
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
File: ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft (raw, json)
Hash identifier: 0pdcShiY37lA8LWfZs6bg3TRRLYxRd5V30Bicin3u6Q=
Subject key identifier: 1E:52:3A:19:92:4E:B1:83:BB:DA:D1:54:DF:99:1B:60:6E:B4:0B:B2
Authority key identifier: AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35
Certificate issuer: /CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235
Certificate serial: 46B32F48BE8C897C93FC27EF320A6369B1FA4B52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 21:47:33 +0000
Manifest this update: Thu 24 Sep 2026 21:42:33 +0000
Manifest next update: Sat 26 Sep 2026 00:42:33 +0000
Files and hashes: 1: AS10217.roa (hash: rBN9V7NO+oNZzLzvFqCWOkrMsFmQrg1NnhxBG1/GfOM=)
2: AS45700.roa (hash: 4gylyPRrLCVxqv8jBeq1Y73wjMNwCZgjrx7f+jJHRfU=)
3: AS147168.roa (hash: WiiJ0UINkkiQHu9jLgZQhKLsdBs17smAwZtsfZdz3PU=)
4: ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl (hash: HDLYqIFffpNsQBZC++YxTOfdAnXTA9lmRu+AJF67Zo0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl
rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 00:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b3:2f:48:be:8c:89:7c:93:fc:27:ef:32:0a:63:69:b1:fa:4b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235
Validity
Not Before: Sep 24 21:42:33 2026 GMT
Not After : Sep 26 00:42:33 2026 GMT
Subject: CN=1E523A19924EB183BBDAD154DF991B606EB40BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:e5:bf:60:54:a7:17:d1:72:1d:b7:34:da:
bc:e0:c1:29:44:78:e2:6c:82:d9:8f:75:c2:3a:0b:
bf:47:47:43:a2:9e:b7:f4:61:0b:d4:2f:cc:a7:ee:
e1:60:71:1e:a8:a2:f8:dc:77:45:00:af:32:8d:8a:
e2:2f:89:bb:8a:2e:3f:9d:a1:dc:f6:de:c6:a7:9f:
4a:87:ad:a8:82:0c:dc:ed:e5:01:ed:8a:87:87:be:
fc:76:e3:d7:fc:2b:87:60:56:80:8f:ba:39:7c:d9:
9e:89:a1:f0:f3:24:ac:b7:77:5e:63:0f:0d:c6:af:
c2:e2:2d:3c:94:f2:9f:63:1d:e3:33:3a:63:bf:79:
12:64:2c:cf:2c:2e:c1:89:53:9b:56:69:e6:4d:ff:
a6:f2:63:0d:f0:c0:3e:b9:5e:fa:23:5a:6e:f0:45:
43:d4:8b:97:bf:be:0d:a8:50:78:e4:4a:de:71:2a:
53:e9:bd:93:37:92:1a:7f:75:52:c6:73:20:45:83:
3f:1c:0f:67:f4:a0:c9:e7:11:ea:05:d5:75:46:9a:
d4:c4:5a:06:43:c8:92:bf:c0:a2:d1:a8:22:35:68:
a0:aa:83:3e:5f:30:9a:bd:6c:f7:1f:a2:f0:1e:4e:
cd:6b:44:06:4e:b6:50:e0:9a:a9:a9:4e:99:03:9b:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:52:3A:19:92:4E:B1:83:BB:DA:D1:54:DF:99:1B:60:6E:B4:0B:B2
X509v3 Authority Key Identifier:
keyid:AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6a:a5:7e:21:6b:62:b4:ce:6c:8c:df:1d:9b:d3:96:f2:9b:
