
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
File: ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft (raw, json)
Hash identifier: swxjhUsqU5Bh9eY7SrP4Jqkk5j2q9WQmNCEHqLbBA4E=
Subject key identifier: 28:E3:00:A1:A0:FB:C2:77:14:79:A8:07:1F:B2:5E:59:1F:7E:6A:7C
Authority key identifier: AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35
Certificate issuer: /CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235
Certificate serial: 16033B3C7CB151D15833338065A81A3BD7D41E16
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 06:00:08 +0000
Manifest this update: Wed 17 Jun 2026 05:55:08 +0000
Manifest next update: Thu 18 Jun 2026 07:47:08 +0000
Files and hashes: 1: ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl (hash: RmCa4jfiEJpqlZN/tnLzCq1SY2DFtaNYkPx8HGnTCLY=)
2: AS10217.roa (hash: rBN9V7NO+oNZzLzvFqCWOkrMsFmQrg1NnhxBG1/GfOM=)
3: AS147168.roa (hash: WiiJ0UINkkiQHu9jLgZQhKLsdBs17smAwZtsfZdz3PU=)
4: AS45700.roa (hash: 4gylyPRrLCVxqv8jBeq1Y73wjMNwCZgjrx7f+jJHRfU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl
rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:03:3b:3c:7c:b1:51:d1:58:33:33:80:65:a8:1a:3b:d7:d4:1e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235
Validity
Not Before: Jun 17 05:55:08 2026 GMT
Not After : Jun 18 07:47:08 2026 GMT
Subject: CN=28E300A1A0FBC2771479A8071FB25E591F7E6A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f5:96:50:86:ce:7d:9e:67:6b:e7:73:32:21:
13:6e:46:f8:4c:0c:7e:dc:f6:3c:c3:d1:fe:e6:5a:
b6:09:a5:90:6b:ad:da:8d:d7:79:db:6e:bd:0f:d7:
cb:a6:b0:e4:c2:a3:a5:ec:f5:9f:77:d0:93:90:56:
51:ac:cd:e1:94:31:50:95:1e:b8:12:ce:cc:09:41:
e5:0e:cf:74:90:c2:90:08:33:51:e9:bf:a1:0a:fd:
1f:6f:ef:c3:33:6b:3e:eb:01:0c:b8:01:38:02:ad:
30:02:d8:ce:64:18:d8:61:78:b6:97:3c:0f:a8:fc:
8f:cf:5d:36:fc:23:96:f5:3a:97:47:f0:e3:4a:80:
6d:c1:4b:89:0b:e0:38:e8:22:2e:87:a7:59:57:15:
a2:e5:df:cc:29:0b:05:a4:67:33:ec:bd:b1:04:28:
64:5e:5e:f4:a3:3c:3f:35:08:fd:14:6c:a2:d0:e0:
f1:ec:2d:85:60:e5:a4:17:35:80:a6:66:92:77:fc:
45:c5:84:ce:f9:9d:4c:98:f8:ba:75:5f:f8:a6:5c:
51:1a:29:70:18:87:d6:b9:55:1b:97:72:0a:d4:dc:
a0:5f:0f:d2:9a:c4:42:c1:6d:90:39:9d:c2:74:02:
a7:f7:1e:b8:ac:e3:f3:9e:1d:75:fe:99:13:58:df:
1b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E3:00:A1:A0:FB:C2:77:14:79:A8:07:1F:B2:5E:59:1F:7E:6A:7C
X509v3 Authority Key Identifier:
keyid:AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f9:83:1f:e1:42:fd:4e:4b:93:5c:7e:f0:1b:01:f9:c6:fe:
83:b7:0a:f4:e9:3f:b1:c2:21:e6:e3:3b:ac:8a:b1:b7:59:8f:
96:de:b4:ec:42:6e:61:3d:10:d2:c5:20:58:b2:d6:5f:45:b5:
0f:36:0d:fa:07:4f:b8:f6:60:60:a7:9e:ba:7b:91:a3:f9:06:
6c:89:f3:80:f8:58:5c:22:c4:bd:bd:0c:9f:b8:dc:59:8c:66:
7d:e9:a7:ac:02:b3:d1:53:aa:fa:dd:aa:de:f9:c3:e4:e7:ef:
67:fd:70:86:5f:c4:85:4f:03:7e:30:9d:f9:91:1a:87:24:84:
2a:e1:11:97:e0:87:f1:8d:be:a8:a8:47:10:04:44:c6:e3:0a:
f9:ed:70:8a:40:a2:1a:13:f0:a5:8c:2d:4d:74:85:09:4b:0a:
05:81:83:8e:88:9e:db:73:5d:bb:bf:06:d5:8d:fe:77:3e:99:
95:e8:52:b8:8e:70:1b:46:a6:41:e8:76:25:af:af:e8:6a:75:
25:d8:7a:3a:a8:a1:c7:7b:91:81:95:e5:ac:b5:3d:35:69:1d:
a0:60:8a:09:83:f4:68:0e:f8:9d:23:66:34:19:77:85:91:a1:
1c:f4:d0:39:30:af:a2:7a:e6:01:42:80:61:13:e6:77:de:db:
8d:82:75:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:51:13 2026 by rpki-client