$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft File: 5ABFE157E467A6732384B658909A9764D5D88AEC.mft (raw, json) Hash identifier: V4G5NXUNr97sIblnQzg+uxsSEAQ6Y+IytdjEZMm5gWY= Subject key identifier: D7:ED:17:77:2F:53:A1:15:C2:A7:F1:3A:56:09:D2:E7:A3:42:B6:FC Authority key identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC Certificate issuer: /CN=5ABFE157E467A6732384B658909A9764D5D88AEC Certificate serial: 35CB80C91216524C57787EB1DAD54588CDD20022 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 10:21:51 +0000 Manifest this update: Sat 24 Oct 2026 10:16:51 +0000 Manifest next update: Sun 25 Oct 2026 12:58:51 +0000 Files and hashes: 1: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: s1c5Xhjj1A4MpzLQqmtjwYb0lHUpDy9QxtX6cd6J7tw=) 2: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: OYkbzaiaQarKQmGzbsa0kcIv0ahbBNrL8RA56NXr+2g=) 3: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (hash: WFBdDzYNGyGBPxFeYXB5Lb1GK9i9G1iuTrrdeZuMZkY=) 4: 5ABFE157E467A6732384B658909A9764D5D88AEC.crl (hash: gT4MzyXu+fLvCFU+C4RHgOtfABtMhcFmS/n7vqg90EQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:cb:80:c9:12:16:52:4c:57:78:7e:b1:da:d5:45:88:cd:d2:00:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABFE157E467A6732384B658909A9764D5D88AEC Validity Not Before: Oct 24 10:16:51 2026 GMT Not After : Oct 25 12:58:51 2026 GMT Subject: CN=D7ED17772F53A115C2A7F13A5609D2E7A342B6FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b8:55:ab:50:84:18:03:df:7d:f3:52:f8:6d: cb:39:c6:83:23:de:bc:c6:01:15:1c:de:38:bb:4f: 74:fb:ac:da:64:a5:0c:2e:c3:bd:83:a3:a6:98:5c: 19:c0:cf:64:77:a9:4b:45:27:73:db:95:22:d5:e0: 88:ed:6b:5a:dc:8d:f2:72:0b:e9:e5:dd:48:ca:04: c2:80:17:e5:56:a6:7a:46:a2:1f:6e:ac:37:4e:b2: b5:48:de:34:d4:6f:ec:12:4a:a3:1e:1d:3d:95:8b: 4b:1b:6d:92:14:28:ed:42:68:21:c1:64:f8:52:06: 57:ce:56:4b:2c:3c:a9:f2:38:8f:2b:2e:0e:2a:d3: 36:d1:c3:65:7d:0a:34:60:85:36:01:e2:e9:76:94: 55:37:30:28:23:66:01:2f:fd:d6:10:ed:c4:67:d4: 44:5f:0a:c0:ef:bd:5f:3e:17:3f:ab:d5:9d:22:d3: de:94:eb:e4:5b:62:0a:30:78:ad:46:68:13:82:18: f6:ce:98:0b:60:0d:67:69:51:29:d5:59:54:39:71: 93:54:51:8b:9b:69:f1:82:93:c6:77:a9:be:be:7a: 7b:56:e7:78:9b:50:24:bd:00:a8:c5:2b:bc:d6:93: 88:83:c7:32:08:de:ec:db:89:9e:32:97:dd:bf:b0: 9b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:ED:17:77:2F:53:A1:15:C2:A7:F1:3A:56:09:D2:E7:A3:42:B6:FC X509v3 Authority Key Identifier: