
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft
File: ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft (raw, json)
Hash identifier: K6+wI9eNPK/cxYFWRoNCGUzj1nKRj5vqtBiKXesZEx4=
Subject key identifier: 15:87:D2:E2:70:3E:EC:29:08:86:B2:33:84:FA:1D:0B:24:E7:92:8A
Authority key identifier: AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E
Certificate issuer: /CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E
Certificate serial: 7B868F02A1FE1B12E2864ED73B209C43C83D1ED6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:35:58 +0000
Manifest this update: Tue 12 May 2026 22:30:58 +0000
Manifest next update: Wed 13 May 2026 23:22:58 +0000
Files and hashes: 1: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: uu/0xcXb1PYlNEUXcZ5naLQoAfY3PIEB9peDrBii6OE=)
2: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: OVNMe4OE8mfb+ubuXXAIKWm5rCKg5fDWbzjdPw4VCv4=)
3: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: nlhGLBRQhzgZ/MpT9mzD1/9LbZWhXsE7bI4qUYh5tIM=)
4: ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl (hash: TR0Y7EeOYk1WRWQ4QmiQpqlADobn4ml5CKHXllaHaJI=)
5: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: OOoHvJFdkLhmptHnukqX1ww9TIfJj00AYl9UOR0Cn10=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl
rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:86:8f:02:a1:fe:1b:12:e2:86:4e:d7:3b:20:9c:43:c8:3d:1e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E
Validity
Not Before: May 12 22:30:58 2026 GMT
Not After : May 13 23:22:58 2026 GMT
Subject: CN=1587D2E2703EEC290886B23384FA1D0B24E7928A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:d4:33:5d:7a:e2:3b:a6:ad:9f:af:a2:54:
3a:73:3b:17:16:9e:c1:be:6e:b0:57:3f:b5:b4:ef:
a5:e6:dc:7f:4b:8d:1f:e9:51:ca:49:2b:ea:77:d6:
da:b0:10:92:64:1f:cc:dc:f7:1e:7a:a8:67:39:c6:
1a:45:af:c9:90:23:26:52:1b:77:c4:b0:9b:b6:d4:
bb:f1:cf:76:e1:2f:e5:0a:ec:61:50:e0:bd:aa:73:
35:d8:56:be:21:66:02:67:19:34:bf:21:2d:fa:1b:
f9:64:2e:a0:2d:bd:00:17:25:97:ff:7c:d2:08:7b:
e2:05:95:4b:9b:50:7a:e1:07:f1:9a:df:3f:31:02:
56:52:53:12:a0:a1:e2:90:1e:2b:1e:c9:09:b5:4f:
4f:c2:63:e1:99:f8:f7:7e:f9:18:a9:75:15:c5:34:
34:e4:f2:fc:ab:16:62:7c:63:37:2e:a3:a3:e4:09:
e1:52:55:8e:cd:22:73:0b:95:99:f0:3a:62:fe:2d:
76:6d:31:07:9b:37:35:42:ab:5c:8d:6e:15:f6:8e:
3b:e2:02:2f:0f:70:ee:00:e9:b1:84:1b:06:bd:52:
76:fc:53:90:5a:27:88:ba:94:24:cd:d0:42:73:a7:
98:55:eb:64:54:2a:58:33:cc:95:e1:7a:f4:2d:3b:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:87:D2:E2:70:3E:EC:29:08:86:B2:33:84:FA:1D:0B:24:E7:92:8A
X509v3 Authority Key Identifier:
keyid:AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3e:98:12:1b:af:ef:b7:5b:53:ee:ab:65:4e:f5:6a:a1:43:
ee:8b:0d:db:7f:79:8c:8d:5c:ef:7e:4b:b4:d2:d9:0c:b3:48:
cc:58:16:5b:bc:7d:93:87:3b:b9:ce:a6:9b:ae:72:b1:c3:db:
e6:6a:19:e9:3d:21:70:5a:df:02:e4:b0:8d:04:46:93:07:67:
aa:a5:61:28:a7:cf:c9:d3:b1:20:6b:a7:15:e6:2b:ef:12:e2:
cc:e2:c9:3e:27:cf:83:59:b3:75:f3:86:a1:5a:98:71:2d:48:
59:95:5e:3f:fc:f2:ec:b5:f6:73:b3:cf:65:b7:f6:bd:44:a4:
c2:fa:58:cb:5d:7d:1a:3e:06:d7:bf:d1:67:62:24:5d:9b:59:
9c:0b:94:52:e4:ae:e5:8a:90:fc:b2:92:d3:10:e5:92:fe:00:
4a:b5:2d:9a:d9:0a:52:3c:68:ee:6d:52:13:31:dd:f8:2f:31:
a2:d7:bd:30:56:47:e8:6c:14:86:f7:e6:58:fe:68:15:5e:f5:
79:57:4c:02:46:80:1c:ff:9b:83:04:05:f4:8a:2f:53:25:3b:
52:83:6a:49:dd:da:b3:98:d0:22:6d:a5:d5:1f:47:3d:ef:53:
92:54:b8:8c:3d:ea:f4:21:b0:c6:c2:9b:86:42:ac:61:86:1e:
3a:ea:f1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:58 2026 by rpki-client