
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
File: AAB4671D9735066964F008C9DDFC52C3A710E040.mft (raw, json)
Hash identifier: RWprHg5PK7F/Gzo6Y8FSRYKeOdy1MAyb+CWc6bTs4bo=
Subject key identifier: C0:65:90:1E:F5:D8:9C:47:E2:F0:23:A5:A7:BC:84:FD:4D:03:08:96
Authority key identifier: AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40
Certificate issuer: /CN=AAB4671D9735066964F008C9DDFC52C3A710E040
Certificate serial: 6F10C6A6725754F7FC6EB8BD40321EB3A047EA02
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
Manifest number: BF
Signing time: Wed 23 Sep 2026 18:03:20 +0000
Manifest this update: Wed 23 Sep 2026 17:58:20 +0000
Manifest next update: Thu 24 Sep 2026 19:00:20 +0000
Files and hashes: 1: AAB4671D9735066964F008C9DDFC52C3A710E040.crl (hash: ApumQ3lbSOAvAD3TxG4fZ+iDu1P+NV3HiTE7DwWnpg8=)
2: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: unzh605AgxMrS8kL6fN+yePqm6X/AD3ox4pCc7I8/VY=)
3: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: aJngYofxYM8aRo7ASuGSX++bpTmrKYXt3y7dtT5WC2Y=)
4: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 42yHJRCL2UkIYvPUKITyhrxYXg51+0nJdl91wdx0sEk=)
5: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: WYe5M8+W5wSg2Rfo76ZEu34y6MT+kHyqh2vkljV+QtU=)
6: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: NXMKeEFbtGD5jl2gs5Op2j9jmwYVlgv0YYaBKtfr4gA=)
7: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: B0g8+pDAE4Q/0GBSFMta6Y5XLkcrXAH8CA4qOj5PkCE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl
rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:10:c6:a6:72:57:54:f7:fc:6e:b8:bd:40:32:1e:b3:a0:47:ea:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAB4671D9735066964F008C9DDFC52C3A710E040
Validity
Not Before: Sep 23 17:58:20 2026 GMT
Not After : Sep 24 19:00:20 2026 GMT
Subject: CN=C065901EF5D89C47E2F023A5A7BC84FD4D030896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:6e:d7:c6:ad:42:b8:a2:f5:2b:0d:a0:7c:
68:b2:03:68:63:44:07:a5:38:d6:44:11:8a:27:f4:
2d:60:70:05:bb:f0:1c:a5:d1:8b:d8:49:3e:ba:12:
51:0c:f0:53:e8:0e:ae:ec:6b:73:6f:72:a0:c5:09:
3d:95:ed:a0:33:cb:51:34:13:90:be:1e:81:d5:5e:
d6:e4:37:4a:d8:45:8e:ce:11:c4:23:6f:13:8e:39:
4a:22:1c:d4:88:53:8a:8a:97:7a:54:23:3b:94:f8:
1f:79:8a:ec:3b:a1:d1:79:63:4c:c1:70:af:b3:3a:
93:fb:a9:12:21:85:6d:c8:74:66:91:fe:cf:45:b6:
60:ef:1e:ac:0c:af:39:d5:08:ab:61:18:23:3e:b0:
08:42:47:61:d6:dd:c6:f6:f4:f6:76:aa:b7:95:02:
49:5b:ff:0c:22:32:77:13:36:36:f0:23:9c:a9:71:
1b:18:3f:45:1a:96:48:27:89:9a:1c:d3:61:74:ae:
eb:ca:49:17:dd:14:5b:cb:30:1c:34:3d:82:a6:15:
56:97:2c:70:e8:60:3e:4f:db:47:9b:c3:29:41:1a:
7b:15:df:90:53:aa:61:9d:13:45:d8:9d:18:09:45:
30:b3:cf:c0:5b:4f:e0:e6:95:2c:fb:f5:62:07:d7:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:90:1E:F5:D8:9C:47:E2:F0:23:A5:A7:BC:84:FD:4D:03:08:96
X509v3 Authority Key Identifier:
keyid:AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:80:ae:e5:5d:6d:d7:8f:56:a4:c9:2a:3d:48:17:f4:ab:d2:
75:76:eb:0b:55:2b:8b:7c:13:4c:12:39:14:87:e4:96:64:c1:
ba:f1:43:a5:84:be:cd:a2:68:fa:e7:fe:33:89:a3:c0:9e:56:
bc:a9:68:7c:4e:60:11:8b:be:d0:f7:eb:25:08:20:3e:ae:2d:
df:e4:59:61:f7:f1:21:25:d0:67:a4:3b:e3:3f:c9:d2:e9:12:
b9:51:3d:80:76:a2:b4:45:fa:19:21:b8:8a:fc:89:82:dc:e6:
62:f8:cd:30:ed:60:6a:9a:32:db:e5:3f:d3:75:32:1d:57:99:
7a:d2:4f:9d:98:32:d0:fe:72:37:36:44:37:16:fa:76:be:27:
a4:06:9a:53:8a:55:03:08:a8:c6:d5:fe:d3:9a:28:d7:ce:04:
ec:df:f1:bf:eb:15:cc:21:4e:9a:2f:f7:f5:d7:88:ff:57:df:
1c:4a:d8:9a:3e:1d:33:27:16:46:6e:e3:10:bf:68:30:94:4a:
1a:16:8f:96:2b:a6:ee:4d:25:0c:14:16:09:02:63:48:3f:18:
74:36:0e:7d:8f:92:fa:16:f0:34:dd:51:6f:87:9f:d0:f7:d5:
20:47:88:ac:3a:39:98:97:1f:2e:75:13:65:64:96:cc:62:30:
23:98:99:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:24:58 2026 by rpki-client