
$ rpki-client -vvf rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
File: 06AAF713D939AC6C090B6343B6905318B83A1DE3.mft (raw, json)
Hash identifier: yC3yyEJCGWmX04xfdvnPcwmENVZJlM4+ORivu61v838=
Subject key identifier: 57:19:AD:52:05:E1:E8:4C:71:91:2E:78:75:0A:7C:3A:0B:A3:34:68
Authority key identifier: 06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3
Certificate issuer: /CN=06AAF713D939AC6C090B6343B6905318B83A1DE3
Certificate serial: 623DCB2CE286CE874F1FF3448A73135B8A896C40
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:41:17 +0000
Manifest this update: Tue 12 May 2026 16:36:17 +0000
Manifest next update: Wed 13 May 2026 17:19:17 +0000
Files and hashes: 1: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: j9SbKnw1WxVlPJ1dulKyLWaPKzwCQU/YUp9+97iiA64=)
2: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: PkVVbgoFw66MPF2zwjon2GNSfbIfJE+9WsRpKXP88mM=)
3: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: 4RQga7sC7v8Tfsu3sFFTumIkJvaZxGdgZNTnQPnNeyc=)
4: 06AAF713D939AC6C090B6343B6905318B83A1DE3.crl (hash: EAFYH3/TNbLnhx8pSZdut2hd8if8/wrTCvWTgj/+qbA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl
rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3d:cb:2c:e2:86:ce:87:4f:1f:f3:44:8a:73:13:5b:8a:89:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06AAF713D939AC6C090B6343B6905318B83A1DE3
Validity
Not Before: May 12 16:36:17 2026 GMT
Not After : May 13 17:19:17 2026 GMT
Subject: CN=5719AD5205E1E84C71912E78750A7C3A0BA33468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:42:a6:31:68:eb:d6:ea:65:1f:c5:c6:9b:
3f:0d:24:2d:31:c9:55:b9:ce:6b:e9:06:ca:28:ef:
db:68:c2:c0:bf:18:20:46:b1:1d:b1:9d:54:56:f8:
71:d6:49:08:81:01:77:0a:3d:69:3f:4c:66:68:06:
66:b2:4c:65:09:8a:4d:45:bf:e4:ef:b4:e5:c5:f7:
5c:d7:ec:ac:69:73:10:88:cd:c2:e2:9b:5a:d5:b8:
42:48:a8:3d:b1:64:a0:06:8c:e2:6f:ed:99:ae:e6:
c5:7b:e5:1b:07:9e:39:d6:5e:00:69:81:0e:39:51:
17:b5:3b:10:f0:8c:74:18:08:db:74:20:64:a5:7e:
1f:52:9c:ea:0b:0a:9d:76:c2:be:50:3b:f9:84:d8:
4a:bf:54:ff:1d:4d:fe:ad:94:d8:5d:13:25:82:d3:
b0:01:fa:00:40:be:3d:ce:c2:27:05:d4:b2:8d:bc:
2a:43:c4:6a:4f:a0:c5:a1:6c:b1:93:75:bd:4f:6c:
03:22:2b:02:d6:a7:07:7b:27:67:db:fb:75:44:0a:
1f:c3:ab:f7:56:b7:63:94:34:34:7a:10:3d:38:6e:
a3:da:68:55:32:29:81:b9:12:96:db:53:13:74:22:
f4:31:56:eb:97:b5:c2:1a:f6:32:22:00:f8:9a:3d:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:19:AD:52:05:E1:E8:4C:71:91:2E:78:75:0A:7C:3A:0B:A3:34:68
X509v3 Authority Key Identifier:
