
$ rpki-client -vvf repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft
File: ABF793B534686EC2D5820CF153E43AAEF088BE41.mft (raw, json)
Hash identifier: Asjy3g8XoxGuxUpcAR8AGSLGIAgKZxucQrOK6yQ/Bg8=
Subject key identifier: B5:06:F4:85:34:7D:FA:BD:45:4E:A8:8A:BE:84:34:5B:46:60:67:27
Authority key identifier: AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41
Certificate issuer: /CN=ABF793B534686EC2D5820CF153E43AAEF088BE41
Certificate serial: 02B5EF8C4DFC76C7D6C728ADB9EA168C69007819
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft
Manifest number: 0122
Signing time: Tue 24 Mar 2026 17:41:11 +0000
Manifest this update: Tue 24 Mar 2026 17:36:11 +0000
Manifest next update: Fri 27 Mar 2026 20:32:11 +0000
Files and hashes: 1: ABF793B534686EC2D5820CF153E43AAEF088BE41.crl (hash: oSqbrtwlxGG2bO1NcPYPYpekAzh9DBzzK8//waDVbBo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl
rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 20:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:b5:ef:8c:4d:fc:76:c7:d6:c7:28:ad:b9:ea:16:8c:69:00:78:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABF793B534686EC2D5820CF153E43AAEF088BE41
Validity
Not Before: Mar 24 17:36:11 2026 GMT
Not After : Mar 27 20:32:11 2026 GMT
Subject: CN=B506F485347DFABD454EA88ABE84345B46606727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:16:9d:f9:64:11:70:2b:b4:bf:a0:31:22:c9:
cb:a1:61:5e:e3:e9:b6:c5:8f:79:23:4a:a7:30:79:
9b:79:53:24:6a:66:68:c5:96:f4:59:5c:73:4a:92:
4f:bc:2f:ba:23:c5:52:2e:9f:f9:e2:2f:1e:cc:93:
a6:92:99:b3:80:20:5c:74:da:c9:5a:96:96:46:c7:
2f:36:dc:0c:fe:99:43:65:7b:b3:bb:fc:a7:af:32:
c9:57:b2:7b:dc:ac:d3:ee:fc:67:47:c6:a3:55:6e:
cd:fd:49:1c:59:32:1b:1f:e3:05:57:3c:ee:41:42:
22:8c:c1:a0:d4:ee:ab:08:a4:8b:86:41:97:85:2e:
58:d4:62:f0:64:b9:d7:78:49:34:10:aa:3e:a5:e3:
0e:6c:b6:ca:fe:b1:5c:35:d4:ea:da:53:78:0c:e1:
65:b2:c6:a9:17:48:5b:b5:08:24:71:74:16:97:2f:
e6:69:13:d9:43:b1:bd:00:23:07:33:84:fa:c9:b5:
cf:a3:71:12:df:25:f2:cd:14:86:6a:f2:af:f7:cd:
4b:54:40:39:9a:e4:4e:9c:20:05:c0:85:90:43:25:
e8:b1:5f:94:f8:bc:a5:1d:db:56:ba:c9:09:07:3f:
14:d2:11:8d:33:70:64:28:29:ce:d8:f9:45:f0:41:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:06:F4:85:34:7D:FA:BD:45:4E:A8:8A:BE:84:34:5B:46:60:67:27
X509v3 Authority Key Identifier:
keyid:AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b8:7b:e7:86:62:c9:0a:94:03:1e:a5:da:43:db:84:1f:57:
ca:91:13:fe:6e:70:0a:02:83:95:17:6a:60:66:bd:67:07:cd:
17:31:62:9c:a7:f1:f5:67:ff:1a:56:3c:25:84:0f:56:2b:ba:
11:eb:24:d6:17:ee:9a:13:98:94:b5:02:12:10:52:a4:b2:d9:
7a:3d:76:a5:1a:c3:98:33:54:c3:45:f7:d8:d2:ef:46:15:e8:
d2:ae:c7:ad:13:3a:4b:59:be:c2:fa:f3:29:be:0a:97:b5:eb:
0f:d7:b7:5d:39:2b:6e:71:95:b9:93:2c:1d:c1:1e:02:b5:3e:
74:b4:31:6f:60:d3:35:b9:32:a5:09:14:7f:e1:1c:d0:52:2d:
4d:57:17:2c:64:99:ca:fa:89:4c:85:20:58:be:f9:9f:1b:ca:
45:15:2f:93:ae:d7:00:9e:26:11:31:4f:7e:86:43:2f:34:65:
3e:7d:e5:48:b8:a5:dd:8e:85:40:78:42:f3:2c:28:b1:2f:6d:
5a:48:42:65:1b:b6:1f:e1:f5:09:37:75:d4:60:23:54:8b:fd:
ac:34:55:3f:8e:61:84:ef:b3:ba:bf:2f:b0:c2:f3:5e:16:16:
d0:ad:93:0b:45:6d:f0:bf:5f:76:62:e4:f2:a0:1a:38:62:91:
64:1c:5c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:13 2026 by rpki-client