
$ rpki-client -vvf rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
File: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft (raw, json)
Hash identifier: C21FMvYzsZOlo6+/WI84lLrqK9xlSKI2RQVDuONRsX8=
Subject key identifier: B6:0A:41:FB:DD:50:B8:79:7E:FD:B3:14:AB:B9:F3:19:EF:42:4A:DA
Authority key identifier: AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD
Certificate issuer: /CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
Certificate serial: 754C5FED6EA8A8EE55BA88DDA9682034AC8A3747
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 15:49:10 +0000
Manifest this update: Tue 02 Jun 2026 15:44:10 +0000
Manifest next update: Wed 03 Jun 2026 15:55:10 +0000
Files and hashes: 1: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl (hash: tTFfvJKbxxDrr7M6JMVdscsJ/eqMkZowvm2FbVvEzvk=)
2: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: P/QxCrf6WfKLvPGmKU57C3y4W+PW1Rf3us9X69RWmso=)
3: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: BWkQKxIfXCHfh/9a/7ZikuopxvR6ddCoDn8JEUuJXcg=)
4: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: jRoJloKWdBD0ievbpq3l4pAS4f1axSNzf++s/yOl2zM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl
rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4c:5f:ed:6e:a8:a8:ee:55:ba:88:dd:a9:68:20:34:ac:8a:37:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
Validity
Not Before: Jun 2 15:44:10 2026 GMT
Not After : Jun 3 15:55:10 2026 GMT
Subject: CN=B60A41FBDD50B8797EFDB314ABB9F319EF424ADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:e1:25:67:93:ea:56:33:62:63:57:b9:e8:
57:38:c9:da:5c:73:5c:05:4e:95:5a:0e:10:c5:f5:
24:36:09:54:23:e5:b5:df:74:57:af:11:d7:d4:c7:
db:a0:7c:57:b0:22:e4:4a:6a:2e:4e:06:4e:c9:0b:
8f:7e:09:86:6c:0d:7c:2a:a5:aa:99:4f:71:af:dc:
76:22:26:f3:36:ce:cf:a5:f6:89:49:68:ee:3f:f9:
86:74:a2:d1:bb:71:16:17:5f:25:65:1c:99:ba:9c:
90:42:6d:c8:51:2a:14:cb:60:54:1d:73:21:07:85:
94:ca:ed:92:f8:27:4f:d8:80:e5:85:35:5d:ad:0c:
e0:45:41:e3:48:84:52:e3:cd:ea:06:0a:9d:b1:ed:
77:ab:23:c2:71:84:f9:0a:e5:41:e5:fb:56:79:ab:
cb:f3:3f:24:6a:c6:67:f1:88:d0:15:d9:4e:4e:89:
64:1e:09:8c:fa:f9:7d:23:94:c5:52:77:15:e6:e4:
74:5a:f9:56:3f:ea:8e:9f:8d:ff:b6:5f:b6:e8:43:
02:fe:f1:75:12:74:3b:d4:1f:90:8e:f9:d3:39:35:
16:66:56:3d:a9:d2:59:84:9f:08:2e:14:98:1c:b6:
d3:f1:93:cd:d0:03:9a:f5:f1:a7:82:fb:f9:59:b6:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0A:41:FB:DD:50:B8:79:7E:FD:B3:14:AB:B9:F3:19:EF:42:4A:DA
X509v3 Authority Key Identifier:
