$ rpki-client -vvvf rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft File: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft (raw, json) Hash identifier: o6GSTlBCiICbubEH1gu5gUsha/Xzj0iy38vd2yjAcbA= Subject key identifier: 13:AE:CE:1E:93:C0:53:21:61:67:B5:77:EA:FF:60:F4:F8:D2:CB:50 Authority key identifier: AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD Certificate issuer: /CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD Certificate serial: 2865941D8EE2048F9668A68612FF9D155087A71F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft Manifest number: F0 Signing time: Sun 25 Oct 2026 00:29:47 +0000 Manifest this update: Sun 25 Oct 2026 00:24:47 +0000 Manifest next update: Mon 26 Oct 2026 02:37:47 +0000 Files and hashes: 1: 323430353a363634303a3a2f33322d3332203d3e20313336383639.roa (hash: Qac1NFCuO071cWw4+WZWjSfpfRZO6+EbQ4cltXf7Eyg=) 2: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl (hash: jtpQxEJfN1vHtCUJgwQMTm/fjt0cU0ektA9S415UCa8=) 3: 3130332e3134342e34372e302f32342d3234203d3e20313336383639.roa (hash: eg4bFeWBrQDZeMRitgO5gDDB0d8fLsyuSG/QjoIUue0=) 4: 3130332e3134342e34362e302f32342d3234203d3e20313336383639.roa (hash: UDkw6+1RHqC4QI6h7NIHwQsqlTsTu7LTvzhNkRqLlyA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 02:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:65:94:1d:8e:e2:04:8f:96:68:a6:86:12:ff:9d:15:50:87:a7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD Validity Not Before: Oct 25 00:24:47 2026 GMT Not After : Oct 26 02:37:47 2026 GMT Subject: CN=13AECE1E93C053216167B577EAFF60F4F8D2CB50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:80:c6:0e:fb:24:2c:0e:dc:33:6b:90:74:38: 9c:0e:4d:31:97:aa:70:56:eb:c4:78:da:d2:60:ea: 02:8f:25:98:61:83:94:58:e5:39:f1:1a:3e:68:95: 39:f8:30:48:93:1f:e5:b8:23:dd:79:1b:3e:9c:8c: 4e:68:ec:97:dd:9b:cc:7a:4d:4f:5d:2b:9d:76:9c: 2d:54:c3:fd:ef:68:92:85:79:b0:68:af:5c:b0:8c: 7b:01:09:ec:74:d7:db:34:c0:aa:ec:ae:ba:46:7b: 36:2e:11:3b:24:fa:bb:18:12:27:ba:8a:60:a5:0d: 83:ab:9c:bc:9e:12:4a:b1:10:c6:b6:84:64:02:d5: 27:cc:e9:c6:c3:e4:78:54:27:1f:b2:e1:40:f8:8a: 80:5e:ef:03:15:b9:cb:a5:73:29:56:6c:8d:48:06: e1:cb:91:b1:ee:a6:f3:05:81:d8:43:f5:5f:3b:b4: d8:de:a6:64:e6:2b:96:b3:2d:a1:b7:62:cd:9e:48: e4:e8:09:8f:e6:4d:b3:d7:4a:17:f7:ca:3f:59:58: 34:89:f4:ce:48:2f:7b:e2:46:d6:14:4f:ed:62:61: 86:a6:f8:09:ff:f2:32:96:51:7a:94:03:04:2c:e1: f9:9b:02:86:26:e6:f8:14:e7:5d:1e:97:d7:69:cf: 06:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AE:CE:1E:93:C0:53:21:61:67:B5:77:EA:FF:60:F4:F8:D2:CB:50 X509v3 