATE-----Generated at Thu Nov 5 09:41:00 2026 by rpki-client