$ rpki-client -vvf rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft File: AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft (raw, json) Hash identifier: 5KQpBdISzFQrWm5tIN3yj5NQcwUglhn5ow7zjh8gRgI= Subject key identifier: FD:45:4C:BC:39:C0:48:64:AD:26:38:39:DD:F7:7A:53:79:9A:74:D1 Authority key identifier: AB:5F:90:55:2B:80:CD:C2:41:65:92:E5:FD:A7:73:F5:D6:6F:53:BE Certificate issuer: /CN=AB5F90552B80CDC2416592E5FDA773F5D66F53BE Certificate serial: 4F432F0D3D7CD6A4F8F5717975926A1D10ED5BCD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:07:38 +0000 Manifest this update: Tue 02 Jun 2026 22:02:38 +0000 Manifest next update: Thu 04 Jun 2026 01:06:38 +0000 Files and hashes: 1: AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl (hash: Osng5nRL4Q2ZMydmFXIfkbPWjmmWCRO+KluB2sWFTnA=) 2: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: 8mWztPKHecvNCBMMV0cUZVPOGf2iWRWZndzDVuRiFm4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 01:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:43:2f:0d:3d:7c:d6:a4:f8:f5:71:79:75:92:6a:1d:10:ed:5b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB5F90552B80CDC2416592E5FDA773F5D66F53BE Validity Not Before: Jun 2 22:02:38 2026 GMT Not After : Jun 4 01:06:38 2026 GMT Subject: CN=FD454CBC39C04864AD263839DDF77A53799A74D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:f7:2b:e4:a2:de:d6:27:13:d7:ae:bf:93: 00:1d:d4:a4:2c:96:bb:cf:ff:60:78:c1:e7:fa:ba: b9:51:4e:8a:a0:c1:64:ad:94:b1:89:30:bd:31:a5: d2:98:6e:79:b8:a9:ad:2c:50:e7:65:da:b8:ad:e7: 30:9d:0b:fd:7a:c0:1c:24:b1:00:57:e0:e6:75:0f: 79:9f:ee:36:ae:e8:68:c6:d2:ed:e4:f0:e5:37:df: 55:99:9e:5c:15:76:3f:cd:11:24:2d:02:1b:6c:af: 63:ce:32:0d:dd:a9:5a:2c:3f:4b:fb:f9:53:46:65: 84:14:7a:9f:24:d7:b1:50:53:d9:81:6a:fa:7d:df: e6:77:bf:36:ec:d1:42:3b:95:8e:87:51:4b:07:7d: f9:09:b9:30:05:97:5f:70:a9:69:39:6f:a5:17:e2: 21:d6:13:b5:4d:7c:51:a7:c1:1b:c1:5c:b0:4f:e1: 52:65:4e:a4:d2:28:50:85:a6:68:29:a5:42:e5:28: 8c:95:7b:59:c9:db:8e:f8:e1:41:93:6f:a7:28:0e: 4c:64:4e:45:3f:35:d2:f8:c9:03:dc:fe:81:f5:1b: ca:89:bb:0b:93:c5:f0:7f:f9:e6:b7:8b:dd:12:ce: ab:63:f0:30:4d:f2:4d:c2:41:3d:eb:26:b4:41:ea: 7d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:45:4C:BC:39:C0:48:64:AD:26:38:39:DD:F7:7A:53:79:9A:74:D1 X509v3 Authority Key Identifier: keyid:AB:5F:90:55:2B:80:CD:C2:41:65:92:E5:FD:A7:73:F5:D6:6F:53:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ad:3f:cc:bd:2d:b8:9e:ef:f0:68:b7:fa:60:d5:d1:36:cc: