$ rpki-client -vvf rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft File: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft (raw, json) Hash identifier: ES8a/2iWQeTyEoa54R44qy8PDygfujrAoa+dp3E5+1w= Subject key identifier: 87:CE:1F:11:07:90:E5:25:77:E4:D8:68:C1:5D:F1:DC:FD:54:FD:2D Authority key identifier: AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 Certificate issuer: /CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Certificate serial: 51182C90E9A4597C6A74931A8BC45C005ED193BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft Manifest number: 93 Signing time: Thu 20 Aug 2026 02:46:08 +0000 Manifest this update: Thu 20 Aug 2026 02:41:08 +0000 Manifest next update: Fri 21 Aug 2026 05:47:08 +0000 Files and hashes: 1: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: uDv+UYL75QoUmpMlaL+3dQMgpVoz8iM4bxe1Z2EgXa4=) 2: AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl (hash: dX0GLBHtRMVr7/zJbjgeXIdPAvE/IRk6olhHSQenKnU=) 3: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: GRM6rus6lwETinGsMNAHhMdqqrq7IGt093Aq5KEiOyM=) 4: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: Y3QjCeZ1GQuw+Af/4ElzHz4uj30AWOknv+PuSj10pQI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 05:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:18:2c:90:e9:a4:59:7c:6a:74:93:1a:8b:c4:5c:00:5e:d1:93:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5 Validity Not Before: Aug 20 02:41:08 2026 GMT Not After : Aug 21 05:47:08 2026 GMT Subject: CN=87CE1F110790E52577E4D868C15DF1DCFD54FD2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:68:8a:76:5d:a7:85:fd:d5:ab:9c:a7:82: f7:85:4a:2c:79:66:4c:ea:e0:db:58:0e:0b:37:6c: 8f:dc:f9:12:63:ac:e5:bb:c2:56:40:15:cd:d1:3a: 23:fa:99:ff:f9:23:8f:0d:1e:04:a5:98:5a:b2:27: 3c:d1:2c:d5:af:75:cb:87:e8:f5:61:99:8f:ba:a6: 81:a2:e7:63:49:7e:bd:a4:20:e0:13:ec:ef:5f:57: 15:91:d1:7e:dd:e5:a3:4c:dd:e0:92:04:16:c1:b5: 1f:f7:39:aa:ee:8d:9f:1e:7d:65:df:35:31:ce:83: 6c:60:c2:e4:a5:73:1c:23:a2:54:c7:6c:f9:e5:99: a6:6c:4e:1d:ad:6f:7a:29:49:aa:b6:e7:9e:42:43: 85:e3:31:a1:8e:14:c5:75:c1:fa:9d:74:53:89:0f: 54:81:75:02:69:d1:c9:fc:d4:10:aa:b3:98:bc:b6: 12:91:05:25:ed:93:97:85:84:4f:ba:f5:6c:c4:ff: 88:28:fd:d1:8e:32:be:89:f6:f8:09:f5:07:e9:dd: e0:04:35:15:2c:24:7b:f5:b6:a8:9d:9b:1e:f1:ee: 00:1b:94:2c:0c:78:2d:10:95:cd:a4:ab:6a:0a:87: f3:4c:81:91:2b:eb:5a:f7:68:d3:a7:ba:c0:52:42: 7f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CE:1F:11:07:90:E5:25:77:E4:D8:68:C1:5D:F1:DC:FD:54:FD:2D X509v3 Authority