
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft
File: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft (raw, json)
Hash identifier: PKhLj2wohRCmgKOZQQMzxguaB+JmfG5lDQ7Nxflkuoc=
Subject key identifier: 7A:7E:9D:B6:78:29:D4:83:74:4B:A8:20:4D:26:9E:F0:98:8A:5C:B1
Authority key identifier: AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE
Certificate issuer: /CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE
Certificate serial: 6A4CF4494FD1D9D3F017104EA15E6C546EB5CCB9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 07:23:25 +0000
Manifest this update: Fri 24 Jul 2026 07:18:25 +0000
Manifest next update: Sat 25 Jul 2026 11:17:25 +0000
Files and hashes: 1: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: DURCQ0yaLxsLK0NyQoA/+8rorIbQkFZb7X0OVwrX9XQ=)
2: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: 8knmmlk6VbCEzOwxll8mjdcL7YeA/GevLWgeSXesFqE=)
3: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl (hash: ukYJliXd816gLCxZ1G45m1jEVG/4n3lYaiPJTXCQV0s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl
rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:4c:f4:49:4f:d1:d9:d3:f0:17:10:4e:a1:5e:6c:54:6e:b5:cc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE
Validity
Not Before: Jul 24 07:18:25 2026 GMT
Not After : Jul 25 11:17:25 2026 GMT
Subject: CN=7A7E9DB67829D483744BA8204D269EF0988A5CB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:2c:e7:09:5a:85:bb:14:73:31:30:1b:60:
0f:ea:d4:4d:8a:31:94:45:17:e1:fe:4c:f7:65:61:
a6:14:9c:c9:a7:0d:90:3b:5b:53:ce:b1:68:73:ee:
cc:7b:95:8e:55:82:fc:bf:33:b9:f1:d2:d0:1d:47:
0c:7f:7a:92:50:70:5c:49:27:c5:8f:06:22:d6:c1:
c7:6b:58:6d:ba:5f:79:e9:04:41:21:1f:84:f3:81:
59:84:67:c6:c3:6b:eb:69:0b:91:98:31:7c:67:92:
a7:83:9a:0c:29:98:7e:cd:d1:b3:1e:4d:80:01:37:
d5:59:1c:14:a2:83:8c:f2:42:fa:4e:6c:22:5c:ae:
c5:9b:7d:f9:f2:51:b4:90:e1:5a:60:ca:b5:16:6d:
08:9f:4d:16:fb:5b:1e:8d:f1:f0:9c:e7:11:3e:cb:
09:af:fb:a3:79:85:fb:fe:2b:d8:0a:f1:c4:46:b5:
ef:20:54:d8:fc:09:70:eb:f3:96:22:b4:03:27:12:
30:7d:f5:8b:dd:76:52:5a:3c:a4:b3:a6:9a:4a:01:
da:47:7d:7f:9f:fc:95:53:eb:a1:4a:73:a5:7d:1b:
94:b6:12:b6:14:7e:4f:ac:d3:78:1a:57:c2:c7:9c:
72:10:1c:9e:3a:b1:3e:09:b2:b1:7c:ad:1e:32:97:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7E:9D:B6:78:29:D4:83:74:4B:A8:20:4D:26:9E:F0:98:8A:5C:B1
X509v3 Authority Key Identifier:
keyid:AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8f:cb:5f:cb:94:33:79:3b:c9:0b:c6:44:27:b4:3c:d4:85:
79:04:9f:1d:45:ab:62:01:b0:f6:78:02:33:e6:05:2b:02:5e:
91:fd:fb:54:dc:b1:81:dc:b5:89:e9:9e:31:88:ff:e9:24:55:
8e:dd:80:06:0a:6b:7a:f3:d6:ba:dc:5c:6a:14:4b:25:49:76:
1c:d5:2d:4f:9b:9d:ea:f7:c7:45:98:2e:fe:4b:b5:13:84:5e:
37:60:ad:d0:44:14:79:0f:66:15:f8:97:70:c8:a0:53:6e:11:
e7:f3:c9:9b:dc:2a:0f:40:62:ed:d6:49:ce:c0:8e:c0:86:04:
34:f2:4f:97:96:07:7c:17:2a:be:50:ec:1d:8d:f8:37:fc:09:
46:07:29:b4:67:3e:9a:98:98:81:bb:40:3b:ce:6c:f3:b8:14:
6d:77:a5:3e:e3:9b:a3:96:2d:8b:d1:67:ce:1d:ad:eb:99:ee:
f8:73:7d:b0:46:54:fc:63:59:11:f5:93:68:7f:c6:73:c3:45:
ab:2e:5f:2b:f7:53:95:2d:ef:13:a8:f0:b8:fd:7c:fe:b7:ad:
5f:7f:d0:12:ba:b1:6f:4d:99:68:f4:f7:dd:28:9a:da:7b:e9:
4b:d9:37:f6:62:3a:78:90:38:0e:76:6c:b1:75:e2:fd:24:0e:
0a:a7:94:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:26 2026 by rpki-client