c7:e3:37:f4:cf:bc:95:86:7c:d4:f8:41:d6:e4:b3:a8:e4:85: d7:7a:60:e9:3e:de:b7:2c:12:28:2f:49:52:03:50:21:49:9a: 23:ee:11:0b:22:f6:5a:92:a0:0b:63:d0:bb:d9:25:a7:05:29: 18:af:6c:d5:1e:fd:75:91:e8:85:15:ea:10:ef:38:c2:61:8e: 7a:2e:7c:40:87:27:de:93:1f:09:3f:90:4e:9d:a7:6f:58:9a: 92:58:bc:3e:36:7c:95:c6:d8:ae:f7:f2:43:35:ba:f6:27:59: a6:5f:13:8e:cd:f0:ac:29:6b:4a:64:2d:c5:a4:a3:44:dc:10: 35:76:4c:62:e3:dd:c3:ce:21:f2:16:ee:b6:79:82:43:5a:83: 06:75:3e:b3:6a:a1:03:50:2b:95:3c:68:36:9a:dd:16:a6:6d: dd:08:28:a4:c4:f0:89:a0:92:05:02:b6:4e:21:37:bc:8d:aa: 7d:a1:7d:14:5e:f2:8e:98:b0:3b:42:30:33:3c:91:45:91:a8: 75:71:68:f5:06:5f:fb:72:5f:ef:3f:95:b5:d7:7e:71:38:55: ca:e9:00:cd:5c:08:d9:ca:8f:5b:ac:ad:17:23:07:e0:24:2b: 71:0a:2c:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT0MvDT181qT49XF5dZJqHRDtW80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1RjkwNTUyQjgwQ0RDMjQxNjU5MkU1RkRBNzczRjVE NjZGNTNCRTAeFw0yNjA2MDIyMjAyMzhaFw0yNjA2MDQwMTA2MzhaMDMxMTAvBgNV BAMTKEZENDU0Q0JDMzlDMDQ4NjRBRDI2MzgzOURERjc3QTUzNzk5QTc0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNV/cr5KLe1icT166/kwAd1KQs lrvP/2B4wef6urlRToqgwWStlLGJML0xpdKYbnm4qa0sUOdl2rit5zCdC/16wBwk sQBX4OZ1D3mf7jau6GjG0u3k8OU331WZnlwVdj/NESQtAhtsr2POMg3dqVosP0v7 +VNGZYQUep8k17FQU9mBavp93+Z3vzbs0UI7lY6HUUsHffkJuTAFl19wqWk5b6UX 4iHWE7VNfFGnwRvBXLBP4VJlTqTSKFCFpmgppULlKIyVe1nJ24744UGTb6coDkxk TkU/NdL4yQPc/oH1G8qJuwuTxfB/+ea3i90Szqtj8DBN8k3CQT3rJrRB6n3pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/UVMvDnASGStJjg53fd6U3madNEwHwYDVR0j BBgwFoAUq1+QVSuAzcJBZZLl/adz9dZvU74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQ4YjY1ODMtNDEyMi00NjlkLTgzODQtM2FmMWJjYzY2MDdmLzAvQUI1RjkwNTUy QjgwQ0RDMjQxNjU5MkU1RkRBNzczRjVENjZGNTNCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjVGOTA1NTJCODBDREMyNDE2NTkyRTVGREE3NzNGNUQ2NkY1 M0JFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvQUI1RjkwNTUyQjgwQ0RDMjQxNjU5MkU1RkRBNzcz RjVENjZGNTNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6tP8y9Lbie7/Bot/pg1dE2zMfjN/TPvJWG fNT4Qdbks6jkhdd6YOk+3rcsEigvSVIDUCFJmiPuEQsi9lqSoAtj0LvZJacFKRiv bNUe/XWR6IUV6hDvOMJhjnoufECHJ96THwk/kE6dp29YmpJYvD42fJXG2K738kM1 uvYnWaZfE47N8Kwpa0pkLcWko0TcEDV2TGLj3cPOIfIW7rZ5gkNagwZ1PrNqoQNQ K5U8aDaa3Rambd0IKKTE8ImgkgUCtk4hN7yNqn2hfRRe8o6YsDtCMDM8kUWRqHVx aPUGX/tyX+8/lbXXfnE4VcrpAM1cCNnKj1usrRcjB+AkK3EKLFs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:37:29 2026 by rpki-client