
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft
File: 1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft (raw, json)
Hash identifier: Mti7TU/3yIxma5TKW9zE80GTn0BHAr6iSekjOyf6L1Y=
Subject key identifier: C0:0D:F6:ED:58:77:A0:8F:08:25:96:3C:78:62:1A:F3:9E:8B:3B:DF
Authority key identifier: 1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3
Certificate issuer: /CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3
Certificate serial: 373A76CB29A8A9B2F5E75F1A4955E500A2EEDE3C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 00:50:05 +0000
Manifest this update: Fri 24 Jul 2026 00:45:05 +0000
Manifest next update: Sat 25 Jul 2026 03:43:05 +0000
Files and hashes: 1: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: eiTM77LAawXXBM2P9HzaFup35pUjYK9bwPNmiTzjRYk=)
2: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: KO5msUjW/HADSpbcbiZqt5Rho/bq6n0Bk1hJW/E0KBc=)
3: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: y3pv5F6oTlsmrZ6EnNXAjdzgbs9s6wBiVuWts/sp7e0=)
4: 1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl (hash: L86grgqLjXI0Fb7Q+aPUMIFxLU7nmLujhgREjJBAMqk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl
rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3a:76:cb:29:a8:a9:b2:f5:e7:5f:1a:49:55:e5:00:a2:ee:de:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3
Validity
Not Before: Jul 24 00:45:05 2026 GMT
Not After : Jul 25 03:43:05 2026 GMT
Subject: CN=C00DF6ED5877A08F0825963C78621AF39E8B3BDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:83:5a:b1:93:2d:9f:59:9c:42:34:ef:5c:
b9:bc:98:88:bf:5e:ef:bc:94:f0:2a:8c:99:e0:fc:
0b:58:01:99:07:59:2e:2b:6a:68:b0:b7:aa:1d:3f:
21:1a:35:8b:fe:0d:cb:75:35:21:3b:f9:71:d2:0a:
92:55:37:69:de:28:e1:fa:30:6a:57:41:4c:11:f9:
ec:8c:ea:6e:d0:25:9d:b5:37:25:e8:d7:49:3d:c8:
49:1a:1c:5a:78:89:23:b8:af:85:ba:1e:12:17:e3:
69:a6:c6:f7:0e:d4:ad:41:b6:06:48:b8:9a:d8:c9:
66:97:bc:cb:05:4e:75:a6:7e:22:22:70:49:9b:7f:
62:d9:29:e3:c7:08:ce:39:15:05:00:bd:0e:30:33:
15:1d:a6:2c:84:61:65:da:b0:c3:ee:08:e3:70:d2:
0e:91:a4:5c:7c:00:a7:7b:eb:8d:6c:47:fa:e7:01:
0b:df:eb:f6:ed:28:d6:82:ea:06:1f:c6:a9:df:a7:
ee:d6:31:89:78:53:f7:72:c6:75:0e:71:b7:d6:7c:
18:40:af:3f:71:89:23:88:64:b5:7d:06:da:f3:c1:
fb:ed:a3:3f:30:d6:37:1f:a4:3c:2f:3c:77:c2:8b:
cc:b5:62:7b:ab:ff:25:85:ba:5c:2b:c1:e6:e8:b3:
92:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0D:F6:ED:58:77:A0:8F:08:25:96:3C:78:62:1A:F3:9E:8B:3B:DF
X509v3 Authority Key Identifier:
keyid:1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0c:87:11:a9:28:56:2c:18:dc:70:ac:94:d1:cb:34:fd:ff:
c4:4b:9d:c7:97:a9:e7:dc:c5:05:23:18:25:34:8f:ac:66:4e:
8c:e8:80:f6:fe:45:12:27:49:d9:dd:9f:46:c8:16:36:18:17:
d8:5d:21:0b:bb:a4:bf:1b:92:4b:8a:ba:f1:b7:07:90:a7:a2:
f0:5f:fd:2c:ce:cf:ab:e8:1c:9a:3b:3e:00:3a:e8:dd:b5:1d:
c3:e2:6f:19:a5:fd:9e:2a:70:e6:8c:7e:82:e2:4c:c1:b5:30:
d0:4e:31:3c:a8:1e:2a:93:ef:36:ec:b0:20:c4:1b:ff:4d:b2:
4f:cd:a5:13:70:53:c4:6f:8d:16:44:84:7d:fd:1c:59:62:fa:
3c:e0:be:b8:b5:0f:a1:4b:90:b8:82:73:f6:fd:b7:8b:c1:c7:
83:39:58:b6:43:b8:52:5e:e3:51:30:17:da:70:cb:91:0a:52:
ec:3a:65:a1:86:ed:f1:77:61:52:db:88:e9:da:06:ac:1b:33:
ed:ec:6e:4f:08:99:88:3e:8c:06:ff:e7:b2:2b:15:82:d8:10:
12:45:5a:77:ca:27:74:de:54:9f:ed:cc:9c:8f:ad:70:6b:7c:
fe:28:60:4e:96:94:3b:5c:8f:bc:d7:79:7d:e2:88:7d:63:b4:
3e:ae:49:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:22:54 2026 by rpki-client