
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
File: ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft (raw, json)
Hash identifier: 2Wzf7QQcmaH0kx3AT6vJ9stevMt0bter8lmvyOZ07MI=
Subject key identifier: 50:29:BA:94:FE:77:2D:A4:39:E5:67:07:6C:2E:F4:23:BA:0D:84:A2
Authority key identifier: AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35
Certificate issuer: /CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235
Certificate serial: 0E7E0D3EBA2E7EA021F30FEA6EBD8AC49FBAB59B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
Manifest number: 0105
Signing time: Sun 15 Nov 2026 05:20:52 +0000
Manifest this update: Sun 15 Nov 2026 05:15:52 +0000
Manifest next update: Mon 16 Nov 2026 07:57:52 +0000
Files and hashes: 1: AS10217.roa (hash: rBN9V7NO+oNZzLzvFqCWOkrMsFmQrg1NnhxBG1/GfOM=)
2: AS45700.roa (hash: 4gylyPRrLCVxqv8jBeq1Y73wjMNwCZgjrx7f+jJHRfU=)
3: AS147168.roa (hash: WiiJ0UINkkiQHu9jLgZQhKLsdBs17smAwZtsfZdz3PU=)
4: ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl (hash: mVXHA9uLfg3JpUzCYtghIPQItWsKxi1YF8bKPaHrUxI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl
rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 07:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:7e:0d:3e:ba:2e:7e:a0:21:f3:0f:ea:6e:bd:8a:c4:9f:ba:b5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235
Validity
Not Before: Nov 15 05:15:52 2026 GMT
Not After : Nov 16 07:57:52 2026 GMT
Subject: CN=5029BA94FE772DA439E567076C2EF423BA0D84A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:30:7c:4d:81:70:90:e4:46:d6:d7:15:b0:
39:b1:ee:05:75:cf:e8:60:c0:48:c3:74:f8:2f:58:
71:aa:69:ff:dc:a5:f4:4a:7d:d5:fb:b0:fd:53:32:
c5:bc:0f:08:ad:71:66:ff:b9:bf:a7:1a:66:f1:50:
75:31:db:8d:3f:61:94:77:91:21:ff:bd:5f:42:5a:
7b:b8:76:f7:7f:dd:62:17:25:58:5e:f8:a4:e5:5d:
64:e3:75:86:a1:93:9a:e7:3f:7c:6f:84:d8:62:46:
e2:de:2d:b6:4a:a3:87:50:b0:a4:82:60:6c:fc:5a:
7f:f3:22:fa:29:b2:b6:4a:9f:6b:33:60:76:a4:1c:
3e:67:da:40:b5:0b:08:d3:02:a2:04:33:01:04:ad:
4c:8e:74:78:d7:9d:d2:8f:b6:d7:28:5c:ce:af:31:
77:ca:47:5b:d9:6b:42:c5:1d:fd:6e:5c:32:13:eb:
52:bc:d7:e1:3b:f0:fa:43:09:e6:a9:5e:22:70:90:
44:f8:27:5a:d9:9e:df:53:f7:98:60:93:e3:64:94:
11:3a:67:ec:a6:32:7d:8a:f8:28:e4:88:cf:26:2e:
7b:58:73:fe:81:46:50:bc:a0:72:48:d3:ff:08:01:
e9:d4:de:d2:5a:51:68:d8:d5:08:5e:a0:d6:4e:cf:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:29:BA:94:FE:77:2D:A4:39:E5:67:07:6C:2E:F4:23:BA:0D:84:A2
X509v3 Authority Key Identifier:
keyid:AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8a:bb:48:be:46:5e:c3:fa:a3:76:9a:c7:be:af:6a:8c:c8:
b3:2f:ac:d6:0e:30:d5:4c:3b:d6:64:6c:3d:46:70:52:38:4c:
84:8f:64:ed:3b:1a:aa:14:21:5d:4b:d4:a5:4a:10:39:1c:29:
aa:29:f5:2f:4c:94:75:46:8d:29:24:a1:93:b3:5c:0e:60:bf:
73:d0:98:2e:c0:c8:60:84:a3:9b:99:a1:8e:3b:cc:f1:4a:1f:
94:6e:d6:c1:cd:1a:aa:80:e8:8d:9c:cb:b5:b3:95:71:c2:c5:
4c:c5:0f:ea:31:c1:42:81:be:49:47:7c:35:bb:96:09:6b:0a:
cc:07:4e:63:0c:58:3f:fc:8e:34:da:39:8c:03:98:81:f9:31:
69:02:66:52:9c:60:0b:86:21:43:de:40:7b:39:f8:7e:b7:0f:
e7:16:8a:e4:99:29:2b:77:68:0a:c6:83:88:d3:2e:44:71:6e:
4e:dc:86:16:57:84:8b:b4:fa:be:0d:5b:e6:09:85:36:d7:aa:
82:ab:6e:74:3d:a9:80:67:75:10:6d:63:ef:27:5f:de:24:d4:
e0:ca:b7:7c:f1:84:23:d9:9d:b4:14:d1:66:29:3a:dc:47:ce:
f5:a5:12:1c:1b:ce:d6:3c:88:81:9b:91:fe:54:24:a5:c1:55:
08:aa:88:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:21:52 2026 by rpki-client