
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft
File: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft (raw, json)
Hash identifier: itRp25YCL1xpePvxpLEvVMiZXNo8ePS+d9Uyk2UxzIM=
Subject key identifier: 01:CC:B1:53:22:44:44:68:69:68:5A:9D:52:C1:43:86:9B:DF:8E:10
Authority key identifier: 07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D
Certificate issuer: /CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D
Certificate serial: 367DA45F84BC059ECEC498FC6817C571F538998C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 09:16:16 +0000
Manifest this update: Thu 23 Jul 2026 09:11:16 +0000
Manifest next update: Fri 24 Jul 2026 12:10:16 +0000
Files and hashes: 1: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl (hash: AjC8shY2rpHBg+y4ltCOQK3mFlqRPJ+t0Q25IHsjcFA=)
2: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: ZInQWIdIz9yreiElsNwlmLmVmB2tNTPmR2V0a4fG3f8=)
3: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: rVSTBgAcxMjiphBfXsUD1/ITkO/ZRhpcgBHWKyAe9do=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl
rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 12:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7d:a4:5f:84:bc:05:9e:ce:c4:98:fc:68:17:c5:71:f5:38:99:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D
Validity
Not Before: Jul 23 09:11:16 2026 GMT
Not After : Jul 24 12:10:16 2026 GMT
Subject: CN=01CCB1532244446869685A9D52C143869BDF8E10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:40:34:fc:1a:31:06:4c:02:1b:ed:4f:13:
62:24:c5:ae:3c:ee:31:1e:12:5c:94:9b:48:0a:3a:
b0:7f:10:22:aa:0d:d7:f6:51:cc:38:71:c1:d4:bc:
42:86:d1:60:5f:64:b7:05:66:41:2d:fd:5a:ef:4f:
ac:21:a4:2e:e6:7b:76:01:fb:52:5e:3b:4b:89:b6:
b6:c0:ff:eb:f5:4a:fd:26:ca:c7:6b:60:78:5c:0b:
ba:9a:5a:eb:f3:b2:dc:0f:d3:8e:b9:c1:5f:c2:f1:
59:82:c4:bf:b3:a0:45:4b:a6:21:85:16:cd:09:71:
69:83:6a:b5:37:90:dc:f4:a0:f1:cb:04:a9:bd:3b:
57:7a:18:76:69:e5:c7:4a:21:9a:7c:22:1e:66:15:
ac:04:87:25:56:a1:67:53:55:f2:c5:82:aa:4c:4b:
55:c9:d1:2b:3b:61:86:7f:04:f6:ad:9f:b8:cb:49:
85:da:61:21:ab:8e:e5:02:10:a0:71:d0:2c:00:e2:
69:6e:41:55:6a:4a:7e:04:0e:6e:6b:c3:f3:35:9c:
f5:ed:86:35:2c:31:04:71:58:ce:91:a9:b0:ad:c9:
54:cf:2f:c6:96:29:4b:1e:ee:cf:1d:8a:55:7a:d8:
88:2c:9d:a5:b4:e5:f3:b9:61:b8:09:87:ea:1f:86:
45:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CC:B1:53:22:44:44:68:69:68:5A:9D:52:C1:43:86:9B:DF:8E:10
X509v3 Authority Key Identifier:
keyid:07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:34:2b:3f:4c:14:5a:ec:38:04:7e:ca:14:44:42:3e:e4:de:
55:64:53:1e:9a:82:ab:c7:5a:ca:3f:a0:06:c8:eb:4d:df:bc:
0e:04:a5:0a:4a:c5:15:1e:9b:57:8c:d3:19:0a:22:66:f5:79:
60:29:2b:45:c2:89:74:f3:81:57:7a:1d:ec:27:f0:6e:a1:4b:
9f:eb:80:d7:7e:75:64:4b:00:57:11:5a:3b:4e:ce:ef:ba:c6:
86:0d:b7:10:f1:37:29:50:43:79:7f:f4:8c:33:38:ed:05:64:
4d:44:96:6c:7a:43:a4:8b:1d:ea:41:6c:f5:3e:8a:88:74:4d:
1a:44:5e:95:3b:a9:51:46:56:74:47:f8:53:14:67:be:c6:3b:
b8:4d:1c:f9:98:a7:28:e2:85:d7:01:d6:4f:ea:ef:50:cc:62:
53:a4:95:a6:b3:84:b4:00:a2:58:87:ea:96:0f:9d:35:99:3b:
20:dd:4c:0c:77:51:e4:49:a6:27:9d:44:b2:c3:2c:22:bf:95:
df:6d:70:82:79:d9:0b:f0:05:6b:51:2d:ba:54:b8:aa:0e:67:
3f:5f:f4:65:d6:e8:da:ce:20:73:55:d8:a1:49:9c:f6:17:24:
64:57:87:f0:7a:f0:b9:f4:f4:5e:5d:df:02:ba:88:61:ed:a9:
a6:e8:2d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:58 2026 by rpki-client