
$ rpki-client -vvf rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
File: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft (raw, json)
Hash identifier: gY7zP9FWJi+3ZlQq10BBicnqKFWzhffUzMjemWTktqE=
Subject key identifier: 7B:E1:36:86:6E:34:81:B4:D4:D0:46:3B:15:4F:6A:94:42:CC:C3:21
Authority key identifier: AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD
Certificate issuer: /CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
Certificate serial: 13E4CAC41F8470FC9569F5D743A1DB04FEB024A6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 03:54:12 +0000
Manifest this update: Fri 24 Jul 2026 03:49:12 +0000
Manifest next update: Sat 25 Jul 2026 06:30:12 +0000
Files and hashes: 1: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: jRoJloKWdBD0ievbpq3l4pAS4f1axSNzf++s/yOl2zM=)
2: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: P/QxCrf6WfKLvPGmKU57C3y4W+PW1Rf3us9X69RWmso=)
3: AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl (hash: snNajIRdi0FV4aEZT2kqeE4qWOguA/FbvtDYJ4rpBNs=)
4: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: BWkQKxIfXCHfh/9a/7ZikuopxvR6ddCoDn8JEUuJXcg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl
rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:e4:ca:c4:1f:84:70:fc:95:69:f5:d7:43:a1:db:04:fe:b0:24:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
Validity
Not Before: Jul 24 03:49:12 2026 GMT
Not After : Jul 25 06:30:12 2026 GMT
Subject: CN=7BE136866E3481B4D4D0463B154F6A9442CCC321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:64:b7:f3:f9:53:a3:04:e0:e2:0c:ca:a3:
a9:5d:32:ea:7b:ba:58:59:1f:e0:a6:c6:09:df:fb:
84:92:2b:07:39:df:68:17:de:de:c0:21:e4:63:e3:
66:81:c2:26:0a:c7:75:8d:1b:c6:f1:c0:61:44:8f:
ea:84:23:a3:95:e3:c5:b4:6b:45:6b:7c:d8:cf:41:
bc:73:50:b0:56:e3:98:0c:4e:50:1f:10:73:1b:61:
67:ab:b2:cf:ed:4c:80:2c:4b:16:66:e6:41:67:7f:
38:ab:b9:d9:02:0c:0e:02:0b:52:b0:ca:82:cb:28:
7b:6e:b9:8e:88:f2:75:d6:0d:2c:22:ce:a8:a9:ae:
2c:40:79:3f:ec:2b:16:84:ff:76:c7:f2:13:5f:f6:
e2:38:4b:2e:29:24:af:1c:f6:9b:a8:a5:61:2e:ed:
c9:a7:7c:fe:cb:37:11:4b:64:a4:a9:8a:ce:cc:9d:
24:08:d6:e8:8a:ed:6d:ab:32:ee:98:b0:64:d4:1a:
bd:ba:80:f9:02:7c:49:17:fa:2f:50:98:55:a4:03:
09:88:1f:98:b0:a9:88:2b:71:76:25:b3:71:cf:8a:
82:01:50:72:90:3f:96:01:c8:a0:1a:bd:41:e1:6f:
a7:c6:e1:ca:a0:e4:9e:0d:ea:5d:b5:12:b8:eb:0b:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E1:36:86:6E:34:81:B4:D4:D0:46:3B:15:4F:6A:94:42:CC:C3:21
X509v3 Authority Key Identifier:
keyid:AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c9:04:32:13:04:ce:09:0c:c0:dc:98:46:c7:d1:e5:43:2a:
45:4d:b1:ae:4b:9e:b4:d6:2a:22:7e:11:48:63:16:44:4f:32:
98:73:55:af:6c:cb:2e:70:5b:08:0f:d8:50:3e:80:07:75:51:
21:10:45:58:68:9a:bb:c7:4d:43:73:f3:54:5a:f7:b4:2d:1d:
76:2f:e2:03:82:7f:48:26:78:f5:10:55:94:6c:aa:2c:f4:dc:
3a:39:75:b1:93:fd:5b:6b:94:37:4e:88:20:3d:ab:59:4d:dd:
ba:7f:d3:a2:43:45:d9:81:62:22:c8:13:09:0d:22:47:a3:5d:
12:1f:cf:d4:1d:fe:93:0b:e7:df:9a:8c:52:ef:33:0c:16:f3:
c7:f4:3e:51:a4:d0:03:e8:d4:47:b0:a8:14:69:b4:fc:8c:54:
5c:a6:45:0e:b7:7e:8e:08:0c:53:c6:81:e1:b0:7a:48:a5:c9:
12:e0:1b:51:09:54:64:ec:85:84:da:9e:11:05:e4:cf:dd:3e:
e2:dd:7e:ae:75:08:97:68:ae:97:1d:e0:72:1b:3b:3e:ce:79:
99:a7:81:34:76:59:b2:50:22:89:d4:d8:d3:52:bc:d4:86:23:
1b:af:4b:b4:87:88:2d:ac:74:de:8d:d4:99:b7:f5:a6:ff:82:
8e:2e:8d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:29:08 2026 by rpki-client