Authority Key Identifier: keyid:AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:5e:11:3a:6e:8c:9d:9b:7c:fd:89:4b:09:cc:af:3d:97:e2: f1:bc:29:81:ce:04:01:4c:21:64:42:79:21:39:16:23:17:f6: 34:e0:e5:a3:70:ba:9c:a1:d2:00:db:a3:12:b3:34:76:7d:63: 34:48:1b:b8:d8:97:43:ad:f5:c2:22:67:64:6b:26:91:54:2c: 58:02:30:03:36:93:59:a3:82:3f:08:4f:78:04:91:36:a9:75: 27:9f:6a:81:17:34:5d:8a:d3:4a:03:5c:d6:60:06:ba:0a:42: 3f:c0:17:31:ff:a4:1e:75:39:ae:ec:95:52:52:8f:e0:97:2d: b0:a7:1b:01:ea:e3:d6:b1:f7:6e:e4:c9:73:df:10:7e:ea:9b: 11:28:dc:b6:88:92:8e:69:c1:3e:ba:c7:eb:63:90:d7:8d:96: 6f:2e:16:7c:1a:6f:78:fc:92:bb:63:ce:ea:f4:2d:d7:4f:ef: 7f:d6:15:dd:72:31:25:7a:de:83:d6:d5:35:f0:d5:d9:14:e6: e3:17:83:c5:97:d6:ca:64:f2:e7:a4:77:d3:d2:4f:56:6e:af: f7:49:4b:6a:c8:4d:6f:46:6e:f2:2d:40:0c:68:de:55:0c:d7: 59:86:30:5b:3f:e8:f3:bf:43:22:e4:ee:82:d0:0b:fd:c9:87: ed:3d:a7:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKGWUHY7iBI+WaKaGEv+dFVCHpx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1NzExNDg2MDIzRjhGMERCRkVEMzhCQzdGRDdCQzkx NzM1RkZDRDAeFw0yNjEwMjUwMDI0NDdaFw0yNjEwMjYwMjM3NDdaMDMxMTAvBgNV BAMTKDEzQUVDRTFFOTNDMDUzMjE2MTY3QjU3N0VBRkY2MEY0RjhEMkNCNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcgMYO+yQsDtwza5B0OJwOTTGX qnBW68R42tJg6gKPJZhhg5RY5TnxGj5olTn4MEiTH+W4I915Gz6cjE5o7Jfdm8x6 TU9dK512nC1Uw/3vaJKFebBor1ywjHsBCex019s0wKrsrrpGezYuETsk+rsYEie6 imClDYOrnLyeEkqxEMa2hGQC1SfM6cbD5HhUJx+y4UD4ioBe7wMVuculcylWbI1I BuHLkbHupvMFgdhD9V87tNjepmTmK5azLaG3Ys2eSOToCY/mTbPXShf3yj9ZWDSJ 9M5IL3viRtYUT+1iYYam+An/8jKWUXqUAwQs4fmbAoYm5vgU510el9dpzwaLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE67OHpPAUyFhZ7V36v9g9PjSy1AwHwYDVR0j BBgwFoAUq1cRSGAj+PDb/tOLx/17yRc1/80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRhZWM2NmMtOWUxZC00MzIxLWIwNjktZWVhYjQ3OTNhMDBiLzAvQUI1NzExNDg2 MDIzRjhGMERCRkVEMzhCQzdGRDdCQzkxNzM1RkZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjU3MTE0ODYwMjNGOEYwREJGRUQzOEJDN0ZEN0JDOTE3MzVG RkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvQUI1NzExNDg2MDIzRjhGMERCRkVEMzhCQzdGRDdC QzkxNzM1RkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZeETpujJ2bfP2JSwnMrz2X4vG8KYHOBAFM IWRCeSE5FiMX9jTg5aNwupyh0gDboxKzNHZ9YzRIG7jYl0Ot9cIiZ2RrJpFULFgC MAM2k1mjgj8IT3gEkTapdSefaoEXNF2K00oDXNZgBroKQj/AFzH/pB51Oa7slVJS j+CXLbCnGwHq49ax927kyXPfEH7qmxEo3LaIko5pwT66x+tjkNeNlm8uFnwab3j8 krtjzur0LddP73/WFd1yMSV63oPW1TXw1dkU5uMXg8WX1spk8uekd9PST1Zur/dJ S2rITW9GbvItQAxo3lUM11mGMFs/6PO/QyLk7oLQC/3Jh+09p6A= -----END CERTIFICATE-----Generated at Sun Oct 25 14:41:34 2026 by rpki-client