
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft
File: AEBADFA06D76BE480430EDC8D27F4BE636880149.mft (raw, json)
Hash identifier: vMyAkhAdq5FuAbDy1XLfJKmjfD8Arskj914UhfOyqXM=
Subject key identifier: FE:3A:C2:58:44:B4:62:02:18:51:F5:25:BA:1E:71:1B:C5:25:8A:07
Authority key identifier: AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49
Certificate issuer: /CN=AEBADFA06D76BE480430EDC8D27F4BE636880149
Certificate serial: 1FCFBC69E2B947FC2FEE4684A492C41D34ADEAFC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 23:17:46 +0000
Manifest this update: Wed 16 Sep 2026 23:12:46 +0000
Manifest next update: Fri 18 Sep 2026 02:24:46 +0000
Files and hashes: 1: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: aC5Jcybn/WcmcwFTZT+cimtZCI1Cj8w+b53oH5W6Fw4=)
2: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: nG5fCmE925uHgYNeygfmhhegb7zX/kDvlyw/SCpRN+I=)
3: AEBADFA06D76BE480430EDC8D27F4BE636880149.crl (hash: BFJ9rqDoYoEL4qs4ynpqqL0Qd6uKbUnBZNhnBhn713I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl
rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:cf:bc:69:e2:b9:47:fc:2f:ee:46:84:a4:92:c4:1d:34:ad:ea:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEBADFA06D76BE480430EDC8D27F4BE636880149
Validity
Not Before: Sep 16 23:12:46 2026 GMT
Not After : Sep 18 02:24:46 2026 GMT
Subject: CN=FE3AC25844B462021851F525BA1E711BC5258A07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:98:ab:61:f7:97:c2:9f:8b:e5:32:c0:21:a9:
d4:97:20:28:51:b9:07:a3:34:b6:27:d0:00:29:72:
71:5a:62:32:b4:f9:67:cf:9d:e0:13:41:1f:74:35:
15:f9:4f:bb:c1:1e:93:ae:6c:85:26:bf:ff:3d:a7:
2c:4c:a2:92:20:63:71:d0:80:74:5d:59:16:40:05:
a8:80:67:79:cd:d0:4d:4c:a3:51:05:73:ef:2f:92:
cc:01:66:32:cb:e6:ee:61:cc:4c:51:22:61:7c:35:
86:b0:36:85:8f:6c:aa:c7:55:9e:d7:30:11:1e:a3:
fb:03:a9:0f:17:d5:de:4a:0d:f9:44:76:b4:52:50:
d2:3d:7f:64:9f:08:87:ed:c3:3b:00:60:2e:80:f7:
10:ec:82:c7:19:48:b9:18:28:19:be:b6:9f:a3:33:
3c:d7:d1:06:c5:c7:33:bd:de:86:be:c3:ce:d9:d8:
64:92:c5:b7:fd:63:24:ac:ae:82:30:95:56:15:c1:
88:71:67:a6:7a:88:1d:43:59:cb:d5:f6:50:4c:93:
ae:27:33:60:bb:b1:ff:49:23:11:a4:23:f3:70:b6:
30:7a:26:68:2f:b7:36:8f:27:19:57:e7:9d:d4:6b:
4d:c3:de:da:0c:ed:5b:31:2a:b6:21:fa:ba:41:22:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3A:C2:58:44:B4:62:02:18:51:F5:25:BA:1E:71:1B:C5:25:8A:07
X509v3 Authority Key Identifier:
keyid:AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:8e:b2:2b:a6:49:9f:2a:30:17:25:16:ca:b7:7e:94:01:73:
