
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
File: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft (raw, json)
Hash identifier: DXP93+RhK4gI/LJByEzVRs5f6bQdReW/aiAgip87Oic=
Subject key identifier: D5:18:D3:CB:56:08:BE:F7:21:9C:DE:9B:1D:C4:6A:1C:A1:23:D7:7E
Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
Certificate issuer: /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Certificate serial: 3DCF7C0915F30325DF3EC5F2AA0497897ACE936E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 05:31:32 +0000
Manifest this update: Thu 23 Jul 2026 05:26:32 +0000
Manifest next update: Fri 24 Jul 2026 08:01:32 +0000
Files and hashes: 1: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: ry1zcsxyp5rx5aqnNqVzN9RbPAzFPE5OKy5fVA/tBsY=)
2: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: SsEkvpd7Ya0vJcTfzCdLVaBKw02BlHsoNedgx56rz7o=)
3: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: PK17dkljk3cirdVkAhnzBVlvFjbQaBFW384JrVTU5eI=)
4: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 9bsIgvpn+nDqB1JkEO35LZUnAXe5IvhJf7x4sHOoJLY=)
5: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: bzgmeNk+RTlBoGqusN6v8fvRVhXp8YED5fczTfvL+Pk=)
6: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: 0nmqU55YZ3VtV1W8dEUj6+BAJuQ389WNc46VpzYQeA4=)
7: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: UF7aCyE5FESxwGGWBM/poN89N17rR7jv22FSOfKjvlk=)
8: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: Azh7PmQbddqZUxJOxiTwYESOb0WkJfacl3QlGxSp7Ls=)
9: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl (hash: x2e6hMvYOMbDbFtrUhcmcQkLCsNGBL//r3cctDANnLA=)
10: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: xtIac8VAw15L09WUieeUSir9eYOGXhXfymWhdgL7e/Y=)
11: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: aykb9pBBSkXI3tTi9mpSHn2tVZ0H++we7ChH689sRxg=)
12: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sfzwSxhwf93yzsApW5cK5kJn4eNAyyEFWMZjQtMY6Ok=)
13: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: Cz0RsKoVkeeB1IsUqTtQO8T5aC2XyKwMvob94kUO7oA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:cf:7c:09:15:f3:03:25:df:3e:c5:f2:aa:04:97:89:7a:ce:93:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Validity
Not Before: Jul 23 05:26:32 2026 GMT
Not After : Jul 24 08:01:32 2026 GMT
Subject: CN=D518D3CB5608BEF7219CDE9B1DC46A1CA123D77E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:a2:dc:b3:4e:00:31:3a:93:f1:3d:35:24:
5f:d8:65:65:50:c9:68:25:5e:aa:13:31:1f:8b:ec:
0d:a4:c3:86:c2:8e:08:83:a4:7b:31:40:14:10:0a:
f1:4e:f7:da:17:9e:99:f9:c2:3a:d6:09:30:d5:81:
c7:58:a7:61:29:74:31:d2:11:a2:ab:3e:a8:75:d9:
e5:cc:92:d3:79:18:18:d9:80:4d:5e:b0:26:37:44:
c4:45:d0:77:56:3d:79:ff:f5:38:33:7b:ea:9a:2d:
fe:f6:80:c9:3a:55:98:8b:3c:78:55:65:30:1e:a2:
70:88:71:22:d8:e7:3e:0a:2a:d0:72:bb:4e:9a:96:
63:10:99:d5:59:ef:2a:91:c0:80:72:7c:e2:85:c8:
a3:4a:b8:04:d8:0e:e9:71:b2:7c:aa:41:c5:91:b2:
5e:fa:e7:ae:d0:f5:e3:36:3a:e2:d7:3f:39:48:ec:
0a:d3:3a:13:c1:c6:7c:ab:31:9f:e0:23:45:67:f6:
20:dc:58:4d:9e:7f:95:c0:73:7a:3e:88:1d:d3:8b:
bb:dd:a7:53:35:3d:ed:70:17:65:28:bf:c3:78:a7:
1c:6a:d0:aa:f3:dd:59:90:8e:e6:10:54:60:47:41:
fa:ed:eb:67:ca:fb:bc:98:fe:bd:79:f8:e9:c9:c1:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:18:D3:CB:56:08:BE:F7:21:9C:DE:9B:1D:C4:6A:1C:A1:23:D7:7E
X509v3 Authority Key Identifier:
keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:71:7c:19:ff:80:0c:5b:6c:b1:9f:11:5f:99:42:c7:75:29:
e7:a3:e6:8a:f5:e6:3e:55:8e:2f:c2:15:b8:60:1a:98:76:5a:
59:89:e4:e3:0e:67:80:3a:b8:8e:b4:2b:6c:2a:5e:61:4d:e4:
33:c7:6f:2c:9d:96:a6:b7:da:52:3d:aa:0a:b3:3c:87:77:5b:
db:61:45:19:f2:b7:38:1a:4c:32:25:06:10:b6:91:4b:bf:59:
9f:fc:e6:7c:61:42:bb:82:1f:47:59:70:e5:2a:d8:aa:4f:ac:
34:6c:f3:7e:55:f0:b9:d1:1e:c9:12:b3:0a:33:13:aa:9c:a0:
8b:ce:a2:31:43:a3:80:16:e3:5e:7f:29:1b:60:ee:b8:85:32:
e6:10:4c:48:fa:17:08:5c:9f:f0:a5:37:60:3b:06:dd:20:d5:
3a:21:59:af:fc:78:1a:50:39:d2:3d:15:e4:b1:c8:ea:b8:fa:
03:4f:6e:61:f0:2e:ef:1a:85:46:fa:5c:b2:94:d4:90:c6:c5:
1d:f6:bf:90:a2:b2:9e:9b:17:17:0c:e7:2b:6c:02:ae:08:5d:
90:de:c9:7c:89:76:9d:e1:6c:25:5e:5a:af:b6:5f:e0:76:6d:
9a:21:f2:78:17:0a:57:1d:d9:8b:45:52:3f:40:65:93:37:00:
0b:1c:59:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:12 2026 by rpki-client