
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
File: ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft (raw, json)
Hash identifier: bF0gC5H2Dpa2iDL7dmDwqUqR2ZReKd+Odv3EubxlUwk=
Subject key identifier: E7:91:80:BF:A5:E9:06:FA:57:6E:01:3D:9B:E5:1B:25:FF:F7:53:56
Authority key identifier: AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35
Certificate issuer: /CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235
Certificate serial: 5BBCD857818696BD2F58AF1342811148D0174C69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
Manifest number: E8
Signing time: Sat 24 Oct 2026 05:05:27 +0000
Manifest this update: Sat 24 Oct 2026 05:00:27 +0000
Manifest next update: Sun 25 Oct 2026 08:49:27 +0000
Files and hashes: 1: ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl (hash: LUL5K4ycNIzvloXGvaHhMAFooC8k28EJncThRiOqtgc=)
2: AS45700.roa (hash: 4gylyPRrLCVxqv8jBeq1Y73wjMNwCZgjrx7f+jJHRfU=)
3: AS147168.roa (hash: WiiJ0UINkkiQHu9jLgZQhKLsdBs17smAwZtsfZdz3PU=)
4: AS10217.roa (hash: rBN9V7NO+oNZzLzvFqCWOkrMsFmQrg1NnhxBG1/GfOM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl
rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 08:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:bc:d8:57:81:86:96:bd:2f:58:af:13:42:81:11:48:d0:17:4c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235
Validity
Not Before: Oct 24 05:00:27 2026 GMT
Not After : Oct 25 08:49:27 2026 GMT
Subject: CN=E79180BFA5E906FA576E013D9BE51B25FFF75356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:30:a4:73:e0:b8:b1:7d:c7:25:c7:63:c0:
d8:f9:3c:19:ba:d8:b7:ca:5d:a7:ae:fd:d5:24:c1:
bc:c7:90:da:47:bb:c8:ba:8b:11:aa:32:10:5c:18:
8e:72:ea:3d:94:80:b5:9a:f3:8d:7f:86:c2:f9:2f:
e8:b6:19:6f:89:01:02:f2:d9:e5:92:1f:70:58:fc:
fe:a0:63:6f:7f:dd:f8:56:58:8b:d9:d5:bb:36:9b:
5d:21:53:fe:fc:bf:b0:ec:37:82:33:70:82:ea:f7:
48:3a:15:fa:28:58:ff:fd:b8:ab:35:3f:7c:5a:c0:
0c:3d:33:e0:c0:b0:a5:a1:e0:0f:cf:51:71:39:41:
88:14:bf:3c:32:be:d3:6a:39:1d:a8:64:f2:4e:a3:
2d:6d:28:29:f6:2e:aa:4b:6f:39:df:e3:3b:dd:55:
25:a6:64:e5:3f:d7:d4:f4:87:e3:89:16:0a:e8:7b:
a4:50:b3:a6:7a:04:f6:c5:61:37:0f:5c:51:f1:93:
3f:b9:04:43:ae:02:57:08:76:11:8b:66:98:4f:cb:
85:98:aa:2b:fd:35:70:2d:2f:6c:f6:4b:db:df:fc:
fb:3d:5c:9d:75:fa:6c:30:37:60:09:87:ad:3f:19:
d6:b0:68:2e:43:86:0d:f5:3b:14:b1:47:8a:52:be:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:91:80:BF:A5:E9:06:FA:57:6E:01:3D:9B:E5:1B:25:FF:F7:53:56
X509v3 Authority Key Identifier:
keyid:AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f3:04:b9:2c:cd:36:50:42:b6:06:7d:af:cc:fb:6f:4e:1e:
47:8c:7c:70:02:e9:c3:9d:13:6a:2c:76:ac:0c:7b:38:22:43:
59:1e:a4:e6:4c:d7:8d:2d:cd:03:23:e8:1d:56:bb:19:6a:8f:
94:00:2b:33:96:69:15:a3:4d:1a:8a:a0:dc:41:49:cb:c2:5f:
98:07:4a:58:c8:bb:8f:23:ce:b2:4e:85:03:ed:b7:42:fc:bf:
d3:b4:90:62:cb:a5:0e:8f:87:1a:73:fd:ad:dc:18:c2:13:5a:
fc:7e:6d:7d:5e:91:3b:03:2d:26:e8:2b:59:22:98:d5:ff:40:
ee:b8:42:c3:e8:0b:bf:2e:a0:b0:fb:c4:77:89:c8:a0:ff:4c:
75:2f:d0:9d:f5:e5:71:26:86:bb:0d:e6:c6:6a:1a:4c:0d:c8:
e2:fb:15:39:9f:d5:5c:4a:03:1f:26:5d:f7:40:d6:ad:78:49:
64:43:c6:74:a6:0d:12:d6:92:24:82:bf:3a:93:c0:68:aa:66:
a6:ea:78:83:b6:cd:61:e0:69:df:4a:ef:4d:b2:4f:03:80:1e:
98:ad:57:a6:36:2c:24:50:5c:04:7f:60:aa:8a:df:73:f8:54:
40:7e:42:b0:db:d3:8a:49:cd:55:bf:0a:18:c1:58:07:d4:ed:
85:ff:b4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:41:07 2026 by rpki-client