$ rpki-client -vvf rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft File: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft (raw, json) Hash identifier: b9OdzinRHStR5eotjuHjBMWBOLFR4IBTsASLOhu1BmA= Subject key identifier: 5F:23:4B:70:4D:47:4D:74:D2:1E:05:4E:29:7A:DC:82:BD:E6:59:9D Authority key identifier: AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 Certificate issuer: /CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Certificate serial: 4231F8290865FFD663A8655A7697BC647DCC862C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:06:23 +0000 Manifest this update: Fri 19 Jun 2026 17:01:23 +0000 Manifest next update: Sat 20 Jun 2026 17:37:23 +0000 Files and hashes: 1: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: Y3QjCeZ1GQuw+Af/4ElzHz4uj30AWOknv+PuSj10pQI=) 2: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl (hash: VO5fT70ANrmSuIvJEB0txNf8wcncUvdAw0iVLi3/Bto=) 3: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: uDv+UYL75QoUmpMlaL+3dQMgpVoz8iM4bxe1Z2EgXa4=) 4: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: GRM6rus6lwETinGsMNAHhMdqqrq7IGt093Aq5KEiOyM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:31:f8:29:08:65:ff:d6:63:a8:65:5a:76:97:bc:64:7d:cc:86:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Validity Not Before: Jun 19 17:01:23 2026 GMT Not After : Jun 20 17:37:23 2026 GMT Subject: CN=5F234B704D474D74D21E054E297ADC82BDE6599D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:b3:17:79:c8:9a:b5:9b:37:9c:32:33:b8: 86:40:26:1d:19:db:40:24:f4:2d:3d:fd:75:01:89: ca:67:61:33:b5:74:42:b4:f6:36:91:3c:62:8f:2d: 19:fe:7d:4d:4c:9e:8e:a5:d7:27:da:17:26:41:b0: f6:b3:9a:6e:00:f7:b2:45:5d:7b:41:29:d5:ed:43: f8:4b:46:96:eb:50:79:73:0d:18:b4:67:c3:f5:e8: 79:83:a9:84:47:da:87:ef:3d:25:aa:f3:8e:2d:52: d1:7d:f9:36:34:42:ce:d4:6c:05:14:9a:58:07:3b: c6:c6:62:78:81:61:70:29:b3:73:f3:21:39:71:22: 2c:c4:c3:74:cb:f7:70:95:52:95:f7:26:69:1b:a5: d9:f0:d2:70:a5:a9:17:15:14:60:48:6b:0d:86:6f: 06:d9:b0:f6:4d:49:35:80:21:d2:05:95:3b:df:14: 93:1e:3d:58:0b:1c:0a:3b:06:c9:a8:c7:91:c3:76: ad:99:b4:a5:98:46:4b:4f:07:ca:3b:35:ac:69:f3: d4:78:8d:4f:f1:24:aa:c6:91:e1:f4:45:49:df:63: 90:57:c8:3f:c1:17:fc:65:7b:4f:ae:a7:df:2c:db: f5:32:ac:63:3d:0f:86:f0:8c:57:21:f4:2e:47:18: 39:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:23:4B:70:4D:47:4D:74:D2:1E:05:4E:29:7A:DC:82:BD:E6:59:9D X509v3 Authority Key Identifier: keyid:AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f4:05:3f:db:09:c4:c0:af:dc:5e:37:fb:fc:b9:ae:32:39: ab:fe:89:29:41:b1:d3:6c:51:0a:93:5c:b4:07:a9:a4:4d:82: 6e:47:cc:fb:9d:d7:4d:cf:31:e6:5f:b2:9b:54:6c:d8:3b:31: d8:bb:bc:71:c3:c4:41:cd:a3:df:20:8f:f4:b5:48:33:00:3d: a6:45:4a:ed:42:4d:d2:ff:1f:34:1c:80:a6:3a:8b:8e:3d:1d: 41:b6:ac:1e:2f:1f:6b:86:3a:2c:eb:31:78:ef:ba:77:bc:2e: d8:25:d3:47:0a:55:71:3f:9b:70:98:91:d0:7e:29:61:2b:a3: 23:b9:09:29:f0:8a:9f:3b:71:09:1b:f5:d5:f9:d1:27:cb:e2: 5f:9e:f8:c9:a8:ef:58:f3:18:08:ab:d2:ee:96:ef:d1:ca:5e: ba:fb:5d:f2:01:09:33:5b:33:99:a7:86:6b:a2:f0:1f:42:15: 07:7d:fc:64:39:2f:cd:7b:3d:9a:7b:df:70:a7:14:f2:94:67: 74:d8:26:fe:e9:2d:b1:f5:e9:60:91:2e:00:b7:ef:6d:dd:68: 53:97:52:c0:be:a7:9a:86:14:ea:54:c2:ff:fc:e1:b9:17:48: f7:90:2b:cf:52:6a:ed:52:c6:c5:22:c1:dd:86:65:61:21:37: c3:be:be:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQjH4KQhl/9ZjqGVadpe8ZH3MhiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0 RjRFRTBENTAeFw0yNjA2MTkxNzAxMjNaFw0yNjA2MjAxNzM3MjNaMDMxMTAvBgNV BAMTKDVGMjM0QjcwNEQ0NzRENzREMjFFMDU0RTI5N0FEQzgyQkRFNjU5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbWbMXeciatZs3nDIzuIZAJh0Z 20Ak9C09/XUBicpnYTO1dEK09jaRPGKPLRn+fU1Mno6l1yfaFyZBsPazmm4A97JF XXtBKdXtQ/hLRpbrUHlzDRi0Z8P16HmDqYRH2ofvPSWq844tUtF9+TY0Qs7UbAUU mlgHO8bGYniBYXAps3PzITlxIizEw3TL93CVUpX3Jmkbpdnw0nClqRcVFGBIaw2G bwbZsPZNSTWAIdIFlTvfFJMePVgLHAo7Bsmox5HDdq2ZtKWYRktPB8o7Naxp89R4 jU/xJKrGkeH0RUnfY5BXyD/BF/xle0+up98s2/UyrGM9D4bwjFch9C5HGDlfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXyNLcE1HTXTSHgVOKXrcgr3mWZ0wHwYDVR0j BBgwFoAUq1D9vwOEbjPS+MUYfeqfXk9O4NUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc1OTQ3NmUtNmFkYi00ZjJlLWJlNzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYw Mzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0RjRFRTBENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjUwRkRCRjAzODQ2RTMzRDJGOEM1MTg3REVBOUY1RTRGNEVF MEQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlG NUU0RjRFRTBENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIn0BT/bCcTAr9xeN/v8ua4yOav+iSlBsdNs UQqTXLQHqaRNgm5HzPud103PMeZfsptUbNg7Mdi7vHHDxEHNo98gj/S1SDMAPaZF Su1CTdL/HzQcgKY6i449HUG2rB4vH2uGOizrMXjvune8Ltgl00cKVXE/m3CYkdB+ KWEroyO5CSnwip87cQkb9dX50SfL4l+e+Mmo71jzGAir0u6W79HKXrr7XfIBCTNb M5mnhmui8B9CFQd9/GQ5L817PZp733CnFPKUZ3TYJv7pLbH16WCRLgC3723daFOX UsC+p5qGFOpUwv/84bkXSPeQK89Sau1SxsUiwd2GZWEhN8O+vnA= -----END CERTIFICATE-----Generated at Sat Jun 20 11:33:11 2026 by rpki-client