bd:2d:04:fd:d6:1f:6b:d3:e4:09:70:87:41:f1:f4:be:80:52:
c9:ff:57:e1:01:16:fd:7b:f2:05:da:05:fc:68:b9:14:cb:6f:
45:03:55:e9:d7:0b:f1:a2:b1:7d:d2:0e:46:e5:c4:43:8d:6d:
c0:07:e8:ca:45:0b:56:b0:2b:95:a8:b0:89:5f:0c:d6:8a:85:
13:12:f4:93:e0:27:f6:5f:e2:f7:78:d9:de:64:be:3e:54:d8:
4f:45:63:63:f4:08:5c:60:89:ec:4c:84:d5:9e:2d:28:f2:1c:
c7:3c:d2:3d:25:a2:89:42:95:f5:57:8d:ea:14:63:24:03:06:
18:8a:80:17:fe:f2:86:76:fb:1c:a2:49:14:45:f6:fc:4a:79:
4d:56:94:26:51:7a:3e:85:e6:7c:da:48:64:ee:07:c7:7c:91:
95:bc:08:89:b1:ed:a1:aa:f4:25:f5:4b:b1:85:a7:26:03:54:
59:2f:ad:6c:7a:a0:74:dd:55:9b:78:6d:23:aa:05:b7:cb:f5:
96:59:92:25:48:83:a7:19:be:4c:46:2d:01:6c:ac:a2:59:b5:
f5:31:2d:42:f8:5a:e8:b0:54:d7:59:a4:fa:a0:e6:87:d7:07:
e8:50:11:9a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUH8+8aeK5R/wv7kaEpJLEHTSt6vwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVCQURGQTA2RDc2QkU0ODA0MzBFREM4RDI3RjRCRTYz
Njg4MDE0OTAeFw0yNjA5MTYyMzEyNDZaFw0yNjA5MTgwMjI0NDZaMDMxMTAvBgNV
BAMTKEZFM0FDMjU4NDRCNDYyMDIxODUxRjUyNUJBMUU3MTFCQzUyNThBMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfmKth95fCn4vlMsAhqdSXIChR
uQejNLYn0AApcnFaYjK0+WfPneATQR90NRX5T7vBHpOubIUmv/89pyxMopIgY3HQ
gHRdWRZABaiAZ3nN0E1Mo1EFc+8vkswBZjLL5u5hzExRImF8NYawNoWPbKrHVZ7X
MBEeo/sDqQ8X1d5KDflEdrRSUNI9f2SfCIftwzsAYC6A9xDsgscZSLkYKBm+tp+j
MzzX0QbFxzO93oa+w87Z2GSSxbf9YySsroIwlVYVwYhxZ6Z6iB1DWcvV9lBMk64n
M2C7sf9JIxGkI/NwtjB6JmgvtzaPJxlX553Ua03D3toM7VsxKrYh+rpBImVbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/jrCWES0YgIYUfUluh5xG8UligcwHwYDVR0j
BBgwFoAUrrrfoG12vkgEMO3I0n9L5jaIAUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTViOGU3NzQtMTY4My00NTZkLWJiYzAtMzQzMjI1ZjE3ZjRjLzAvQUVCQURGQTA2
RDc2QkU0ODA0MzBFREM4RDI3RjRCRTYzNjg4MDE0OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BRUJBREZBMDZENzZCRTQ4MDQzMEVEQzhEMjdGNEJFNjM2ODgw
MTQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi
YzAtMzQzMjI1ZjE3ZjRjLzAvQUVCQURGQTA2RDc2QkU0ODA0MzBFREM4RDI3RjRC
RTYzNjg4MDE0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANGOsiumSZ8qMBclFsq3fpQBc70tBP3WH2vT
5Alwh0Hx9L6AUsn/V+EBFv178gXaBfxouRTLb0UDVenXC/GisX3SDkblxEONbcAH
6MpFC1awK5WosIlfDNaKhRMS9JPgJ/Zf4vd42d5kvj5U2E9FY2P0CFxgiexMhNWe
LSjyHMc80j0loolClfVXjeoUYyQDBhiKgBf+8oZ2+xyiSRRF9vxKeU1WlCZRej6F
5nzaSGTuB8d8kZW8CImx7aGq9CX1S7GFpyYDVFkvrWx6oHTdVZt4bSOqBbfL9ZZZ
kiVIg6cZvkxGLQFsrKJZtfUxLUL4WuiwVNdZpPqg5ofXB+hQEZo=
-----END CERTIFICATE-----
Generated at Thu Sep 17 15:20:14 2026 by rpki-client