
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
File: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft (raw, json)
Hash identifier: M0iOA4+dN8E+YL+/Cnacw0yOpM+6MJ5SAMSEX/WP6Gw=
Subject key identifier: F6:F9:D6:D7:CE:A4:CB:57:89:BB:42:69:66:95:5C:A8:C2:B3:E6:29
Authority key identifier: AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD
Certificate issuer: /CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
Certificate serial: 71BD1D76C8355209202D122A126B30F7CC76E52B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 16:31:16 +0000
Manifest this update: Thu 24 Sep 2026 16:26:16 +0000
Manifest next update: Fri 25 Sep 2026 16:43:16 +0000
Files and hashes: 1: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: BWkQKxIfXCHfh/9a/7ZikuopxvR6ddCoDn8JEUuJXcg=)
2: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: jRoJloKWdBD0ievbpq3l4pAS4f1axSNzf++s/yOl2zM=)
3: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: P/QxCrf6WfKLvPGmKU57C3y4W+PW1Rf3us9X69RWmso=)
4: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl (hash: 8d3WegR+Cx76mkuBv88+Jcw8lnZAfZR8soVnRwWV49M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl
rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:bd:1d:76:c8:35:52:09:20:2d:12:2a:12:6b:30:f7:cc:76:e5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
Validity
Not Before: Sep 24 16:26:16 2026 GMT
Not After : Sep 25 16:43:16 2026 GMT
Subject: CN=F6F9D6D7CEA4CB5789BB426966955CA8C2B3E629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:a6:f4:43:d9:98:18:9f:cf:1a:06:f0:5a:
89:03:4b:b4:c1:cc:3c:4f:9d:da:7a:fb:41:d3:ca:
7c:e5:5a:24:e3:9a:17:9c:64:cf:76:b6:28:53:68:
cb:48:88:88:06:12:e6:c9:c0:06:06:c3:1a:18:05:
0f:fe:f8:ff:59:22:89:60:eb:f9:fe:15:1b:d2:76:
cf:02:c3:b0:22:11:e8:31:91:00:e5:9e:aa:23:45:
99:89:4f:5e:5f:65:07:37:4d:dc:b2:58:bc:bf:9a:
ee:2e:5d:39:14:79:b1:7b:c3:52:91:a4:0d:02:a3:
49:0a:36:0f:e8:ce:e3:da:ff:70:d8:00:e6:29:8c:
5e:b8:cc:51:54:11:ab:53:a0:15:5d:38:58:eb:82:
69:a4:ba:98:6f:9c:12:e2:2c:78:00:7d:71:bb:35:
16:04:e9:49:6f:45:c8:8f:f6:2d:25:91:02:9a:b7:
c3:71:e2:59:d7:58:a1:df:8d:8c:d9:37:02:98:e3:
b7:24:f6:86:34:2f:52:4e:68:b3:09:86:11:80:82:
89:cf:18:01:65:14:96:47:ca:84:61:d4:ce:8f:74:
73:4b:02:c1:18:2f:de:30:e2:72:69:3f:ba:38:77:
a4:42:16:87:4e:9c:fe:9d:5e:bc:0e:9d:43:49:b1:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F9:D6:D7:CE:A4:CB:57:89:BB:42:69:66:95:5C:A8:C2:B3:E6:29
X509v3 Authority Key Identifier:
keyid:AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8d:76:fd:11:13:2d:41:fc:e5:17:50:4c:fa:ed:07:48:61:
83:6d:34:1f:b2:34:95:54:cf:d1:f1:77:19:ee:d6:ee:93:ea:
aa:69:63:22:13:c1:41:ac:01:fe:f2:67:6f:cf:ee:a4:ae:67:
50:2f:96:5e:c7:e0:3b:4f:85:58:e7:0a:fb:5b:20:79:80:88:
6f:de:86:58:36:73:83:13:b7:40:b2:3a:fe:93:35:de:3c:8e:
02:2f:3e:5a:5e:31:65:90:2b:c8:12:c5:c4:23:ce:0b:25:03:
56:6d:d6:db:30:2d:d2:3c:a0:46:98:f3:44:af:8d:8e:d8:f7:
55:dc:cd:0a:9a:33:90:c8:22:8d:60:d6:96:67:36:25:c7:cb:
69:61:4e:d9:88:4f:3e:4f:ac:d5:ea:c3:7a:d4:20:c0:9c:4f:
b2:a6:3b:17:dc:54:40:d0:44:f1:89:3c:29:e5:b0:2f:07:24:
96:6e:42:b9:47:65:39:59:56:e5:2c:72:66:41:b8:a0:ee:09:
08:54:db:7a:6e:ce:6f:6d:03:00:19:45:07:a1:77:03:e4:81:
1e:7c:fc:49:3d:02:c1:04:90:7f:7e:1b:2b:4d:15:bd:05:6d:
40:70:94:b6:e3:3b:fc:1a:a7:d4:ce:c5:5d:a0:53:89:6d:c5:
ad:c9:61:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:01:16 2026 by rpki-client