$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft File: ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft (raw, json) Hash identifier: yFU7Gh9+/VPD4sMViM+owz5jSjJh62jCjz30jpYS5RY= Subject key identifier: F9:64:D6:B6:47:60:40:D5:99:A3:72:B0:E6:BE:87:B0:3A:11:44:D7 Authority key identifier: AB:ED:71:E9:F6:44:DC:0B:71:AF:71:A2:59:01:C0:55:1B:1F:13:4B Certificate issuer: /CN=ABED71E9F644DC0B71AF71A25901C0551B1F134B Certificate serial: 65B4CBDC4A584441D3DAF0BE61FF98147065A9A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:33:14 +0000 Manifest this update: Tue 02 Jun 2026 10:28:14 +0000 Manifest next update: Wed 03 Jun 2026 10:58:14 +0000 Files and hashes: 1: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: QTvSNhE992wCS0VNXGZ4QrTW5fEG/UCs6bm/K+0HXAk=) 2: ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl (hash: RmT5S1BYOqCwOm+gTfBPkuaLYiZPQ7IrC9ZOUVUpWOA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b4:cb:dc:4a:58:44:41:d3:da:f0:be:61:ff:98:14:70:65:a9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED71E9F644DC0B71AF71A25901C0551B1F134B Validity Not Before: Jun 2 10:28:14 2026 GMT Not After : Jun 3 10:58:14 2026 GMT Subject: CN=F964D6B6476040D599A372B0E6BE87B03A1144D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:40:86:a9:e5:d4:c5:c4:eb:19:ac:d8:d2: 4f:13:27:85:05:97:20:e6:51:21:ff:bb:5f:e4:e3: 36:a5:9e:3c:c8:76:95:50:64:aa:eb:d6:9c:43:73: 4f:8c:cd:c0:e2:23:b5:ad:fa:26:11:4d:72:cb:13: d0:ce:bd:53:1b:36:69:35:2f:f4:aa:a2:ad:f1:34: 8b:1c:d2:27:d0:9d:e9:ce:f8:36:e9:85:6e:c1:6c: 12:52:43:c1:76:fd:b3:91:27:14:aa:e0:76:86:d7: 83:e8:88:c6:41:3b:68:e2:16:92:f7:a9:df:30:b9: 27:c9:19:10:9a:32:df:b1:9a:e7:9a:81:1b:33:e8: 68:c2:72:19:f9:e9:32:00:54:ed:c7:de:8c:67:79: 6c:a1:b5:9a:86:a6:37:34:13:f3:29:e5:68:85:f6: ad:87:09:dd:c9:cd:25:93:c0:db:50:f9:ad:bd:3b: 0f:f2:81:39:59:f9:4f:e8:b4:e2:c4:8f:ec:3d:4a: 11:28:40:1b:9a:4a:5a:17:65:9e:f9:81:f8:0d:c6: 1c:c7:c2:93:db:6f:1c:bb:13:08:ef:84:c2:55:7a: e1:b0:a9:19:cd:92:70:96:e1:7e:51:40:be:36:42: 5c:81:36:24:7b:3a:9e:d7:a1:2f:d5:2a:8e:86:5b: a7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:64:D6:B6:47:60:40:D5:99:A3:72:B0:E6:BE:87:B0:3A:11:44:D7 X509v3 Authority Key Identifier: keyid:AB:ED:71:E9:F6:44:DC:0B:71:AF:71:A2:59:01:C0:55:1B:1F:13:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:99:33:a7:24:66:75:f9:1e:e3:94:df:0c:72:bc:c4:a7:ec: