$ rpki-client -vvf rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft File: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft (raw, json) Hash identifier: fYXuyFUNN/kJ0IBwrJglFOjjHaZhyzp1/d4No2R+OfQ= Subject key identifier: 48:AA:37:70:8C:9F:A2:69:26:B5:0E:85:6E:D7:8B:9D:C1:CA:54:9B Authority key identifier: AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 Certificate issuer: /CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Certificate serial: 14948DB8B7B7D5456AFE9E0117605A03C63336B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft Manifest number: 05 Signing time: Tue 05 May 2026 09:12:03 +0000 Manifest this update: Tue 05 May 2026 09:07:03 +0000 Manifest next update: Wed 06 May 2026 11:30:03 +0000 Files and hashes: 1: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl (hash: MI//xE3URG21uz3RfVOS62ds+Leg5OPTjht1vefsK7E=) 2: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: Y3QjCeZ1GQuw+Af/4ElzHz4uj30AWOknv+PuSj10pQI=) 3: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: uDv+UYL75QoUmpMlaL+3dQMgpVoz8iM4bxe1Z2EgXa4=) 4: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: GRM6rus6lwETinGsMNAHhMdqqrq7IGt093Aq5KEiOyM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:94:8d:b8:b7:b7:d5:45:6a:fe:9e:01:17:60:5a:03:c6:33:36:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Validity Not Before: May 5 09:07:03 2026 GMT Not After : May 6 11:30:03 2026 GMT Subject: CN=48AA37708C9FA26926B50E856ED78B9DC1CA549B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:df:58:09:c8:6e:48:b0:36:12:da:aa:0a: 81:b3:84:c8:33:5d:8e:3a:40:b8:8f:dc:d1:8f:b0: 6e:ab:ba:f9:1f:83:49:cd:e0:a8:18:74:74:d9:bc: ba:46:bc:2d:a3:49:16:d8:c8:e8:b3:4c:59:6e:85: a3:96:1d:c7:b6:58:b4:a7:58:c5:44:cd:68:35:61: 2d:9c:0f:d7:79:9a:67:7d:ed:09:11:c4:90:09:78: 92:3e:b6:08:27:2d:ad:76:4f:37:19:b4:9a:a0:83: 2d:63:b9:aa:ca:6e:de:58:a0:89:26:35:02:a0:ff: 31:dd:50:82:01:bd:85:aa:7d:84:3f:e3:ee:7e:2c: 14:39:d1:d5:08:3b:05:df:26:76:16:de:77:46:c5: f7:3e:7f:35:4e:eb:73:db:85:9f:07:86:20:7c:dc: d6:9e:1b:b9:da:d4:37:aa:0c:06:e3:0b:5a:df:ec: 12:26:7b:6d:f1:fe:4a:85:53:95:89:cc:45:86:6b: 05:a6:b6:26:ae:37:2f:07:2f:b0:a3:a5:c9:c7:8e: eb:ff:ca:4e:71:82:03:21:f7:cb:ec:6b:f1:a2:f5: 84:79:4d:e2:d2:41:9c:a1:47:c9:44:a7:73:c0:e4: f2:c3:e4:7c:56:80:a5:d1:b7:32:9b:09:5e:8b:61: 1e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AA:37:70:8C:9F:A2:69:26:B5:0E:85:6E:D7:8B:9D:C1:CA:54:9B X509v3 Authority Key Identifier: keyid:AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:67:fc:fb:1a:e4:cf:95:41:0a:c2:bd:9e:a8:ef:5f:fb:a9: 91:cf:64:bc:f9:9d:fc:9d:e2:df:ed:92:5c:ea:81:84:31:40: 66:37:f3:9c:ab:44:98:21:8f:67:73:0b:54:9a:db:96:b3:3d: 57:aa:7a:ec:8b:ba:63:42:4f:4e:08:5d:91:65:c7:43:33:85: a5:f0:b7:37:7e:f5:42:0c:4b:44:16:10:5b:7d:be:6a:b9:3e: 95:7e:9a:a1:36:3b:f4:17:ba:92:3b:dd:b4:39:d5:51:97:6f: ab:60:70:c2:0c:13:59:49:f2:0b:38:30:b4:e0:2c:ad:27:db: 07:3d:10:cb:c5:8d:d3:ef:c9:3f:a6:82:82:55:69:c9:9c:01: 28:3e:a4:03:43:1a:e1:ca:f6:d9:85:ec:da:68:94:12:e5:aa: 19:b3:c0:51:d8:a2:8c:d2:b2:a2:52:21:a7:d5:15:52:04:03: 1c:9a:47:34:83:89:23:8a:fd:5d:3f:cc:fc:3b:c3:8f:2a:2b: 34:72:f4:cf:c9:9c:a2:8d:9f:93:dd:8b:6f:66:0f:0e:01:fc: c6:77:e5:e6:c2:1e:78:70:26:c1:4b:13:08:d7:d6:01:09:93: 16:d7:52:0c:60:97:27:62:f4:80:df:90:a0:91:f1:3b:9b:8f: 4e:b2:4b:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJSNuLe31UVq/p4BF2BaA8YzNrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0 RjRFRTBENTAeFw0yNjA1MDUwOTA3MDNaFw0yNjA1MDYxMTMwMDNaMDMxMTAvBgNV BAMTKDQ4QUEzNzcwOEM5RkEyNjkyNkI1MEU4NTZFRDc4QjlEQzFDQTU0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ud9YCchuSLA2EtqqCoGzhMgz XY46QLiP3NGPsG6ruvkfg0nN4KgYdHTZvLpGvC2jSRbYyOizTFluhaOWHce2WLSn WMVEzWg1YS2cD9d5mmd97QkRxJAJeJI+tggnLa12TzcZtJqggy1juarKbt5YoIkm NQKg/zHdUIIBvYWqfYQ/4+5+LBQ50dUIOwXfJnYW3ndGxfc+fzVO63PbhZ8HhiB8 3NaeG7na1DeqDAbjC1rf7BIme23x/kqFU5WJzEWGawWmtiauNy8HL7CjpcnHjuv/ yk5xggMh98vsa/Gi9YR5TeLSQZyhR8lEp3PA5PLD5HxWgKXRtzKbCV6LYR5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSKo3cIyfomkmtQ6FbteLncHKVJswHwYDVR0j BBgwFoAUq1D9vwOEbjPS+MUYfeqfXk9O4NUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc1OTQ3NmUtNmFkYi00ZjJlLWJlNzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYw Mzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0RjRFRTBENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjUwRkRCRjAzODQ2RTMzRDJGOEM1MTg3REVBOUY1RTRGNEVF MEQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlG NUU0RjRFRTBENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtn/Psa5M+VQQrCvZ6o71/7qZHPZLz5nfyd 4t/tklzqgYQxQGY385yrRJghj2dzC1Sa25azPVeqeuyLumNCT04IXZFlx0MzhaXw tzd+9UIMS0QWEFt9vmq5PpV+mqE2O/QXupI73bQ51VGXb6tgcMIME1lJ8gs4MLTg LK0n2wc9EMvFjdPvyT+mgoJVacmcASg+pANDGuHK9tmF7NpolBLlqhmzwFHYoozS sqJSIafVFVIEAxyaRzSDiSOK/V0/zPw7w48qKzRy9M/JnKKNn5Pdi29mDw4B/MZ3 5ebCHnhwJsFLEwjX1gEJkxbXUgxglydi9IDfkKCR8Tubj06yS48= -----END CERTIFICATE-----Generated at Tue May 5 14:17:40 2026 by rpki-client