
$ rpki-client -vvf rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
File: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft (raw, json)
Hash identifier: 4K5pBpqC7SKznuAyZMpwQnrWNhX+8NzTLK4jVBPYKyo=
Subject key identifier: BA:50:A1:15:74:45:25:D1:2E:26:18:4D:9A:2B:87:FE:11:0A:95:4A
Authority key identifier: AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD
Certificate issuer: /CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
Certificate serial: 728041E1FA25C1D218F4D30B118B1F5E40FE0329
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
Manifest number: 69
Signing time: Sun 19 Jul 2026 12:57:54 +0000
Manifest this update: Sun 19 Jul 2026 12:52:54 +0000
Manifest next update: Mon 20 Jul 2026 15:03:54 +0000
Files and hashes: 1: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: P/QxCrf6WfKLvPGmKU57C3y4W+PW1Rf3us9X69RWmso=)
2: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: BWkQKxIfXCHfh/9a/7ZikuopxvR6ddCoDn8JEUuJXcg=)
3: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl (hash: sZNsH7hIlZD/38p1cNRJd7o47IJeGtVcA+s9+KioHK8=)
4: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: jRoJloKWdBD0ievbpq3l4pAS4f1axSNzf++s/yOl2zM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl
rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 15:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:80:41:e1:fa:25:c1:d2:18:f4:d3:0b:11:8b:1f:5e:40:fe:03:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
Validity
Not Before: Jul 19 12:52:54 2026 GMT
Not After : Jul 20 15:03:54 2026 GMT
Subject: CN=BA50A115744525D12E26184D9A2B87FE110A954A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:95:e9:65:8c:8c:fd:57:50:69:a2:2e:ee:
ca:27:75:c5:bd:c8:2d:00:45:07:d1:31:06:fa:51:
1b:b2:dd:ff:4a:79:b9:b4:18:c7:47:a2:68:0e:f4:
1e:28:39:f4:99:38:2e:dc:72:2e:47:e8:a2:73:f1:
6e:de:54:d8:c1:7f:1e:56:ee:4e:7d:bd:1f:e8:1e:
30:ca:1e:fd:c0:7b:3e:34:c3:c0:00:e7:d8:5e:dd:
6a:de:f0:2e:1e:5b:49:cf:01:d0:c0:10:f2:0a:35:
d4:d9:2f:32:59:7a:33:87:94:ff:ed:4d:c0:0a:7f:
58:03:fd:2c:77:b7:7f:5a:04:93:40:a3:8c:b2:80:
72:a8:b2:2e:44:9b:df:2c:31:0a:6b:17:cd:7c:73:
98:25:79:ec:3c:b4:70:df:cf:e9:6e:8c:18:1e:c2:
c6:31:c2:48:a8:b3:7a:73:64:34:79:66:d8:ca:f9:
2f:cb:3a:b8:50:90:3e:aa:da:b0:c3:5e:6a:19:67:
28:7e:82:de:ed:d6:84:bb:96:c9:9f:24:48:d0:17:
84:b3:8e:f5:b8:1e:6e:0a:03:ed:d8:c9:ba:e0:0f:
01:a8:b5:d6:d1:ae:a6:65:f0:77:1c:d4:7e:2f:fe:
39:2d:b8:ff:dc:c1:b3:95:62:00:d7:64:19:bd:f6:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:50:A1:15:74:45:25:D1:2E:26:18:4D:9A:2B:87:FE:11:0A:95:4A
X509v3 Authority Key Identifier:
