
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft
File: ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft (raw, json)
Hash identifier: EtYQwkyqIpWVavIsqx8e5jhO9RIb24ZNCQKz/pwOAMM=
Subject key identifier: F7:E6:14:1D:E7:0E:F9:21:FD:FF:05:BD:E8:CE:B2:B3:56:02:71:82
Authority key identifier: AB:ED:71:E9:F6:44:DC:0B:71:AF:71:A2:59:01:C0:55:1B:1F:13:4B
Certificate issuer: /CN=ABED71E9F644DC0B71AF71A25901C0551B1F134B
Certificate serial: 5D9F45FAF0D8B230FF4CFE28E07AE78B2AB2B863
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft
Manifest number: B7
Signing time: Wed 16 Sep 2026 16:49:59 +0000
Manifest this update: Wed 16 Sep 2026 16:44:59 +0000
Manifest next update: Thu 17 Sep 2026 18:56:59 +0000
Files and hashes: 1: ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl (hash: 3BRdxKQr/dHr1VnAJNCqnyuuhzdcQbicZyFH6+vR1l8=)
2: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: QTvSNhE992wCS0VNXGZ4QrTW5fEG/UCs6bm/K+0HXAk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl
rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:9f:45:fa:f0:d8:b2:30:ff:4c:fe:28:e0:7a:e7:8b:2a:b2:b8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED71E9F644DC0B71AF71A25901C0551B1F134B
Validity
Not Before: Sep 16 16:44:59 2026 GMT
Not After : Sep 17 18:56:59 2026 GMT
Subject: CN=F7E6141DE70EF921FDFF05BDE8CEB2B356027182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:cd:30:09:11:9c:8f:fe:dc:8c:59:a1:98:
6e:39:1e:7a:e4:1b:b1:f6:14:64:9d:58:95:5e:17:
4c:09:28:b5:4b:e2:61:39:fe:fc:ff:6b:3f:97:74:
11:21:aa:2b:32:e0:53:f9:cd:6b:be:12:94:5d:ab:
7b:37:bd:ae:c8:96:7e:90:00:9a:f5:8d:73:70:04:
3b:d7:58:c0:d9:af:5d:ea:5d:e1:b2:22:7f:72:7e:
ab:2d:14:f3:ab:12:dc:57:3d:c8:8e:f6:3a:02:66:
73:b8:d3:3b:0b:a6:c5:21:c9:82:28:88:f3:73:9f:
53:ee:9a:3c:24:e7:4e:1f:00:b3:5f:30:bb:e4:63:
63:de:8b:26:bc:69:5e:67:92:b8:5a:68:e7:10:4a:
74:d8:65:54:b3:eb:46:06:a9:7c:43:03:7f:8a:0d:
05:ca:af:a0:53:7e:a9:5a:05:25:d7:3d:3b:41:bc:
53:70:0a:ba:16:57:66:ed:c9:be:af:5e:6a:0d:29:
8b:6b:5a:79:4e:30:fc:cb:ba:a6:dd:61:72:7e:45:
e4:26:3b:6a:cd:7a:b1:83:a4:df:a6:21:87:1c:ff:
84:36:e7:00:40:e7:84:86:ab:12:fb:53:57:92:e8:
4b:3b:fa:81:cf:c7:f7:ba:a5:51:48:3d:64:1b:12:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E6:14:1D:E7:0E:F9:21:FD:FF:05:BD:E8:CE:B2:B3:56:02:71:82
X509v3 Authority Key Identifier:
keyid:AB:ED:71:E9:F6:44:DC:0B:71:AF:71:A2:59:01:C0:55:1B:1F:13:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABED71E9F644DC0B71AF71A25901C0551B1F134B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ABED71E9F644DC0B71AF71A25901C0551B1F134B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:37:ae:14:d3:8c:af:5f:e3:5f:80:8b:a0:ae:b9:f7:fb:01:
ac:97:fd:0f:c0:dd:8f:5a:82:0f:24:00:18:de:85:4e:56:da:
5a:f1:2e:14:e9:f3:f7:42:75:67:44:6b:f8:9a:53:57:dd:28:
0c:95:2a:2a:69:a9:0a:0f:cd:7f:8f:59:01:2b:be:ba:e8:49:
16:13:7d:f9:24:f7:70:c7:0a:92:f1:78:a0:ca:8c:6c:cc:85:
a0:16:26:1c:d9:a1:ce:b0:dd:45:26:af:70:ae:ae:65:a0:59:
9c:e9:f2:ba:55:2e:da:6b:10:43:46:01:da:75:a7:9f:5b:16:
ad:a9:1f:c8:f4:29:76:f6:4a:9d:73:60:e8:03:f9:7a:81:a8:
70:e6:fc:dd:dc:0f:1f:df:2b:42:97:22:08:5e:61:37:68:bb:
a8:c8:a1:ba:0b:3f:e6:af:92:06:62:df:a4:65:fe:60:b5:8d:
00:cf:f4:83:36:87:51:2e:cf:28:0f:c7:b0:1c:1e:74:be:cb:
c8:c5:e4:70:1e:eb:b5:77:78:20:a0:ee:0d:f3:c3:4d:10:b8:
bc:fb:e9:a6:3f:50:e0:53:0a:20:29:32:10:3b:4e:5d:08:29:
70:87:79:8c:c3:8e:74:e7:f4:d2:19:9f:cb:76:52:0a:aa:0f:
40:1d:46:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:19:33 2026 by rpki-client