
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft
File: ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft (raw, json)
Hash identifier: uV+v2qQJixd+9kv1azw0HOgF8SKPpxoiGlm4bpjo0Cg=
Subject key identifier: 8F:45:BD:D2:CD:AC:74:41:3D:98:40:07:2B:97:A9:DB:12:3B:8E:98
Authority key identifier: AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E
Certificate issuer: /CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E
Certificate serial: 799420B06A3197D4986914E99E8484C164EAAAB0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft
Manifest number: 13
Signing time: Fri 15 May 2026 20:20:39 +0000
Manifest this update: Fri 15 May 2026 20:15:39 +0000
Manifest next update: Sat 16 May 2026 21:51:39 +0000
Files and hashes: 1: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: OOoHvJFdkLhmptHnukqX1ww9TIfJj00AYl9UOR0Cn10=)
2: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: OVNMe4OE8mfb+ubuXXAIKWm5rCKg5fDWbzjdPw4VCv4=)
3: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: nlhGLBRQhzgZ/MpT9mzD1/9LbZWhXsE7bI4qUYh5tIM=)
4: ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl (hash: 1iGpkJPLMwu99Sy4AmOMUaq4nq+jBsfCtXpKtrAEkt0=)
5: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: uu/0xcXb1PYlNEUXcZ5naLQoAfY3PIEB9peDrBii6OE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl
rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 21:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:94:20:b0:6a:31:97:d4:98:69:14:e9:9e:84:84:c1:64:ea:aa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E
Validity
Not Before: May 15 20:15:39 2026 GMT
Not After : May 16 21:51:39 2026 GMT
Subject: CN=8F45BDD2CDAC74413D9840072B97A9DB123B8E98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:1e:01:83:a3:83:e8:6b:d2:91:be:e0:4d:
a1:5f:b9:75:75:b6:79:6b:1f:fb:ef:98:c1:1f:4b:
a1:43:07:ce:89:44:43:6b:8a:51:82:bc:ec:f9:8f:
66:48:ef:d7:54:41:d5:28:b6:1d:71:7d:da:1f:d4:
1e:9d:03:ee:88:3b:ba:1d:5b:b1:b9:d8:62:11:90:
e3:b1:c9:e1:d5:94:a8:2f:cb:53:94:78:0f:8f:aa:
1d:ef:a1:67:1f:c5:d8:e0:8b:cd:b4:21:9e:f2:9c:
95:08:45:01:76:05:18:96:39:30:19:3e:de:d5:f1:
af:1e:a9:d7:e0:5f:91:c2:e9:06:7a:db:04:af:51:
98:e0:01:c4:d1:bc:a3:6c:de:17:3f:11:06:a3:85:
96:31:b3:92:88:c3:d6:0b:14:8a:f2:89:a4:89:35:
10:38:71:ad:80:b3:f5:61:ed:7c:95:59:f3:11:00:
c4:64:54:50:7c:88:59:95:2c:a4:c4:5c:3e:d1:54:
a5:49:99:a6:b3:18:bd:10:e9:b0:4f:8d:ad:d1:82:
a7:ba:aa:46:83:59:94:16:2a:57:47:66:1f:1f:8a:
ce:5b:4d:23:0a:9d:38:0d:8e:d3:8c:1e:64:76:8a:
30:6b:b4:77:d0:ca:d7:4f:8c:06:9c:74:7f:df:77:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:45:BD:D2:CD:AC:74:41:3D:98:40:07:2B:97:A9:DB:12:3B:8E:98
X509v3 Authority Key Identifier:
keyid:AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5c:bf:3c:df:6b:09:7e:0b:8d:1a:59:0b:58:5f:1a:22:c8:
e1:e5:1b:31:52:ab:42:74:b4:9a:a9:6c:30:73:b8:a2:50:3d:
74:05:d8:0b:2e:e3:9d:d1:e5:be:2a:7d:d0:6e:58:2b:0f:7d:
bd:29:8f:b7:96:92:46:a0:90:b1:ce:a2:5a:bb:3c:79:b6:4d:
eb:80:5f:79:fa:f9:79:04:e6:22:9a:d6:e1:60:c6:f2:68:de:
65:c3:c8:cf:e2:0b:a3:85:e7:3a:da:f2:7d:d1:df:26:0f:78:
da:33:d9:27:9f:22:7e:6d:f9:1e:07:48:bd:e6:8b:4a:61:b1:
5c:59:03:78:26:14:f0:5a:a6:f7:1d:7d:05:41:16:fa:82:5d:
d5:48:0f:74:4a:0e:05:95:c3:f3:b8:7e:39:63:8d:d3:5f:44:
04:ae:24:cf:10:b7:89:c3:48:af:a3:d8:2a:1d:9b:07:05:25:
5d:8a:27:55:08:09:77:25:a4:3e:a4:6e:28:d9:07:7d:f9:0a:
23:e8:60:80:e9:b1:a7:96:6c:2e:c8:af:a2:60:75:c0:df:8a:
62:67:e0:26:42:db:31:ef:fc:09:7e:69:25:aa:e9:84:4d:af:
39:0e:f2:2d:1d:4a:7c:d0:d4:92:35:20:18:fb:b4:42:b3:3a:
7b:74:f7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 14:27:09 2026 by rpki-client