
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
File: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft (raw, json)
Hash identifier: HAx2uyAl2hpGY3XbPWNjGwwOAjONKmKSdo0oqzXGSSE=
Subject key identifier: F5:B5:4F:2C:61:92:57:DD:CB:C0:8D:1B:B0:EE:0F:E4:6D:92:A6:57
Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
Certificate issuer: /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Certificate serial: 0CD45478E3073CEDDF9B5E2CB85C8C773977F759
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 06:22:09 +0000
Manifest this update: Tue 12 May 2026 06:17:09 +0000
Manifest next update: Wed 13 May 2026 07:23:09 +0000
Files and hashes: 1: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: Azh7PmQbddqZUxJOxiTwYESOb0WkJfacl3QlGxSp7Ls=)
2: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: UF7aCyE5FESxwGGWBM/poN89N17rR7jv22FSOfKjvlk=)
3: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: Cz0RsKoVkeeB1IsUqTtQO8T5aC2XyKwMvob94kUO7oA=)
4: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: bzgmeNk+RTlBoGqusN6v8fvRVhXp8YED5fczTfvL+Pk=)
5: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: ry1zcsxyp5rx5aqnNqVzN9RbPAzFPE5OKy5fVA/tBsY=)
6: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: SsEkvpd7Ya0vJcTfzCdLVaBKw02BlHsoNedgx56rz7o=)
7: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: PK17dkljk3cirdVkAhnzBVlvFjbQaBFW384JrVTU5eI=)
8: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: aykb9pBBSkXI3tTi9mpSHn2tVZ0H++we7ChH689sRxg=)
9: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl (hash: iNOPO8M86HzwdnfUfBIKkCi+YX2biRkEaa4lWVbCnIg=)
10: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: 0nmqU55YZ3VtV1W8dEUj6+BAJuQ389WNc46VpzYQeA4=)
11: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 9bsIgvpn+nDqB1JkEO35LZUnAXe5IvhJf7x4sHOoJLY=)
12: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sfzwSxhwf93yzsApW5cK5kJn4eNAyyEFWMZjQtMY6Ok=)
13: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: xtIac8VAw15L09WUieeUSir9eYOGXhXfymWhdgL7e/Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d4:54:78:e3:07:3c:ed:df:9b:5e:2c:b8:5c:8c:77:39:77:f7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Validity
Not Before: May 12 06:17:09 2026 GMT
Not After : May 13 07:23:09 2026 GMT
Subject: CN=F5B54F2C619257DDCBC08D1BB0EE0FE46D92A657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:14:9f:fe:bc:5d:7c:bb:e4:3f:79:48:ba:0d:
ef:e9:4a:0a:0d:51:0d:8d:c7:df:3c:96:97:59:75:
c2:37:12:4a:7b:d2:b0:73:75:aa:46:cc:da:f5:48:
0b:b5:29:27:1d:c3:bb:5a:0c:06:c1:a9:15:69:f6:
0a:5e:c3:98:e9:e8:b2:c6:84:89:09:ae:95:99:9c:
d6:8a:91:0b:9d:f5:d0:7e:04:dd:8e:ae:a0:8d:b9:
5a:85:1b:4c:ca:0a:7f:bd:fb:69:8e:36:2d:1d:63:
13:b0:70:f1:e1:ee:cb:18:b6:20:b0:2f:01:fd:0a:
a8:63:ed:b6:8f:61:aa:20:d8:03:82:fb:13:1c:d5:
03:7c:79:2d:84:05:2c:14:73:04:5c:e0:9e:23:0e:
bb:a2:95:0d:1e:96:53:7e:54:09:24:29:d9:b9:95:
67:c4:83:b2:ef:f3:f0:3a:cb:19:38:4c:85:c5:b2:
c9:50:7c:5f:c6:86:4b:aa:e9:a1:d5:10:ea:5b:49:
b8:4d:8f:e2:23:e7:96:e3:8e:e9:b2:6a:af:15:79:
36:a2:e2:39:c6:25:16:92:7f:b5:8a:62:82:73:89:
6b:59:f3:d1:61:55:3f:9d:2a:10:6a:5b:83:b9:c3:
92:1b:d7:ec:02:57:7c:d3:0b:04:0c:cd:db:89:94:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B5:4F:2C:61:92:57:DD:CB:C0:8D:1B:B0:EE:0F:E4:6D:92:A6:57
X509v3 Authority Key Identifier:
keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:93:d0:f4:f4:ee:a7:01:23:02:43:d1:fb:14:c9:21:b3:4f:
5d:fd:44:bb:c1:ad:73:f5:5c:85:43:dd:7d:b5:50:d5:89:49:
2d:98:b1:b9:e3:1b:7a:1f:3c:02:e5:f8:e6:02:1d:18:05:b1:
89:3e:c8:d5:6b:f3:78:27:30:06:d7:63:06:ed:f6:2e:36:f1:
04:14:81:fc:f3:1f:7c:cf:61:a0:ed:95:b9:c8:cf:94:69:b3:
ba:c0:46:ae:b6:c5:99:88:7b:18:45:11:01:71:fd:12:09:d7:
44:35:45:98:e7:e7:66:84:7e:c1:ad:e4:fc:10:92:3a:25:fb:
1d:b5:d2:b7:19:4a:8a:ae:e8:bf:d2:ee:1d:2f:82:9b:53:29:
46:5c:75:99:6f:20:08:0f:e3:b7:1a:d0:85:23:c2:46:4c:d0:
18:48:1d:ce:36:0c:fa:7c:22:c5:c9:eb:e0:5c:fb:82:ab:85:
20:0b:87:cd:e6:49:a1:4b:82:94:f0:18:b5:10:39:70:df:0b:
7a:2b:38:6e:60:ba:7e:87:4d:52:5d:b8:56:39:a5:69:f6:2f:
70:a4:73:66:55:29:ff:76:03:5d:01:60:cb:95:83:e5:88:98:
d9:7f:45:f2:c2:4a:3b:12:15:a7:be:d7:24:46:36:b2:2b:34:
98:4d:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:53 2026 by rpki-client