
$ rpki-client -vvf rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft
File: AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft (raw, json)
Hash identifier: kQk2+o1faW7IM92Y/ZXUVwDq63c54Ea/sYqlazx2o2w=
Subject key identifier: AE:AE:45:E0:F5:E7:36:60:73:67:8A:A3:21:C2:AB:EC:E0:5C:B9:7E
Authority key identifier: AB:5F:90:55:2B:80:CD:C2:41:65:92:E5:FD:A7:73:F5:D6:6F:53:BE
Certificate issuer: /CN=AB5F90552B80CDC2416592E5FDA773F5D66F53BE
Certificate serial: 6DB4AC89E44CFC9DCF29648E58FF7D5C8211ACB5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:30:37 +0000
Manifest this update: Tue 12 May 2026 19:25:37 +0000
Manifest next update: Wed 13 May 2026 19:54:37 +0000
Files and hashes: 1: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: 8mWztPKHecvNCBMMV0cUZVPOGf2iWRWZndzDVuRiFm4=)
2: AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl (hash: PNK/KOGJZsGqAIyDaEjd2gTYl8Hq+Oj+lEWrOT2Ijmw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl
rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b4:ac:89:e4:4c:fc:9d:cf:29:64:8e:58:ff:7d:5c:82:11:ac:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB5F90552B80CDC2416592E5FDA773F5D66F53BE
Validity
Not Before: May 12 19:25:37 2026 GMT
Not After : May 13 19:54:37 2026 GMT
Subject: CN=AEAE45E0F5E7366073678AA321C2ABECE05CB97E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:61:e4:8b:7e:69:03:30:c3:95:d5:90:50:f8:
c1:5d:ab:35:01:4b:a4:45:47:4e:51:b7:83:67:02:
5a:ee:c8:29:cb:d7:07:4b:21:0d:dc:f9:a0:03:76:
d6:77:d3:63:be:29:03:cf:a8:91:62:a6:41:a8:b4:
61:21:2a:df:b3:d4:dd:7a:74:e7:99:4c:60:83:ed:
a4:aa:3e:f5:fb:58:96:e2:64:9c:8b:6d:f2:69:37:
3f:ef:bc:21:01:03:7e:96:e6:32:ff:d9:48:15:d8:
f3:52:b1:74:e8:4a:06:56:51:a6:f2:4f:3e:59:b3:
de:14:d6:46:4b:3b:dd:02:b9:23:0b:33:56:8e:c3:
9a:af:a5:91:1a:7c:24:02:0c:d5:e6:0a:2a:a6:68:
6b:19:37:ce:57:20:68:37:c7:e5:5a:f2:cf:74:9d:
30:fb:22:85:6c:3a:48:2b:64:77:ad:ba:a9:e8:7e:
68:d6:34:31:56:bf:59:c7:2a:2c:0f:90:af:83:59:
2a:bf:c0:91:3f:1a:6c:ae:1f:6a:7f:03:f8:b8:cd:
af:68:e9:b1:72:6b:6e:f0:dd:95:61:6d:7b:37:29:
8c:a2:75:bb:1a:d4:be:ab:29:59:9b:a5:c2:65:1b:
5c:dd:60:f3:b7:e9:48:19:d8:99:31:55:be:8e:b1:
01:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AE:45:E0:F5:E7:36:60:73:67:8A:A3:21:C2:AB:EC:E0:5C:B9:7E
X509v3 Authority Key Identifier:
keyid:AB:5F:90:55:2B:80:CD:C2:41:65:92:E5:FD:A7:73:F5:D6:6F:53:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/AB5F90552B80CDC2416592E5FDA773F5D66F53BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e6:66:7d:60:2f:01:c1:68:f5:4e:f4:a8:30:29:4e:d9:dc:
49:17:ba:2a:7c:9e:a6:68:00:f6:66:c7:5d:87:73:3e:94:ce:
68:34:5c:bc:08:2a:d5:0b:59:15:4f:78:94:6b:01:1a:81:f0:
f4:f3:ea:f6:f9:40:b7:78:46:a8:e3:79:36:dc:2f:b6:40:69:
69:02:b9:46:a2:ff:18:19:30:b1:af:cb:db:a4:f9:97:02:3f:
a5:d5:5c:20:65:0a:0d:4e:03:1d:14:86:7d:13:57:51:a6:46:
98:0f:00:96:09:ac:75:54:d5:f3:ed:e6:89:49:df:3c:e0:9c:
80:64:74:ae:08:a7:bc:44:27:fd:08:fe:c4:c1:d1:5f:a7:95:
97:70:7f:f7:1b:8e:f9:5b:e3:7d:a8:92:d5:6e:5f:62:e7:d1:
33:ce:c6:8f:5f:49:81:d3:87:a8:60:fc:15:ab:4f:78:6c:38:
55:6c:94:04:12:85:fd:fe:20:77:c7:9d:f6:8e:a7:02:af:9c:
af:ac:54:b1:2a:31:1a:f5:ea:45:f8:2a:1e:86:84:dc:06:b0:
6f:07:b8:53:b3:11:22:c5:c7:4d:22:a6:ca:d0:ca:75:ea:4b:
ca:39:48:4d:3c:85:a6:6f:5b:91:b5:0f:da:ba:3f:72:df:16:
75:ce:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:27 2026 by rpki-client