keyid:AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ac:3d:6b:a2:82:ad:3e:5b:d9:a5:b8:7b:94:76:72:04:41:
ef:87:5d:89:7f:e8:ae:fe:c1:c9:b2:98:80:6b:e1:e2:54:6a:
24:bb:e3:ec:42:e9:e0:e5:93:96:9e:cd:86:91:53:ba:49:64:
17:c2:09:2a:6d:f9:d5:bd:06:40:6e:90:02:32:ad:f8:60:d4:
ae:b7:ce:89:3c:42:a4:b0:c8:75:ed:d4:0f:0c:7e:6e:32:b0:
a0:45:c6:27:77:24:8e:dd:41:ef:8f:7c:42:b4:11:02:2a:c4:
93:2c:e1:13:d6:fc:a4:ee:29:19:48:cc:5c:66:7c:4f:ab:6a:
2c:2f:ef:da:be:88:07:8b:20:aa:30:b2:d3:c5:f9:d3:88:84:
44:c2:5f:5a:0a:9d:c5:2c:10:91:de:f8:49:17:e2:ab:e5:8f:
aa:59:54:d0:eb:74:79:f0:19:92:13:b3:e3:2f:1b:3e:36:3e:
4d:d9:c4:2b:f6:8c:30:75:03:fc:86:44:07:fb:2f:49:bd:04:
95:9e:15:7e:81:b9:9d:d8:7e:f5:6e:5e:08:da:58:a6:47:61:
05:e4:ed:09:33:c1:52:ff:b5:1e:9f:4f:26:20:1d:4f:52:86:
57:ac:7b:03:7d:35:d1:23:b3:31:9f:02:99:46:61:eb:75:73:
ae:4c:d2:11
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdUxf7W6oqO5VuojdqWggNKyKN0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI1NzExNDg2MDIzRjhGMERCRkVEMzhCQzdGRDdCQzkx
NzM1RkZDRDAeFw0yNjA2MDIxNTQ0MTBaFw0yNjA2MDMxNTU1MTBaMDMxMTAvBgNV
BAMTKEI2MEE0MUZCREQ1MEI4Nzk3RUZEQjMxNEFCQjlGMzE5RUY0MjRBREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlf+ElZ5PqVjNiY1e56Fc4ydpc
c1wFTpVaDhDF9SQ2CVQj5bXfdFevEdfUx9ugfFewIuRKai5OBk7JC49+CYZsDXwq
paqZT3Gv3HYiJvM2zs+l9olJaO4/+YZ0otG7cRYXXyVlHJm6nJBCbchRKhTLYFQd
cyEHhZTK7ZL4J0/YgOWFNV2tDOBFQeNIhFLjzeoGCp2x7XerI8JxhPkK5UHl+1Z5
q8vzPyRqxmfxiNAV2U5OiWQeCYz6+X0jlMVSdxXm5HRa+VY/6o6fjf+2X7boQwL+
8XUSdDvUH5CO+dM5NRZmVj2p0lmEnwguFJgcttPxk83QA5r18aeC+/lZtubPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtgpB+91QuHl+/bMUq7nzGe9CStowHwYDVR0j
BBgwFoAUq1cRSGAj+PDb/tOLx/17yRc1/80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWRhZWM2NmMtOWUxZC00MzIxLWIwNjktZWVhYjQ3OTNhMDBiLzAvQUI1NzExNDg2
MDIzRjhGMERCRkVEMzhCQzdGRDdCQzkxNzM1RkZDRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQjU3MTE0ODYwMjNGOEYwREJGRUQzOEJDN0ZEN0JDOTE3MzVG
RkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw
NjktZWVhYjQ3OTNhMDBiLzAvQUI1NzExNDg2MDIzRjhGMERCRkVEMzhCQzdGRDdC
QzkxNzM1RkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACWsPWuigq0+W9mluHuUdnIEQe+HXYl/6K7+
wcmymIBr4eJUaiS74+xC6eDlk5aezYaRU7pJZBfCCSpt+dW9BkBukAIyrfhg1K63
zok8QqSwyHXt1A8Mfm4ysKBFxid3JI7dQe+PfEK0EQIqxJMs4RPW/KTuKRlIzFxm
fE+raiwv79q+iAeLIKowstPF+dOIhETCX1oKncUsEJHe+EkX4qvlj6pZVNDrdHnw
GZITs+MvGz42Pk3ZxCv2jDB1A/yGRAf7L0m9BJWeFX6BuZ3YfvVuXgjaWKZHYQXk
7QkzwVL/tR6fTyYgHU9ShlesewN9NdEjszGfAplGYet1c65M0hE=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:00:45 2026 by rpki-client