
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft
File: 34A5DE28FDBC6F27C998277F953439F66D10A75E.mft (raw, json)
Hash identifier: w9wH3EMr2VrNS4+bUQS/r7kfHP8R+1k9u1aS1u5wCWk=
Subject key identifier: BA:94:A3:AC:06:54:5A:31:DB:DC:5D:09:1A:E5:24:0C:8E:D9:39:0B
Authority key identifier: 34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E
Certificate issuer: /CN=34A5DE28FDBC6F27C998277F953439F66D10A75E
Certificate serial: 4A0D127360CB386B43E5D75E8D5FC64DAB218918
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 23:54:00 +0000
Manifest this update: Thu 23 Jul 2026 23:49:00 +0000
Manifest next update: Sat 25 Jul 2026 03:39:00 +0000
Files and hashes: 1: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: 9xIqyd7FqC7E5vM/2yM7xmyBSmnXPGROKdDFsYB3t7A=)
2: 34A5DE28FDBC6F27C998277F953439F66D10A75E.crl (hash: QyffE6/FbrmeEhCzNUZd7EyhQYfBl6PTQZtUZtdEKgI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl
rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:0d:12:73:60:cb:38:6b:43:e5:d7:5e:8d:5f:c6:4d:ab:21:89:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34A5DE28FDBC6F27C998277F953439F66D10A75E
Validity
Not Before: Jul 23 23:49:00 2026 GMT
Not After : Jul 25 03:39:00 2026 GMT
Subject: CN=BA94A3AC06545A31DBDC5D091AE5240C8ED9390B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:4b:ba:05:fc:9b:42:1b:97:03:4d:57:f6:
f3:55:f9:d8:2c:5d:8e:6a:db:fc:c4:7a:51:c4:d7:
bb:5e:e9:6f:75:bc:19:38:17:a7:25:be:d5:ba:02:
8e:a7:2b:26:c6:7f:d5:9a:76:eb:2c:fb:6e:32:7d:
8f:1d:ff:45:fc:3b:71:59:a6:0f:92:d3:18:ea:6c:
10:28:f9:d4:02:f4:66:fb:1e:5c:bf:ea:02:46:d1:
14:ee:43:4d:fb:75:25:db:d5:67:6a:9c:56:d9:fc:
a7:55:16:c8:ae:b8:3a:e7:e5:a2:3f:57:f7:ed:c8:
66:76:ab:1b:9f:92:3e:ab:fe:0c:9e:cb:bd:b8:66:
f2:de:39:ad:6e:5a:63:57:1a:07:9f:57:26:15:5f:
1f:e1:99:ff:01:45:27:b2:7a:e4:56:22:68:94:2c:
83:59:25:20:0d:b9:24:07:fd:56:8b:bd:d6:86:69:
ae:1c:cc:9a:06:11:63:5e:c3:b5:21:6a:5e:b2:77:
ef:3d:c0:22:52:e5:f9:72:3d:4d:e0:c1:28:46:d5:
76:ef:c1:1d:ab:a6:91:c7:14:0a:00:a7:25:ef:ba:
48:d6:ed:c4:09:8e:ea:4f:30:cf:45:ea:5d:24:09:
9f:cf:2e:5a:d3:83:e5:97:20:38:69:2b:14:7c:9c:
ba:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:94:A3:AC:06:54:5A:31:DB:DC:5D:09:1A:E5:24:0C:8E:D9:39:0B
X509v3 Authority Key Identifier:
keyid:34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:06:a6:37:31:2d:01:77:d4:13:51:12:01:77:21:d8:c7:9d:
1a:de:20:84:e0:99:01:d0:10:e7:39:f2:ef:ef:e7:57:85:01:
3a:13:f7:98:45:ab:49:cd:06:12:5b:16:6f:7e:ae:88:22:ee:
29:c0:c0:36:d2:fc:e4:08:1b:f2:02:dd:2c:82:9b:a9:8f:14:
a9:34:5b:f1:da:51:6c:84:02:8a:14:5e:63:f8:0d:09:3e:91:
01:f8:83:b2:ea:ac:4b:77:e2:88:a1:72:7f:a9:0a:0f:e8:c8:
d4:78:14:b7:62:14:d8:f9:fb:28:12:3a:58:39:af:32:45:d8:
a9:ac:c2:3b:6a:44:bd:35:03:c8:06:9c:9e:87:18:42:18:96:
c5:1d:fb:df:f4:da:41:35:01:bb:d9:62:75:7a:47:e1:d0:de:
8a:21:b0:12:70:f8:7a:7c:49:5e:cf:23:07:57:72:4a:b5:8c:
ab:08:70:44:0b:ec:bc:d6:32:ed:88:1a:29:4e:d9:ea:21:a3:
68:d6:d4:5a:ac:dc:e8:ba:c3:ec:3f:8c:46:12:22:ca:32:23:
e4:d5:59:3e:16:55:42:57:37:62:95:0d:48:27:d9:8b:c0:8f:
12:3b:63:32:70:a6:41:1e:c8:26:56:d9:16:be:aa:eb:f2:67:
ee:36:8a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:06:43 2026 by rpki-client