keyid:06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b1:28:57:96:f3:40:0f:94:24:62:e6:34:22:05:b1:e9:c9:
b4:5d:b4:f9:df:61:ae:5b:10:62:a6:49:d2:70:68:15:34:b6:
07:1d:e4:be:bb:4d:e7:8f:2a:94:10:e9:66:8a:2d:32:31:e7:
3c:57:24:d8:38:59:ed:df:87:51:33:e0:d3:cd:c4:ee:26:9b:
b5:34:51:9f:f2:13:fa:e9:18:b5:8d:79:0f:94:e1:f7:e1:10:
4c:16:38:ef:18:48:27:14:90:0c:ad:4d:f8:74:b7:7e:1d:3e:
69:f8:77:bc:b4:85:ff:19:ad:1b:f0:26:df:bd:97:c1:55:06:
37:70:38:ef:bd:67:ec:4e:2a:a4:b3:e0:e9:01:4a:d1:e9:d5:
7f:53:d7:95:b2:99:2b:d8:4b:19:bb:87:e4:75:67:01:a4:b4:
3c:f7:81:a4:5e:42:92:2b:72:b4:cc:e1:16:c7:b4:4e:bb:90:
63:0e:e3:df:a7:0b:c1:e8:60:a6:a1:53:22:66:b7:6a:5e:2b:
af:f1:92:57:44:1c:85:99:d4:88:78:55:f4:91:88:16:3e:b8:
85:79:94:ac:d3:e3:a4:5f:f2:43:45:c2:c1:34:23:4f:45:e3:
ab:72:20:89:d9:4d:4f:bb:fc:df:61:b4:9d:2a:ea:97:82:9b:
e3:47:08:a4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYj3LLOKGzodPH/NEinMTW4qJbEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZBQUY3MTNEOTM5QUM2QzA5MEI2MzQzQjY5MDUzMThC
ODNBMURFMzAeFw0yNjA1MTIxNjM2MTdaFw0yNjA1MTMxNzE5MTdaMDMxMTAvBgNV
BAMTKDU3MTlBRDUyMDVFMUU4NEM3MTkxMkU3ODc1MEE3QzNBMEJBMzM0NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQUKmMWjr1uplH8XGmz8NJC0x
yVW5zmvpBsoo79towsC/GCBGsR2xnVRW+HHWSQiBAXcKPWk/TGZoBmayTGUJik1F
v+TvtOXF91zX7KxpcxCIzcLim1rVuEJIqD2xZKAGjOJv7Zmu5sV75RsHnjnWXgBp
gQ45URe1OxDwjHQYCNt0IGSlfh9SnOoLCp12wr5QO/mE2Eq/VP8dTf6tlNhdEyWC
07AB+gBAvj3OwicF1LKNvCpDxGpPoMWhbLGTdb1PbAMiKwLWpwd7J2fb+3VECh/D
q/dWt2OUNDR6ED04bqPaaFUyKYG5EpbbUxN0IvQxVuuXtcIa9jIiAPiaPegTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVxmtUgXh6ExxkS54dQp8OgujNGgwHwYDVR0j
BBgwFoAUBqr3E9k5rGwJC2NDtpBTGLg6HeMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjA0NDIwNDMtMjQ0ZS00Yjg3LWIwMGMtZTU3ZjQ4NzFkMGVmLzAvMDZBQUY3MTNE
OTM5QUM2QzA5MEI2MzQzQjY5MDUzMThCODNBMURFMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNkFBRjcxM0Q5MzlBQzZDMDkwQjYzNDNCNjkwNTMxOEI4M0Ex
REUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw
MGMtZTU3ZjQ4NzFkMGVmLzAvMDZBQUY3MTNEOTM5QUM2QzA5MEI2MzQzQjY5MDUz
MThCODNBMURFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK+xKFeW80APlCRi5jQiBbHpybRdtPnfYa5b
EGKmSdJwaBU0tgcd5L67TeePKpQQ6WaKLTIx5zxXJNg4We3fh1Ez4NPNxO4mm7U0
UZ/yE/rpGLWNeQ+U4ffhEEwWOO8YSCcUkAytTfh0t34dPmn4d7y0hf8ZrRvwJt+9
l8FVBjdwOO+9Z+xOKqSz4OkBStHp1X9T15WymSvYSxm7h+R1ZwGktDz3gaReQpIr
crTM4RbHtE67kGMO49+nC8HoYKahUyJmt2peK6/xkldEHIWZ1Ih4VfSRiBY+uIV5
lKzT46Rf8kNFwsE0I09F46tyIInZTU+7/N9htJ0q6peCm+NHCKQ=
-----END CERTIFICATE-----
Generated at Wed May 13 07:39:30 2026 by rpki-client