
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
File: AAB4671D9735066964F008C9DDFC52C3A710E040.mft (raw, json)
Hash identifier: lb7gc1lBlnGoH9jUsQxt0mpGa7XGEgPoEIkQXnT5Hrw=
Subject key identifier: A6:24:E0:A8:6C:DE:14:D9:59:A7:F1:33:D0:55:5E:08:C5:58:B5:06
Authority key identifier: AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40
Certificate issuer: /CN=AAB4671D9735066964F008C9DDFC52C3A710E040
Certificate serial: 7AD25E317748C6D0B64013E3922A7A76BE123355
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 07:33:44 +0000
Manifest this update: Fri 24 Jul 2026 07:28:44 +0000
Manifest next update: Sat 25 Jul 2026 08:25:44 +0000
Files and hashes: 1: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: B0g8+pDAE4Q/0GBSFMta6Y5XLkcrXAH8CA4qOj5PkCE=)
2: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: NXMKeEFbtGD5jl2gs5Op2j9jmwYVlgv0YYaBKtfr4gA=)
3: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: WYe5M8+W5wSg2Rfo76ZEu34y6MT+kHyqh2vkljV+QtU=)
4: AAB4671D9735066964F008C9DDFC52C3A710E040.crl (hash: kqDJPSWlhHELrGtJcWmlWuJJXpYlDwEvjXamAKrQzQQ=)
5: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: unzh605AgxMrS8kL6fN+yePqm6X/AD3ox4pCc7I8/VY=)
6: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 42yHJRCL2UkIYvPUKITyhrxYXg51+0nJdl91wdx0sEk=)
7: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: aJngYofxYM8aRo7ASuGSX++bpTmrKYXt3y7dtT5WC2Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl
rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d2:5e:31:77:48:c6:d0:b6:40:13:e3:92:2a:7a:76:be:12:33:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAB4671D9735066964F008C9DDFC52C3A710E040
Validity
Not Before: Jul 24 07:28:44 2026 GMT
Not After : Jul 25 08:25:44 2026 GMT
Subject: CN=A624E0A86CDE14D959A7F133D0555E08C558B506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:78:6f:ac:6c:f3:21:80:a3:04:0c:a9:e9:
81:ea:05:f0:8e:c7:7c:37:eb:ca:76:34:73:e1:50:
24:a6:2e:fc:ba:0d:2c:d8:e3:42:c1:86:51:4c:3a:
a6:64:7e:62:20:a6:93:d8:6e:de:71:37:aa:fa:0d:
7a:df:52:87:e4:9c:a6:e4:46:2f:b6:19:09:89:6e:
eb:e2:24:ad:f1:2d:99:5b:69:6f:f6:c4:3f:13:bb:
e4:0a:10:e3:f3:c5:fd:6d:03:26:f7:4e:39:16:3f:
0a:00:47:79:c5:97:8a:b1:4f:e6:52:ce:a1:55:5a:
03:78:20:52:7d:7e:f5:e9:ae:aa:60:f5:02:c1:0e:
d4:9f:7e:4a:67:92:25:df:c2:2a:71:e2:42:7c:f2:
cf:79:4d:32:a4:bf:f2:a4:06:ca:d2:c5:c9:41:16:
c0:98:5a:60:d9:f5:47:ed:c2:0c:42:6b:92:a8:f1:
16:18:20:ba:28:de:60:47:b2:fb:be:87:15:1e:30:
57:02:02:ef:a9:01:31:a2:4c:02:30:77:2c:31:01:
0b:6f:35:2f:e4:4a:ca:d1:78:57:e9:17:b0:62:00:
af:3c:de:de:fe:df:7f:d9:2e:74:fa:44:6f:55:a3:
a4:06:24:88:00:75:b3:a2:04:7f:19:7a:f0:59:bb:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:24:E0:A8:6C:DE:14:D9:59:A7:F1:33:D0:55:5E:08:C5:58:B5:06
X509v3 Authority Key Identifier:
keyid:AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c8:5a:b7:d6:23:c9:0d:ba:64:18:57:28:ed:04:40:6c:24:
a6:70:3e:99:f1:67:14:23:ac:54:30:38:56:71:fa:f7:35:84:
d9:89:62:a6:60:28:84:97:3f:b1:d5:b2:c8:70:cb:69:d1:a9:
1d:cc:1e:07:92:ff:51:52:90:c1:7b:54:17:84:14:62:9e:b1:
4d:e8:02:9a:89:16:f9:ca:58:a5:2f:ce:6a:60:a5:fb:86:ed:
49:3b:53:86:7b:1d:d8:67:cf:06:99:62:54:8f:07:a6:39:82:
7c:c5:7d:7d:65:34:e7:76:4b:62:ca:ab:78:3b:45:ac:de:56:
86:26:94:90:8f:5e:e1:91:16:b3:10:61:54:90:b3:7f:3e:8e:
0c:3f:63:9c:fb:4d:a7:72:d8:3f:28:6d:e0:20:e3:85:07:6f:
d0:98:ab:79:0e:e8:22:2a:ce:22:c9:bd:63:b1:83:1b:cc:a0:
2e:16:12:44:f0:3b:5d:2d:b2:af:25:78:09:34:67:da:ec:7b:
33:0d:26:79:b6:a9:51:8c:32:34:8d:ac:35:eb:17:eb:a3:8b:
27:cf:03:b6:f9:ad:d0:4a:04:34:b2:06:63:30:25:f6:29:fb:
76:e4:96:4a:76:16:50:e5:8b:f1:89:41:67:73:dd:0a:41:33:
f0:f2:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:07:17 2026 by rpki-client