Key Identifier: keyid:AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:44:a7:04:c2:98:6f:4e:2d:63:81:e8:31:b2:82:48:77:14: fb:c5:8b:03:6e:af:d8:79:e6:40:c6:97:4d:52:0a:e5:1c:be: 29:fa:3b:a2:3a:48:a1:63:5a:c6:96:d5:fc:ef:35:47:02:5a: 7c:0e:ed:8c:ca:76:7c:96:cb:14:3a:3e:a9:36:5b:e6:c9:b0: 41:83:60:53:89:39:b3:b2:9b:7a:d3:6c:d7:65:80:5a:64:3c: 3c:ba:c3:b6:1b:8f:83:80:50:0d:ff:cb:21:b2:30:0e:b4:36: 98:d3:24:93:44:25:76:aa:62:42:f0:fd:81:99:c4:b0:21:b0: 48:2c:13:a1:4f:76:3a:c4:3e:ac:c3:dd:40:4c:24:78:97:37: 00:d0:b5:e4:c4:5b:19:5f:3e:af:06:dc:ea:e8:0e:11:3c:e5: 88:85:a2:5c:5a:cc:79:cf:23:69:64:2f:2e:4e:c6:19:de:80: c3:57:ef:49:32:43:8d:0a:70:cc:8e:02:c4:6b:f7:35:02:71: 50:4f:11:fc:f1:a4:8b:6e:3b:a3:7f:80:23:6b:61:73:ab:a6: 0c:7f:06:43:1f:5a:2a:ea:2a:bc:4b:28:b5:4b:b3:3f:83:d7: 61:98:38:fc:95:c4:a8:9d:fa:30:f7:13:ac:f2:cb:8a:01:e0: 94:0a:b4:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUURgskOmkWXxqdJMai8RcAF7Rk7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0 RjRFRTBENTAeFw0yNjA4MjAwMjQxMDhaFw0yNjA4MjEwNTQ3MDhaMDMxMTAvBgNV BAMTKDg3Q0UxRjExMDc5MEU1MjU3N0U0RDg2OEMxNURGMURDRkQ1NEZEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7GiKdl2nhf3Vq5yngveFSix5 Zkzq4NtYDgs3bI/c+RJjrOW7wlZAFc3ROiP6mf/5I48NHgSlmFqyJzzRLNWvdcuH 6PVhmY+6poGi52NJfr2kIOAT7O9fVxWR0X7d5aNM3eCSBBbBtR/3OarujZ8efWXf NTHOg2xgwuSlcxwjolTHbPnlmaZsTh2tb3opSaq2555CQ4XjMaGOFMV1wfqddFOJ D1SBdQJp0cn81BCqs5i8thKRBSXtk5eFhE+69WzE/4go/dGOMr6J9vgJ9Qfp3eAE NRUsJHv1tqidmx7x7gAblCwMeC0Qlc2kq2oKh/NMgZEr61r3aNOnusBSQn8ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh84fEQeQ5SV35NhowV3x3P1U/S0wHwYDVR0j BBgwFoAUq1D9vwOEbjPS+MUYfeqfXk9O4NUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc1OTQ3NmUtNmFkYi00ZjJlLWJlNzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYw Mzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0RjRFRTBENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjUwRkRCRjAzODQ2RTMzRDJGOEM1MTg3REVBOUY1RTRGNEVF MEQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlG NUU0RjRFRTBENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFEpwTCmG9OLWOB6DGygkh3FPvFiwNur9h5 5kDGl01SCuUcvin6O6I6SKFjWsaW1fzvNUcCWnwO7YzKdnyWyxQ6Pqk2W+bJsEGD YFOJObOym3rTbNdlgFpkPDy6w7Ybj4OAUA3/yyGyMA60NpjTJJNEJXaqYkLw/YGZ xLAhsEgsE6FPdjrEPqzD3UBMJHiXNwDQteTEWxlfPq8G3OroDhE85YiFolxazHnP I2lkLy5OxhnegMNX70kyQ40KcMyOAsRr9zUCcVBPEfzxpItuO6N/gCNrYXOrpgx/ BkMfWirqKrxLKLVLsz+D12GYOPyVxKid+jD3E6zyy4oB4JQKtIg= -----END CERTIFICATE-----Generated at Thu Aug 20 07:04:53 2026 by rpki-client