
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
File: AAB4671D9735066964F008C9DDFC52C3A710E040.mft (raw, json)
Hash identifier: gkDsQSRHYvahfTMnhOqi51pAnO+Yhpl16iTzR3Uasdc=
Subject key identifier: F1:21:1E:BD:C9:E1:E7:F5:73:97:C8:D1:5F:9A:F0:41:59:18:73:2B
Authority key identifier: AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40
Certificate issuer: /CN=AAB4671D9735066964F008C9DDFC52C3A710E040
Certificate serial: 2002814BC6A399B45FC36BD236C4D98C0B75A495
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
Manifest number: F6
Signing time: Wed 04 Nov 2026 02:36:19 +0000
Manifest this update: Wed 04 Nov 2026 02:31:19 +0000
Manifest next update: Thu 05 Nov 2026 03:18:19 +0000
Files and hashes: 1: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: unzh605AgxMrS8kL6fN+yePqm6X/AD3ox4pCc7I8/VY=)
2: AAB4671D9735066964F008C9DDFC52C3A710E040.crl (hash: s17g7d+4bMsb/p3Ln4WQFBspZcQlOp/iUYCurzRqnaI=)
3: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: aJngYofxYM8aRo7ASuGSX++bpTmrKYXt3y7dtT5WC2Y=)
4: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: WYe5M8+W5wSg2Rfo76ZEu34y6MT+kHyqh2vkljV+QtU=)
5: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: B0g8+pDAE4Q/0GBSFMta6Y5XLkcrXAH8CA4qOj5PkCE=)
6: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: NXMKeEFbtGD5jl2gs5Op2j9jmwYVlgv0YYaBKtfr4gA=)
7: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 42yHJRCL2UkIYvPUKITyhrxYXg51+0nJdl91wdx0sEk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl
rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 03:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:02:81:4b:c6:a3:99:b4:5f:c3:6b:d2:36:c4:d9:8c:0b:75:a4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAB4671D9735066964F008C9DDFC52C3A710E040
Validity
Not Before: Nov 4 02:31:19 2026 GMT
Not After : Nov 5 03:18:19 2026 GMT
Subject: CN=F1211EBDC9E1E7F57397C8D15F9AF0415918732B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:e3:76:a1:c9:58:bf:8c:c9:4b:d4:ec:50:
b2:b8:a7:da:c6:fa:0c:80:71:ea:99:8d:fc:44:aa:
57:b6:a5:47:b5:4f:6d:6d:07:5f:ac:22:3f:a8:40:
d0:0a:86:28:73:5b:f5:23:e5:4e:f7:37:8f:bc:11:
db:75:b7:21:22:3c:37:aa:6e:22:5e:9d:4f:28:76:
2b:da:41:f9:66:cd:7f:76:1a:a8:73:6c:ab:74:59:
2f:91:4e:49:31:00:5e:07:64:10:b1:f3:ce:7e:6e:
e2:aa:bd:93:74:50:67:ff:ad:78:89:f1:91:37:a6:
9c:2a:cb:66:c1:5c:ab:f4:d8:6c:71:6e:cd:6f:71:
64:13:21:ca:41:80:ba:60:c1:4f:b9:8a:a0:71:1b:
09:09:4b:51:02:c6:11:2b:02:81:4b:fa:a6:20:93:
00:3d:29:df:98:13:37:4e:b8:72:61:6a:04:a0:37:
7e:b2:89:2f:38:30:80:bd:6d:57:68:55:f5:85:34:
42:b9:00:d8:b2:cf:0f:f3:8d:51:e2:fa:49:08:dd:
b1:c0:ce:b3:86:a4:66:6f:a2:ba:08:31:15:c8:1e:
18:dc:a1:b0:98:84:2c:6b:d4:e0:09:df:04:d1:23:
