
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft
File: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft (raw, json)
Hash identifier: 2CQYHhwn9n380wvl5UlSquMcl9gwznPSyyllV/5J+RE=
Subject key identifier: F6:86:D4:AB:2D:4E:BC:CE:7B:C5:19:AB:C6:12:34:FF:D2:08:55:1B
Authority key identifier: AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD
Certificate issuer: /CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD
Certificate serial: 599998EE04DA5E0FDFD50A6440EB52BB17C2D09F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 23:59:05 +0000
Manifest this update: Thu 23 Jul 2026 23:54:05 +0000
Manifest next update: Sat 25 Jul 2026 03:50:05 +0000
Files and hashes: 1: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl (hash: Vyyu+RjwhgPVX7l8PVAsFxsKIYTpvPffkx0odv1CrP0=)
2: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: 4yYHOQ19SUo4wUen+ovEY0nBNoIbYKAxFiddTf9qCzI=)
3: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: odcITqAToT5yF34xeI2KwLrnQspjZLjDq5idgZAGEkU=)
4: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: +597iuB7PbfMY+3aubsI/GkbNTaFIoKUe/CnIoipNDU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl
rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:99:98:ee:04:da:5e:0f:df:d5:0a:64:40:eb:52:bb:17:c2:d0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD
Validity
Not Before: Jul 23 23:54:05 2026 GMT
Not After : Jul 25 03:50:05 2026 GMT
Subject: CN=F686D4AB2D4EBCCE7BC519ABC61234FFD208551B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:91:80:20:a2:d5:65:9a:b8:b9:da:8b:cd:
62:a0:bd:31:04:e6:5c:16:6a:31:80:e0:12:03:22:
57:96:c2:68:5e:87:6b:ba:c5:56:40:6e:ae:01:28:
39:87:0d:60:d9:56:56:b6:41:65:a2:ac:a6:c7:94:
4d:a2:59:5b:b7:f3:98:ad:40:17:1b:03:b0:59:8b:
ec:a8:52:e4:b2:dc:35:f8:c9:fa:43:58:9b:85:84:
02:d5:89:44:2c:cb:f7:df:63:f8:3c:92:60:27:94:
77:c4:5a:3c:3e:e7:57:fd:f2:8e:f6:ad:67:62:19:
83:e4:80:bd:12:8a:a5:0a:2d:5a:b5:da:c2:e2:32:
3e:7c:d1:c3:0f:6c:49:70:88:bc:39:17:1e:c8:84:
68:cb:32:cf:20:d6:51:3f:62:71:e3:60:8f:75:7c:
24:4f:18:cd:e9:23:61:8d:e9:3c:6c:9f:a8:e2:b7:
ff:72:9e:09:44:ff:7e:4a:c6:c2:88:3c:0c:57:bc:
9b:fc:7f:08:1c:07:0b:43:2b:b7:90:01:a6:e3:8c:
27:ec:df:73:e0:ca:52:bf:4d:b6:e2:85:0c:0f:d1:
35:b9:2a:8b:34:c1:51:aa:d0:bc:5c:39:36:c0:b0:
1c:f4:a9:25:49:69:c7:4c:ff:9c:51:e1:df:dc:79:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:86:D4:AB:2D:4E:BC:CE:7B:C5:19:AB:C6:12:34:FF:D2:08:55:1B
X509v3 Authority Key Identifier:
keyid:AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:66:48:9c:1b:82:06:fe:a6:94:be:78:78:d8:1d:e9:e9:ef:
02:2f:99:0b:dc:10:3c:2e:61:17:48:03:b8:c0:82:bc:bc:71:
cf:f3:b3:5f:71:f8:a5:7a:27:b5:a7:61:18:0b:98:e9:92:6c:
61:e1:b4:a4:43:ae:75:29:aa:f5:a0:ca:ea:df:56:42:c3:91:
06:1a:83:e6:02:cc:29:19:5c:bb:8d:e4:74:f2:fc:ba:db:15:
31:4d:a5:73:06:8a:f1:af:61:7f:4b:b6:4e:44:01:a6:38:10:
d1:2c:89:fd:94:b9:e7:cf:1c:75:f3:67:2c:1b:b0:44:6d:31:
91:7c:74:24:9a:94:aa:df:e1:85:45:6d:98:41:cb:d8:07:80:
82:c8:86:20:1c:39:32:a0:6c:62:f2:82:44:44:46:b5:e1:44:
fa:88:bb:ab:54:84:62:b4:f0:6e:5c:12:10:d9:ca:cd:50:52:
10:6e:da:7e:e5:f4:be:a3:10:80:30:cc:4f:cc:12:6e:57:03:
fe:c5:49:8d:e5:00:57:5d:1e:63:02:0e:64:1a:25:bb:9b:ed:
25:93:6b:b3:09:4b:64:dc:21:88:92:ec:66:2b:0e:ef:c4:2e:
11:1a:9b:59:d7:4f:6a:1e:9f:0b:9b:c5:10:97:f3:b2:d1:ad:
09:e4:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:02 2026 by rpki-client