
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
File: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft (raw, json)
Hash identifier: /R4LWP1sERRemFuh7FfMlUwJmXoIAeh1dJQBHwLEYqI=
Subject key identifier: 88:14:C6:4A:6A:F8:EB:B3:F6:B2:E4:64:27:2F:67:7A:E0:D7:DF:A4
Authority key identifier: AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD
Certificate issuer: /CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
Certificate serial: 165A287FE6E234983E41A86149EEEAA7DB758A19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 05:29:34 +0000
Manifest this update: Thu 03 Sep 2026 05:24:34 +0000
Manifest next update: Fri 04 Sep 2026 09:02:34 +0000
Files and hashes: 1: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: P/QxCrf6WfKLvPGmKU57C3y4W+PW1Rf3us9X69RWmso=)
2: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: jRoJloKWdBD0ievbpq3l4pAS4f1axSNzf++s/yOl2zM=)
3: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl (hash: w5/z5AGa+HYWfVryUdv/IGvzGXb4L7P6LBD8KgmVoCM=)
4: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: BWkQKxIfXCHfh/9a/7ZikuopxvR6ddCoDn8JEUuJXcg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl
rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 09:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:5a:28:7f:e6:e2:34:98:3e:41:a8:61:49:ee:ea:a7:db:75:8a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
Validity
Not Before: Sep 3 05:24:34 2026 GMT
Not After : Sep 4 09:02:34 2026 GMT
Subject: CN=8814C64A6AF8EBB3F6B2E464272F677AE0D7DFA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:53:1b:4b:d4:91:90:f9:b7:cd:79:f4:74:
1a:35:68:6d:1a:d6:ea:6f:b9:39:95:d3:56:b0:19:
ba:67:91:dc:6a:55:84:34:b8:e5:15:b7:76:b4:cb:
55:5f:8b:09:38:da:88:7d:86:55:89:a7:c0:a2:f8:
a5:5b:33:69:7b:cc:1a:11:6c:94:6a:fe:02:04:c1:
c9:22:e2:5f:f2:29:63:ab:8b:4b:28:cf:8f:d2:c4:
ec:1f:7d:14:e5:2b:e8:cc:39:4b:23:7f:f8:a0:1a:
99:71:9c:6a:a5:35:38:e8:ed:34:11:b8:a5:7c:a1:
f2:7f:75:db:e1:04:10:c9:e7:ff:4b:51:97:a6:88:
76:cb:53:73:1b:ba:fd:8d:7e:c1:4a:32:48:29:ba:
8c:2b:cd:c2:15:5a:04:16:be:96:d5:1d:d4:9f:07:
2a:be:f3:35:6e:53:b5:f8:d4:16:1f:a0:83:2b:9a:
a9:6d:e2:3b:cf:0b:7f:5b:2b:cf:db:fc:df:28:e2:
b2:28:7c:a9:b5:37:f4:5c:a7:b6:3d:d6:e4:21:31:
8d:1d:27:26:ae:15:31:0a:6b:86:3a:16:c1:5d:d2:
b9:37:2a:31:40:e2:ca:0a:67:e5:30:a4:65:88:5e:
29:c9:f4:b9:35:0b:58:df:f4:76:4c:bb:e7:22:d5:
ea:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:14:C6:4A:6A:F8:EB:B3:F6:B2:E4:64:27:2F:67:7A:E0:D7:DF:A4
X509v3 Authority Key Identifier:
keyid:AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4d:3f:7a:35:95:d8:2d:6b:04:82:9f:52:cf:a5:71:c0:7f:
d7:74:e2:46:21:b5:bc:84:ab:e6:22:d1:ae:65:7e:4d:6a:f7:
e5:42:a9:3f:7f:bb:ab:c7:a6:f3:52:7b:5b:ad:1f:a1:7f:d2:
98:45:3d:a3:e2:cb:df:74:b1:e6:45:00:96:67:ed:16:25:05:
80:a4:d5:8d:d5:af:be:1e:32:19:1a:4b:ce:3d:68:24:f5:93:
25:c3:d6:9b:aa:b6:d3:b3:e6:f8:01:5d:a5:1f:8f:08:e6:13:
1c:bb:87:6f:08:e0:33:00:94:ef:de:5f:ac:9f:fb:41:22:0f:
75:56:96:21:b1:2e:25:f0:65:22:d1:9f:2d:73:09:6f:fd:02:
10:15:d2:93:31:fc:0f:33:9a:b1:7a:0b:f3:63:ce:e9:c6:c6:
75:f4:a9:5d:ce:f7:a3:bc:de:d9:7c:0d:d8:03:25:49:bf:56:
d9:c1:2c:1a:e3:31:ce:52:fd:2f:d4:d7:3b:6a:b9:fb:5d:87:
e9:e8:1d:05:de:f3:40:06:82:fe:fc:ce:39:f8:ee:8f:1e:79:
a6:88:28:33:51:fa:e3:f3:06:8f:0a:c0:42:5f:92:80:78:79:
00:04:68:60:0a:61:23:0f:ea:9e:7b:5a:55:ef:d5:50:80:70:
b5:dc:35:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 14:16:30 2026 by rpki-client