65:d2:b9:52:ea:bb:1c:a6:0e:96:6b:69:66:2d:08:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:21:1E:BD:C9:E1:E7:F5:73:97:C8:D1:5F:9A:F0:41:59:18:73:2B
X509v3 Authority Key Identifier:
keyid:AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b6:3e:b7:db:9a:c4:13:02:6e:3b:e2:8c:4f:f8:9c:9f:ac:
af:ad:a3:ca:a6:b5:9b:db:ed:48:f3:c5:6e:26:b2:44:b2:d1:
f1:2e:9f:e5:0e:2e:1a:b8:9c:66:33:78:ba:e1:98:ec:7e:6b:
c7:e7:1d:33:16:fd:b4:d5:ff:5b:42:a6:ab:5b:94:40:2a:b7:
55:2e:12:24:30:da:0f:9d:d1:2d:91:28:04:9d:41:a5:9a:da:
08:87:8b:64:da:48:d3:85:9c:36:ac:cb:f7:34:89:4e:d1:64:
22:2e:c5:bc:7f:6a:c3:3a:e6:f5:0e:44:60:7c:5d:12:90:ec:
a6:31:c9:5e:bc:36:5a:4b:ef:c5:6e:79:a3:8c:40:e1:82:84:
9a:ff:9f:19:5d:a4:6f:3e:51:f2:a5:a4:58:ef:9b:25:8e:c7:
be:fd:55:4c:9d:9a:13:b1:91:17:d5:15:17:60:bf:8b:8c:4d:
2f:a7:02:68:69:dc:a3:85:43:03:85:41:25:a7:c3:f4:82:e4:
9c:fa:ea:74:e0:db:93:a6:76:e1:25:29:b5:44:3c:c7:c1:b2:
87:d7:cb:6a:6e:be:e1:9e:52:56:44:7d:12:55:60:aa:ea:7d:
6d:0a:54:08:3a:aa:c0:fa:74:60:db:82:39:47:e0:a8:e2:65:
36:1b:b9:c7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIAKBS8ajmbRfw2vSNsTZjAt1pJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCNDY3MUQ5NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNB
NzEwRTA0MDAeFw0yNjExMDQwMjMxMTlaFw0yNjExMDUwMzE4MTlaMDMxMTAvBgNV
BAMTKEYxMjExRUJEQzlFMUU3RjU3Mzk3QzhEMTVGOUFGMDQxNTkxODczMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3+N2oclYv4zJS9TsULK4p9rG
+gyAceqZjfxEqle2pUe1T21tB1+sIj+oQNAKhihzW/Uj5U73N4+8Edt1tyEiPDeq
biJenU8odivaQflmzX92GqhzbKt0WS+RTkkxAF4HZBCx885+buKqvZN0UGf/rXiJ
8ZE3ppwqy2bBXKv02Gxxbs1vcWQTIcpBgLpgwU+5iqBxGwkJS1ECxhErAoFL+qYg
kwA9Kd+YEzdOuHJhagSgN36yiS84MIC9bVdoVfWFNEK5ANiyzw/zjVHi+kkI3bHA
zrOGpGZvoroIMRXIHhjcobCYhCxr1OAJ3wTRI2XSuVLquxymDpZraWYtCPTrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8SEevcnh5/Vzl8jRX5rwQVkYcyswHwYDVR0j
BBgwFoAUqrRnHZc1Bmlk8AjJ3fxSw6cQ4EAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGU0NmEzMDUtZGY3Ny00NTg3LTg3MDMtYTkwNWM1Mzc3OWFjLzAvQUFCNDY3MUQ5
NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNBNzEwRTA0MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQUI0NjcxRDk3MzUwNjY5NjRGMDA4QzlEREZDNTJDM0E3MTBF
MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3
MDMtYTkwNWM1Mzc3OWFjLzAvQUFCNDY3MUQ5NzM1MDY2OTY0RjAwOEM5RERGQzUy
QzNBNzEwRTA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFm2PrfbmsQTAm474oxP+JyfrK+to8qmtZvb
7UjzxW4mskSy0fEun+UOLhq4nGYzeLrhmOx+a8fnHTMW/bTV/1tCpqtblEAqt1Uu
EiQw2g+d0S2RKASdQaWa2giHi2TaSNOFnDasy/c0iU7RZCIuxbx/asM65vUORGB8
XRKQ7KYxyV68NlpL78VueaOMQOGChJr/nxldpG8+UfKlpFjvmyWOx779VUydmhOx
kRfVFRdgv4uMTS+nAmhp3KOFQwOFQSWnw/SC5Jz66nTg25OmduElKbVEPMfBsofX
y2puvuGeUlZEfRJVYKrqfW0KVAg6qsD6dGDbgjlH4KjiZTYbucc=
-----END CERTIFICATE-----
Generated at Wed Nov 4 17:12:43 2026 by rpki-client