keyid:AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c6:90:97:a5:2b:6b:e6:3f:9f:87:49:fc:0f:b8:eb:1e:b1:
40:c5:ca:31:0b:d8:6a:72:da:1d:9b:49:71:ec:85:f6:19:48:
42:07:e5:d4:58:42:7c:40:db:d7:62:aa:b8:91:f1:8f:fc:11:
43:d9:84:18:58:3c:6e:4a:3d:82:2f:43:80:70:b0:4b:5e:12:
ae:00:75:66:ca:70:af:f2:08:71:aa:6a:6f:7c:d4:3d:b1:ab:
4a:c6:87:d1:e2:f5:98:1f:98:31:02:35:2b:4d:73:d5:21:ee:
5c:2f:e7:a0:62:22:23:33:93:29:d4:26:2c:81:a1:1c:cb:e5:
08:7d:13:80:f6:d3:82:c2:af:80:df:37:02:08:47:1f:3e:2a:
0f:32:c1:d0:8a:55:7e:57:7e:60:75:9e:f8:12:e6:79:93:70:
89:2e:7e:7c:a7:38:55:3e:9d:25:bf:af:37:63:42:f2:1e:61:
4f:75:9f:6a:22:cd:61:22:a6:46:15:ff:53:fb:9c:c6:2a:2a:
78:e1:6a:df:97:01:c4:ce:34:40:7b:06:be:25:ee:7b:4a:46:
b1:02:c7:47:cc:63:93:e2:92:47:05:55:23:2e:06:e1:9f:9c:
71:91:08:0d:98:83:47:1d:be:89:ec:cd:74:36:b8:d3:12:b2:
d2:a3:86:3f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcoBB4folwdIY9NMLEYsfXkD+AykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI1NzExNDg2MDIzRjhGMERCRkVEMzhCQzdGRDdCQzkx
NzM1RkZDRDAeFw0yNjA3MTkxMjUyNTRaFw0yNjA3MjAxNTAzNTRaMDMxMTAvBgNV
BAMTKEJBNTBBMTE1NzQ0NTI1RDEyRTI2MTg0RDlBMkI4N0ZFMTEwQTk1NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUU5XpZYyM/VdQaaIu7sondcW9
yC0ARQfRMQb6URuy3f9Kebm0GMdHomgO9B4oOfSZOC7cci5H6KJz8W7eVNjBfx5W
7k59vR/oHjDKHv3Aez40w8AA59he3Wre8C4eW0nPAdDAEPIKNdTZLzJZejOHlP/t
TcAKf1gD/Sx3t39aBJNAo4yygHKosi5Em98sMQprF818c5gleew8tHDfz+lujBge
wsYxwkios3pzZDR5ZtjK+S/LOrhQkD6q2rDDXmoZZyh+gt7t1oS7lsmfJEjQF4Sz
jvW4Hm4KA+3YybrgDwGotdbRrqZl8Hcc1H4v/jktuP/cwbOVYgDXZBm99t/1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUulChFXRFJdEuJhhNmiuH/hEKlUowHwYDVR0j
BBgwFoAUq1cRSGAj+PDb/tOLx/17yRc1/80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWRhZWM2NmMtOWUxZC00MzIxLWIwNjktZWVhYjQ3OTNhMDBiLzAvQUI1NzExNDg2
MDIzRjhGMERCRkVEMzhCQzdGRDdCQzkxNzM1RkZDRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQjU3MTE0ODYwMjNGOEYwREJGRUQzOEJDN0ZEN0JDOTE3MzVG
RkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw
NjktZWVhYjQ3OTNhMDBiLzAvQUI1NzExNDg2MDIzRjhGMERCRkVEMzhCQzdGRDdC
QzkxNzM1RkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB7GkJelK2vmP5+HSfwPuOsesUDFyjEL2Gpy
2h2bSXHshfYZSEIH5dRYQnxA29diqriR8Y/8EUPZhBhYPG5KPYIvQ4BwsEteEq4A
dWbKcK/yCHGqam981D2xq0rGh9Hi9ZgfmDECNStNc9Uh7lwv56BiIiMzkynUJiyB
oRzL5Qh9E4D204LCr4DfNwIIRx8+Kg8ywdCKVX5XfmB1nvgS5nmTcIkufnynOFU+
nSW/rzdjQvIeYU91n2oizWEipkYV/1P7nMYqKnjhat+XAcTONEB7Br4l7ntKRrEC
x0fMY5PikkcFVSMuBuGfnHGRCA2Yg0cdvonszXQ2uNMSstKjhj8=
-----END CERTIFICATE-----
Generated at Mon Jul 20 04:06:49 2026 by rpki-client