
$ rpki-client -vvf rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft
File: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft (raw, json)
Hash identifier: XvOUkJkc5T0aGWFIkyS+valQCLe1Ok39xugtPy24F5w=
Subject key identifier: 49:3B:50:6C:A1:C0:78:79:35:15:87:2B:7B:CA:A8:9D:4E:BC:68:4D
Authority key identifier: A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62
Certificate issuer: /CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462
Certificate serial: 0761756146BB6A6ED0823B57164901184E6735A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 08:45:14 +0000
Manifest this update: Tue 12 May 2026 08:40:14 +0000
Manifest next update: Wed 13 May 2026 10:17:14 +0000
Files and hashes: 1: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: 8t40pL4fQo3N87VVWTTwLCjvAxbdAzsDM6MoI8rvfOU=)
2: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl (hash: ax6qgbpdu1zfoP22/cRI8PKd7HfdfVoA4NbOZ/y/qBM=)
3: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: fq37ZHBu24pHeLdJZjOVOOPOX99zj7waBTPuiWqsdHw=)
4: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: QcsJg3qfqnd65tjMyauj31CLylmqEJ9JmPfIivInN4s=)
5: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: qPSkhr1Hfd95Nteo2ukz+NrVtlkjXkiSW+VId9eRa8U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl
rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:61:75:61:46:bb:6a:6e:d0:82:3b:57:16:49:01:18:4e:67:35:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462
Validity
Not Before: May 12 08:40:14 2026 GMT
Not After : May 13 10:17:14 2026 GMT
Subject: CN=493B506CA1C078793515872B7BCAA89D4EBC684D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:23:13:ca:5e:27:f1:a0:98:17:8e:c8:30:
8c:8e:1d:f6:7a:11:3f:4a:fc:42:42:42:2d:97:43:
0e:ac:c4:a1:40:82:6c:2e:2d:94:68:d3:ac:4b:c2:
0b:f0:c6:e0:0d:9a:53:f9:e5:0f:81:1a:09:94:41:
07:ff:ab:74:37:85:93:72:ff:5e:0c:6a:1a:e2:0e:
19:0a:cd:5b:53:d4:22:70:e2:d0:d7:d4:df:83:61:
57:96:ef:38:92:45:42:9d:f9:c1:4b:b4:11:e0:59:
c9:f8:6e:67:61:37:1a:ff:42:38:69:5f:2b:eb:cf:
86:4a:6d:93:ce:b0:70:3e:af:69:a3:1a:7a:03:d4:
3c:bf:e9:20:52:71:5e:5a:1a:73:12:3a:f1:6a:68:
64:66:9b:3a:65:12:a9:0c:ba:8a:5a:33:02:59:51:
c2:1c:43:e6:07:1b:10:55:14:7d:e7:f5:4e:e2:57:
c1:e7:a2:bb:d2:b9:be:2c:0a:b7:e0:f4:3c:55:10:
f1:0a:25:f5:71:eb:05:39:27:15:9c:d5:a4:96:bc:
b1:05:8e:42:5b:08:2c:5f:ed:b3:e2:81:29:e7:2c:
8c:44:2d:9d:4e:b0:f2:cc:de:45:0e:e2:bd:6a:97:
2a:36:66:b9:b4:9d:90:60:ed:a0:50:0f:54:be:0f:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3B:50:6C:A1:C0:78:79:35:15:87:2B:7B:CA:A8:9D:4E:BC:68:4D
X509v3 Authority Key Identifier:
keyid:A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ff:ae:b7:8a:e7:e9:d4:00:34:96:5b:e1:82:88:a1:0f:bd:
b4:84:7b:15:ee:24:ec:a7:e3:91:2f:30:c3:9e:fe:74:83:57:
4c:bc:37:93:ad:fe:80:38:f9:f6:97:97:58:6e:66:7c:08:09:
16:59:67:75:64:20:68:fd:3d:d8:f1:87:83:a8:10:c6:b7:8b:
4d:d7:d3:4d:31:aa:0b:12:d9:ed:f6:91:4d:fc:51:2a:bf:d3:
b1:1c:2c:af:69:d9:76:7e:74:f8:5c:98:91:1a:50:be:12:2e:
87:80:bb:9e:7c:54:f9:66:f3:e1:f2:93:1c:f4:2c:4e:19:96:
58:09:88:10:42:11:07:15:e1:cc:ae:cd:ed:e4:47:bf:3d:c4:
38:6f:3c:13:f5:f8:15:4c:65:80:38:ec:9e:61:7b:c5:57:73:
69:5e:05:ec:70:73:26:9b:d9:e6:97:d2:96:55:29:3e:39:4d:
17:a1:ac:99:e5:e1:45:46:66:b5:db:91:48:ba:eb:1c:6f:82:
7b:ea:cc:54:4c:c4:7a:c7:53:df:08:3b:5a:02:58:66:a4:62:
6a:28:66:35:3b:42:da:fd:9d:29:f7:fc:17:a3:dd:c6:03:23:
3a:08:58:71:0f:8e:e4:3e:fa:34:2b:9a:7e:58:b4:67:2c:c9:
00:a9:af:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:26 2026 by rpki-client