1b:3e:9e:94:fb:d9:3f:83:dc:8d:44:15:05:6b:7a:b9:9e:73:
d3:57:bc:11:9c:a2:6b:2c:62:e7:d8:72:2e:9b:9f:f3:45:62:
88:f1:41:4a:28:ed:6d:03:90:58:93:e1:e5:26:e5:e9:7c:c0:
2f:df:60:52:7d:14:d0:5d:26:bb:bd:ee:c7:20:05:d6:1a:9e:
8e:b5:41:cc:bb:33:52:7a:d2:58:55:f6:b5:ab:9a:67:ca:de:
19:eb:69:8c:6b:04:e9:6e:29:9c:37:14:72:a9:04:2a:b8:d4:
97:a9:55:f0:85:10:ee:05:a9:4e:69:c6:2c:ea:1c:d9:8c:e4:
14:f6:fb:1a:31:7a:34:3d:5f:8e:ac:9c:e3:89:99:95:38:e1:
2e:88:06:b9:e1:80:46:02:6c:a6:e4:d2:9c:8d:d8:05:f9:ef:
70:ba:9b:07:2f:a8:cf:7a:cd:5f:49:ea:e1:34:11:bc:31:96:
2a:95:c1:e1:46:38:83:42:0e:63:cd:75:35:b2:6d:f8:b1:37:
c9:f9:c9:b7:d7:cc:8c:cb:04:ec:28:65:83:ba:7e:28:ac:50:
79:0e:2b:9a:26:e1:34:2a:77:18:c8:cc:31:2f:11:59:42:48:
3c:6e:af:de
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURrMvSL6MiXyT/CfvMgpjabH6S1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJGRTZCMzE5NzE0NzMxMkVDMUZBRTA1QTI1MkEzOTY0
RTlCQjIzNTAeFw0yNjA5MjQyMTQyMzNaFw0yNjA5MjYwMDQyMzNaMDMxMTAvBgNV
BAMTKDFFNTIzQTE5OTI0RUIxODNCQkRBRDE1NERGOTkxQjYwNkVCNDBCQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhe+W/YFSnF9FyHbc02rzgwSlE
eOJsgtmPdcI6C79HR0Oinrf0YQvUL8yn7uFgcR6oovjcd0UArzKNiuIvibuKLj+d
odz23sann0qHraiCDNzt5QHtioeHvvx249f8K4dgVoCPujl82Z6JofDzJKy3d15j
Dw3Gr8LiLTyU8p9jHeMzOmO/eRJkLM8sLsGJU5tWaeZN/6byYw3wwD65XvojWm7w
RUPUi5e/vg2oUHjkSt5xKlPpvZM3khp/dVLGcyBFgz8cD2f0oMnnEeoF1XVGmtTE
WgZDyJK/wKLRqCI1aKCqgz5fMJq9bPcfovAeTs1rRAZOtlDgmqmpTpkDm4g/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHlI6GZJOsYO72tFU35kbYG60C7IwHwYDVR0j
BBgwFoAUq/5rMZcUcxLsH64FolKjlk6bsjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmZiNzA4MTgtMjM2Ni00MmUwLTlkYmQtMjU0MzgxMDY5ZTU3LzAvQUJGRTZCMzE5
NzE0NzMxMkVDMUZBRTA1QTI1MkEzOTY0RTlCQjIzNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQkZFNkIzMTk3MTQ3MzEyRUMxRkFFMDVBMjUyQTM5NjRFOUJC
MjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk
YmQtMjU0MzgxMDY5ZTU3LzAvQUJGRTZCMzE5NzE0NzMxMkVDMUZBRTA1QTI1MkEz
OTY0RTlCQjIzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ1qpX4ha2K0zmyM3x2b05bymxs+npT72T+D
3I1EFQVrermec9NXvBGcomssYufYci6bn/NFYojxQUoo7W0DkFiT4eUm5el8wC/f
YFJ9FNBdJru97scgBdYano61Qcy7M1J60lhV9rWrmmfK3hnraYxrBOluKZw3FHKp
BCq41JepVfCFEO4FqU5pxizqHNmM5BT2+xoxejQ9X46snOOJmZU44S6IBrnhgEYC
bKbk0pyN2AX573C6mwcvqM96zV9J6uE0EbwxliqVweFGOINCDmPNdTWybfixN8n5
ybfXzIzLBOwoZYO6fiisUHkOK5om4TQqdxjIzDEvEVlCSDxur94=
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:25:22 2026 by rpki-client