
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft
File: 5ABFE157E467A6732384B658909A9764D5D88AEC.mft (raw, json)
Hash identifier: o6SUC5hIbFMJcYh/RErEOV9czWwoSeowD+G+uD0e1fU=
Subject key identifier: B8:08:38:F5:43:81:55:17:25:83:FA:A7:C0:51:C3:FB:74:22:DE:B2
Authority key identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC
Certificate issuer: /CN=5ABFE157E467A6732384B658909A9764D5D88AEC
Certificate serial: 5757BE06FCB80205A77E0CE0FEDAC036B9C2A8F6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 16:51:02 +0000
Manifest this update: Fri 19 Jun 2026 16:46:02 +0000
Manifest next update: Sat 20 Jun 2026 19:09:02 +0000
Files and hashes: 1: 5ABFE157E467A6732384B658909A9764D5D88AEC.crl (hash: XJg9TvgQk4mOmmgOFLsQK6oKceqADcSl67s59+m4q6s=)
2: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: OYkbzaiaQarKQmGzbsa0kcIv0ahbBNrL8RA56NXr+2g=)
3: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: s1c5Xhjj1A4MpzLQqmtjwYb0lHUpDy9QxtX6cd6J7tw=)
4: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (hash: WFBdDzYNGyGBPxFeYXB5Lb1GK9i9G1iuTrrdeZuMZkY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl
rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 19:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:57:be:06:fc:b8:02:05:a7:7e:0c:e0:fe:da:c0:36:b9:c2:a8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ABFE157E467A6732384B658909A9764D5D88AEC
Validity
Not Before: Jun 19 16:46:02 2026 GMT
Not After : Jun 20 19:09:02 2026 GMT
Subject: CN=B80838F5438155172583FAA7C051C3FB7422DEB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:92:e8:6d:8c:a7:e7:1a:da:53:95:d3:84:
f6:bb:dd:b7:c2:ea:b9:3c:53:af:49:12:12:cf:0c:
79:47:36:3f:87:16:c6:ea:ca:29:24:c0:9f:ae:23:
88:f5:47:aa:47:01:5b:f8:22:64:9a:79:de:e8:cd:
65:e3:aa:d8:ae:b5:e7:3d:19:04:ff:6c:a5:24:04:
77:a9:e3:c4:cd:e2:99:d4:97:08:97:7d:a3:c5:09:
fa:9c:c5:0c:95:55:fd:d0:c6:7e:5e:c7:21:ee:61:
d5:aa:1c:08:77:00:8c:11:29:4b:b6:43:a5:17:1a:
80:01:33:92:8c:8e:82:cf:7d:a9:b0:f2:f9:ad:f5:
78:01:0d:7f:5a:8a:df:8a:ab:20:95:5a:6e:fd:07:
59:46:3a:f2:79:2a:35:f2:fa:3c:c1:c7:14:bf:00:
58:e6:56:fb:a4:fb:7e:4b:5f:d4:71:f3:35:ca:7b:
39:06:82:d3:42:a0:51:f7:97:28:26:69:cd:39:cb:
ec:0f:2e:d4:a0:78:75:2b:3e:4e:e8:f0:a0:a8:62:
d6:98:18:df:31:0a:30:17:0f:da:d0:4b:01:bf:09:
5d:e2:aa:f0:ce:9c:ef:cf:03:09:1b:08:64:ea:b4:
25:82:94:ed:3f:4b:0c:0a:26:16:e3:0e:09:c4:dc:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:08:38:F5:43:81:55:17:25:83:FA:A7:C0:51:C3:FB:74:22:DE:B2
X509v3 Authority Key Identifier:
keyid:5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:81:c6:7a:8d:32:bd:9b:23:2e:29:3a:ea:ec:70:9b:45:8b:
b9:db:09:62:95:2b:8d:fc:b6:b7:b0:84:ae:f7:8f:52:d0:97:
b0:54:93:3e:f4:43:30:87:c9:ed:e3:fa:26:b3:8c:03:6b:24:
09:14:af:ff:4c:e0:30:a2:0f:3c:25:ab:e0:3c:36:ba:a6:fc:
b4:88:21:47:23:78:5e:25:7d:d4:20:c8:e9:43:c8:58:07:da:
36:62:c3:5b:00:f7:af:83:7f:7e:eb:63:31:d6:b6:20:74:cf:
54:23:5c:fc:13:ab:c4:e0:90:50:d9:00:91:07:29:a0:92:5e:
7f:12:80:45:e0:5c:6a:2f:57:a6:83:e9:88:1d:8c:64:c8:67:
15:c7:91:0c:18:51:70:fd:35:b4:1a:67:0d:a9:5c:12:c0:85:
ab:03:ec:17:07:93:c0:bb:1a:4c:df:28:a1:a5:c3:ef:90:e5:
24:0f:b6:3f:60:04:cb:da:3d:77:80:4b:59:b8:1c:ec:0c:fa:
14:8f:77:c0:0c:4e:55:96:15:c9:39:47:20:cd:8c:2b:dd:e3:
71:d6:de:00:04:f5:0d:6d:80:df:7f:b2:16:62:1f:78:a9:46:
48:19:f2:b1:9a:3f:25:ea:a8:3f:9b:a9:b7:58:51:70:35:39:
2a:9b:b0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:18:21 2026 by rpki-client