ea:98:e7:a8:76:17:5e:02:95:78:98:65:36:f8:6e:db:8d:8b: 37:8c:a8:30:b3:46:ae:e5:f4:be:9e:e4:f1:8e:10:d2:49:59: 01:97:c0:09:41:13:fa:b2:63:09:21:bf:da:64:ad:99:23:f3: c1:f6:05:d0:2a:8f:91:24:d9:f0:97:0b:56:a0:98:ec:d3:e0: 74:6e:34:39:c4:fc:0e:62:88:e0:8e:2c:09:e7:f6:62:5a:44: d4:7f:5e:ba:85:2c:88:52:5d:8b:fd:00:2e:4e:52:86:5c:08: 9d:8b:6b:19:0b:54:0f:a2:cc:b3:02:6b:f8:31:56:23:95:9f: af:a0:53:59:53:6a:ea:04:c8:00:34:ea:4b:9b:72:88:37:28: 55:ed:6f:1a:d5:9e:61:5d:20:c1:f6:3f:32:97:32:a7:ec:19: 7f:90:65:9b:20:01:85:11:9b:34:41:1b:bb:9f:8d:18:ae:f2: ce:7a:18:4a:c9:8e:ef:3c:f4:c8:c0:19:7f:76:6f:96:1f:ae: bf:21:78:d5:5e:f5:53:f7:d3:6d:3b:00:d4:9e:8e:52:08:08: fd:77:90:2e:68:98:d9:00:87:f7:f4:ff:89:a7:a9:ac:a1:77: c0:dd:75:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbTL3EpYREHT2vC+Yf+YFHBlqaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJFRDcxRTlGNjQ0REMwQjcxQUY3MUEyNTkwMUMwNTUx QjFGMTM0QjAeFw0yNjA2MDIxMDI4MTRaFw0yNjA2MDMxMDU4MTRaMDMxMTAvBgNV BAMTKEY5NjRENkI2NDc2MDQwRDU5OUEzNzJCMEU2QkU4N0IwM0ExMTQ0RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7ECGqeXUxcTrGazY0k8TJ4UF lyDmUSH/u1/k4zalnjzIdpVQZKrr1pxDc0+MzcDiI7Wt+iYRTXLLE9DOvVMbNmk1 L/Sqoq3xNIsc0ifQnenO+DbphW7BbBJSQ8F2/bORJxSq4HaG14PoiMZBO2jiFpL3 qd8wuSfJGRCaMt+xmueagRsz6GjCchn56TIAVO3H3oxneWyhtZqGpjc0E/Mp5WiF 9q2HCd3JzSWTwNtQ+a29Ow/ygTlZ+U/otOLEj+w9ShEoQBuaSloXZZ75gfgNxhzH wpPbbxy7EwjvhMJVeuGwqRnNknCW4X5RQL42QlyBNiR7Op7XoS/VKo6GW6djAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+WTWtkdgQNWZo3Kw5r6HsDoRRNcwHwYDVR0j BBgwFoAUq+1x6fZE3Atxr3GiWQHAVRsfE0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE5YjgyMmEtOGI5MS00OGQyLTliYzEtYWUwZDkwMGJmOWM3LzAvQUJFRDcxRTlG NjQ0REMwQjcxQUY3MUEyNTkwMUMwNTUxQjFGMTM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQkVENzFFOUY2NDREQzBCNzFBRjcxQTI1OTAxQzA1NTFCMUYx MzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvQUJFRDcxRTlGNjQ0REMwQjcxQUY3MUEyNTkwMUMw NTUxQjFGMTM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyZM6ckZnX5HuOU3wxyvMSn7OqY56h2F14C lXiYZTb4btuNizeMqDCzRq7l9L6e5PGOENJJWQGXwAlBE/qyYwkhv9pkrZkj88H2 BdAqj5Ek2fCXC1agmOzT4HRuNDnE/A5iiOCOLAnn9mJaRNR/XrqFLIhSXYv9AC5O UoZcCJ2LaxkLVA+izLMCa/gxViOVn6+gU1lTauoEyAA06kubcog3KFXtbxrVnmFd IMH2PzKXMqfsGX+QZZsgAYURmzRBG7ufjRiu8s56GErJju889MjAGX92b5Yfrr8h eNVe9VP30207ANSejlIICP13kC5omNkAh/f0/4mnqayhd8DddSA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:07:47 2026 by rpki-client