
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft
File: AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft (raw, json)
Hash identifier: jGvQvaEslr0BarZQ+6Ky7VpuJCQ4sswJt7RYJuegoso=
Subject key identifier: 43:9C:A4:F5:49:07:49:76:B5:F0:59:58:88:99:95:55:57:43:EC:BE
Authority key identifier: AB:5F:90:55:2B:80:CD:C2:41:65:92:E5:FD:A7:73:F5:D6:6F:53:BE
Certificate issuer: /CN=AB5F90552B80CDC2416592E5FDA773F5D66F53BE
Certificate serial: 3567A15EE485C6EF32D8CBE51E56DEAA42FBD61A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft
Manifest number: B7
Signing time: Wed 16 Sep 2026 22:57:21 +0000
Manifest this update: Wed 16 Sep 2026 22:52:21 +0000
Manifest next update: Thu 17 Sep 2026 23:21:21 +0000
Files and hashes: 1: AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl (hash: LU5PvMfn+VNijKeCKywDL3R/tKbna///rcM97FgyxrI=)
2: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: 8mWztPKHecvNCBMMV0cUZVPOGf2iWRWZndzDVuRiFm4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl
rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 23:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:67:a1:5e:e4:85:c6:ef:32:d8:cb:e5:1e:56:de:aa:42:fb:d6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB5F90552B80CDC2416592E5FDA773F5D66F53BE
Validity
Not Before: Sep 16 22:52:21 2026 GMT
Not After : Sep 17 23:21:21 2026 GMT
Subject: CN=439CA4F549074976B5F05958889995555743ECBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:71:e7:19:10:63:a5:de:cc:00:84:8d:6b:88:
aa:35:b1:8b:12:8b:58:8b:69:c2:4b:84:ba:c2:80:
56:be:40:25:4c:8c:bf:a7:08:50:34:74:4f:c4:a6:
51:cd:a8:c8:43:72:f5:89:df:41:f2:f1:aa:54:a4:
35:77:1d:2f:76:28:f6:3e:8e:2f:81:ec:09:79:c6:
8f:7d:b6:9c:51:7d:60:bb:0f:5e:ce:6a:94:88:ef:
32:bf:29:20:72:fe:af:85:b5:61:b5:33:64:88:7f:
a3:2e:30:da:20:c8:a8:31:b7:d2:ad:92:d3:bf:e1:
3f:29:71:24:e5:f5:4d:0e:d1:90:9a:74:38:73:0d:
53:e2:bc:67:54:72:59:4c:c9:97:1f:df:d9:93:24:
2a:3c:37:e0:9e:17:6a:12:99:ea:eb:eb:43:52:5e:
0d:5e:5b:b3:2e:76:d3:40:b5:af:ee:14:c9:17:eb:
5b:20:e5:49:f2:fc:e2:1c:d7:c8:f4:70:8c:3d:53:
24:67:14:54:a6:53:fe:c2:f6:34:f7:87:00:4b:c9:
b0:cd:b7:f3:23:48:2d:42:6a:83:8d:7f:24:af:f5:
0f:5e:f3:45:67:2a:a4:43:58:bf:94:0c:42:20:bc:
62:c4:63:6b:a2:f9:41:0e:b4:40:a9:e6:d5:13:48:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9C:A4:F5:49:07:49:76:B5:F0:59:58:88:99:95:55:57:43:EC:BE
X509v3 Authority Key Identifier:
keyid:AB:5F:90:55:2B:80:CD:C2:41:65:92:E5:FD:A7:73:F5:D6:6F:53:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:64:29:dd:63:5e:2d:5d:d7:3b:21:b9:9b:12:0a:a6:56:be:
07:be:a8:d2:5c:b1:c7:02:fe:2c:54:40:1f:ba:d6:e2:84:1d:
e1:da:e6:d5:ac:be:14:26:91:d2:ad:b6:d4:81:88:43:31:5c:
c8:52:35:ec:7b:70:a9:a7:ad:8e:6d:46:f2:2a:5c:a7:10:8a:
bd:cc:8c:58:47:6f:0c:a6:ba:d9:cb:87:6a:ea:d6:89:44:ef:
47:66:b4:5c:00:1a:d3:8b:32:d4:91:b4:4f:ce:08:96:ff:40:
b9:8d:4b:39:73:9b:70:ed:19:88:57:b6:9f:d0:c3:a9:36:3a:
fd:76:7b:3d:d8:98:af:2c:d6:88:23:c4:41:e0:18:de:29:60:
42:35:ff:e3:d0:7b:0c:66:7e:30:3c:bb:f3:ab:89:d7:01:f4:
2c:3d:eb:4f:ad:ce:3a:64:a2:62:12:0f:51:5c:aa:2f:5f:e5:
bc:a2:b9:53:a7:10:93:ff:c8:1d:77:e7:c2:cd:84:21:39:3b:
12:a6:cc:08:20:80:a2:cd:5c:e2:7e:97:01:1c:0e:13:22:93:
ab:f4:04:dd:48:5f:aa:1b:c3:aa:76:f6:e1:86:ec:f9:4e:32:
38:0e:23:ac:97:e2:71:20:12:d6:a5:c0:9a:f6:6f:a3:45:c6:
44:12:cb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:10:49 2026 by rpki-client