keyid:5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:26:fc:5c:05:cd:64:57:e2:f6:b4:ff:d8:54:84:28:d2:2c: c3:13:f5:b2:01:76:cf:4d:f0:45:fa:14:b5:8c:2c:46:b9:40: fb:ab:e6:f9:99:d1:be:e1:0d:90:f2:71:1f:ff:c4:f0:e7:c9: 29:30:40:66:d0:ae:8b:71:0c:09:76:93:d2:ed:cc:5a:0f:9c: 18:bf:5b:8d:c5:8e:d1:dd:73:b1:00:5d:c6:e3:ad:7d:e2:83: 57:fa:69:0f:1f:96:d8:74:16:43:2b:d8:80:67:9e:6a:ec:ea: 28:53:c7:24:18:9c:25:b0:fe:a5:e4:c5:8f:f1:90:c7:8c:c3: 16:f1:0b:fa:ad:d3:27:2d:96:8e:f6:03:cd:f9:f7:8e:6c:23: 29:6a:26:6c:90:b5:44:3c:74:10:26:c1:d4:de:08:56:16:bc: 6e:9e:cc:ba:15:0d:cd:04:c7:0e:64:aa:6e:63:cc:47:fb:06: 38:c4:2b:13:cd:bf:76:aa:cf:b0:e6:43:7f:92:87:34:db:15: 0b:e7:fd:b1:15:a7:d7:78:21:06:c4:96:6a:6c:ed:11:71:4c: 3f:bd:f1:c0:66:10:da:5a:0f:b0:33:fd:49:21:bc:6c:68:f4: be:c9:ff:25:f4:47:96:15:d7:93:bf:04:a1:c7:d9:8b:b9:54: 32:6e:50:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcuAyRIWUkxXeH6x2tVFiM3SACIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3NjRE NUQ4OEFFQzAeFw0yNjEwMjQxMDE2NTFaFw0yNjEwMjUxMjU4NTFaMDMxMTAvBgNV BAMTKEQ3RUQxNzc3MkY1M0ExMTVDMkE3RjEzQTU2MDlEMkU3QTM0MkI2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVuFWrUIQYA99981L4bcs5xoMj 3rzGARUc3ji7T3T7rNpkpQwuw72Do6aYXBnAz2R3qUtFJ3PblSLV4Ijta1rcjfJy C+nl3UjKBMKAF+VWpnpGoh9urDdOsrVI3jTUb+wSSqMeHT2Vi0sbbZIUKO1CaCHB ZPhSBlfOVkssPKnyOI8rLg4q0zbRw2V9CjRghTYB4ul2lFU3MCgjZgEv/dYQ7cRn 1ERfCsDvvV8+Fz+r1Z0i096U6+RbYgoweK1GaBOCGPbOmAtgDWdpUSnVWVQ5cZNU UYubafGCk8Z3qb6+entW53ibUCS9AKjFK7zWk4iDxzII3uzbiZ4yl92/sJvJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1+0Xdy9ToRXCp/E6VgnS56NCtvwwHwYDVR0j BBgwFoAUWr/hV+RnpnMjhLZYkJqXZNXYiuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJkMzA1ODctYTdjYS00MTk1LWEzNTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdF NDY3QTY3MzIzODRCNjU4OTA5QTk3NjRENUQ4OEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUJGRTE1N0U0NjdBNjczMjM4NEI2NTg5MDlBOTc2NEQ1RDg4 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3 NjRENUQ4OEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOAm/FwFzWRX4va0/9hUhCjSLMMT9bIBds9N 8EX6FLWMLEa5QPur5vmZ0b7hDZDycR//xPDnySkwQGbQrotxDAl2k9LtzFoPnBi/ W43FjtHdc7EAXcbjrX3ig1f6aQ8flth0FkMr2IBnnmrs6ihTxyQYnCWw/qXkxY/x kMeMwxbxC/qt0yctlo72A835945sIylqJmyQtUQ8dBAmwdTeCFYWvG6ezLoVDc0E xw5kqm5jzEf7BjjEKxPNv3aqz7DmQ3+ShzTbFQvn/bEVp9d4IQbElmps7RFxTD+9 8cBmENpaD7Az/UkhvGxo9L7J/yX0R5YV15O/BKHH2Yu5VDJuUKw= -----END CERTIFICATE-----Generated at Sat Oct 24 20:40:59 2026 by rpki-client