
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
File: AAB4671D9735066964F008C9DDFC52C3A710E040.mft (raw, json)
Hash identifier: uTkjrcyeLaYVyyfu3LZ94TdlsclbW8Tvx5Y3BluJ8RQ=
Subject key identifier: D8:AF:52:04:C4:3D:C0:F9:44:DC:4D:60:8E:5F:44:86:72:72:55:41
Authority key identifier: AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40
Certificate issuer: /CN=AAB4671D9735066964F008C9DDFC52C3A710E040
Certificate serial: CBFFDBF22CD20D909443F41036875278228682
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 15:28:00 +0000
Manifest this update: Tue 16 Jun 2026 15:23:00 +0000
Manifest next update: Wed 17 Jun 2026 17:55:00 +0000
Files and hashes: 1: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: WYe5M8+W5wSg2Rfo76ZEu34y6MT+kHyqh2vkljV+QtU=)
2: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: unzh605AgxMrS8kL6fN+yePqm6X/AD3ox4pCc7I8/VY=)
3: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: NXMKeEFbtGD5jl2gs5Op2j9jmwYVlgv0YYaBKtfr4gA=)
4: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 42yHJRCL2UkIYvPUKITyhrxYXg51+0nJdl91wdx0sEk=)
5: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: B0g8+pDAE4Q/0GBSFMta6Y5XLkcrXAH8CA4qOj5PkCE=)
6: AAB4671D9735066964F008C9DDFC52C3A710E040.crl (hash: pAhMLkc5sZ5sptEzC/cN/S8jXYruLlrgOdwC3D8het4=)
7: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: aJngYofxYM8aRo7ASuGSX++bpTmrKYXt3y7dtT5WC2Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl
rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
cb:ff:db:f2:2c:d2:0d:90:94:43:f4:10:36:87:52:78:22:86:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAB4671D9735066964F008C9DDFC52C3A710E040
Validity
Not Before: Jun 16 15:23:00 2026 GMT
Not After : Jun 17 17:55:00 2026 GMT
Subject: CN=D8AF5204C43DC0F944DC4D608E5F448672725541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:fb:60:66:5f:fd:57:27:8d:81:6b:67:b0:
f0:3b:05:27:2a:fc:a3:e2:6c:61:b2:26:85:d0:84:
6c:7e:eb:19:0d:87:04:2c:b3:ce:de:44:5f:5f:37:
b6:c1:88:7c:61:a7:25:ad:1f:b7:aa:c3:60:df:7d:
31:cc:92:47:6d:d1:e9:5d:f9:b4:ab:4b:aa:82:5c:
1b:5a:24:55:90:ec:cb:80:ea:d7:98:4d:70:4e:53:
3d:ed:e2:6a:e2:f9:22:2b:63:e6:83:e9:ee:73:7f:
65:d8:45:bb:bd:1a:bb:d6:1b:ce:67:db:96:14:63:
9d:86:92:9a:ec:95:2f:dd:86:1b:d9:af:5f:3b:0b:
aa:69:48:12:cb:2a:de:66:cd:df:c7:bb:95:dc:78:
e7:b0:f0:66:21:70:81:a5:a5:82:cf:96:ff:c3:68:
9c:8a:56:1f:92:94:15:8a:8b:86:4b:8c:15:24:08:
0a:90:73:bd:9b:06:c8:77:0d:d7:e3:12:bc:63:b2:
76:97:9d:4e:55:ca:89:54:31:fb:4b:d7:91:b4:73:
ec:53:56:91:e4:e8:40:bd:88:e0:38:e8:60:38:4f:
3a:3d:b1:3b:1d:c5:2b:87:30:cd:0c:4d:90:d7:ca:
61:ba:43:57:da:29:5c:88:c0:8a:5b:03:16:83:8b:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AF:52:04:C4:3D:C0:F9:44:DC:4D:60:8E:5F:44:86:72:72:55:41
X509v3 Authority Key Identifier:
keyid:AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b6:8e:75:88:3c:c0:c9:b9:35:1a:fb:fc:90:fb:d6:eb:9e:
0c:8f:dc:5f:c3:cc:e8:ea:1a:4d:1b:82:b4:4e:0b:ed:8f:2c:
bc:5c:ff:59:4e:a0:1b:d2:5e:a2:68:ff:81:9c:62:b5:d3:2f:
0a:97:5a:15:df:89:b9:f3:8e:46:b6:2c:c0:e2:13:b3:44:ee:
27:56:04:cb:d2:57:da:bb:75:f7:d0:fd:a7:0a:3e:ac:4a:1f:
ad:fd:9a:f5:d1:d3:07:75:cc:e8:67:3d:49:04:85:a7:67:06:
49:9b:29:a2:14:e1:bb:3f:57:71:43:84:97:2b:9d:23:dc:12:
e8:b7:19:a6:05:3d:20:b8:ec:05:6c:61:5a:c9:f8:36:c9:e6:
fd:69:53:4c:52:32:64:b4:20:2e:88:c2:0c:09:6f:52:0b:82:
aa:90:70:c8:15:13:21:f9:39:e8:ad:30:25:15:55:aa:88:e3:
6b:bf:1f:a3:0a:5e:14:4e:47:15:ab:ed:5e:10:b0:a4:01:7c:
a9:48:5b:78:ef:ed:9d:26:c5:ca:3a:38:de:2a:6a:a3:a9:9a:
78:c7:1a:f1:99:58:53:95:c9:42:be:d3:8d:4f:4f:08:0a:af:
85:10:70:b9:7c:c6:9c:80:5d:c1:5d:44:67:13:5d:57:d6:75:
fa:dd:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:03:31 2026 by rpki-client