
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
File: AF6B7BCDACF90BA83205EA298327379BAB489418.mft (raw, json)
Hash identifier: F/+ZAT7iLrT9hnL6FVu2bVkYLbmw3F2600TPdKByzHI=
Subject key identifier: 44:E3:C7:69:4A:40:97:58:BD:DE:D9:42:4A:94:A6:C6:8A:3E:3C:37
Authority key identifier: AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18
Certificate issuer: /CN=AF6B7BCDACF90BA83205EA298327379BAB489418
Certificate serial: 28DF3BDD24E64D1992C8D3682475C457ADB43462
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 09:07:48 +0000
Manifest this update: Mon 21 Sep 2026 09:02:48 +0000
Manifest next update: Tue 22 Sep 2026 11:46:48 +0000
Files and hashes: 1: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: K8j/ZLU+ci7JWbQ44lPBg2aflFRtCWtRODUltXPnDVo=)
2: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: Lg4qdsj1osZUt2Wgs1cQh8M+Cq27I8kA05MBhaZ1e2E=)
3: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: qCc2JIEbiwtQdnz7uQXbC2p3w6YwxAaU8dCI6McQWsM=)
4: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: oE4Q0cuL75fyXaIHf3JDUpfM+2/K4+wsnH/TeLPodS0=)
5: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: y5wzCpmCgccfr9+aDXB1mUmJvFdLQ1aEGTJds2iwsoo=)
6: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: xu1cN52iKwYrST7ZHiU1OG9/BN4NR23in1R/aZa/9/Y=)
7: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: +CIQNtkENDgMFXO899OFs+eQgqEbZwGsuSxbjsO2CJU=)
8: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: EFzx2gdrAoK4dLqP6OWhoqarBZwTNPP8hlTF8ndHsA8=)
9: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: sxFoSO5566DvevtkqciXR0xAuQamF9AudcC/0/+/BMA=)
10: AF6B7BCDACF90BA83205EA298327379BAB489418.crl (hash: YJUQQrwx9PRZUKxzsk/JcDaX1LMjCoXcdmCzNW7x3qE=)
11: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: m+sPMgDP6AqfDbfIIzCUcgfgt53+FkXMgNrd1zzKT1I=)
12: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: BxCzNrTcp0dp4A7C91gDRudiTOOmKrDBcvkaJa1pltE=)
13: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: g0pqFy9DWm0Sz42lbSirSeYkq3Vdx407OgsTjSScBgc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl
rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 11:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:df:3b:dd:24:e6:4d:19:92:c8:d3:68:24:75:c4:57:ad:b4:34:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF6B7BCDACF90BA83205EA298327379BAB489418
Validity
Not Before: Sep 21 09:02:48 2026 GMT
Not After : Sep 22 11:46:48 2026 GMT
Subject: CN=44E3C7694A409758BDDED9424A94A6C68A3E3C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8a:28:3d:91:5d:c0:38:35:53:8c:f8:b5:1d:
04:31:a3:00:11:29:a5:27:7e:50:ea:9b:0d:5e:76:
39:a4:e5:b0:ef:4c:38:4e:f5:d0:21:fe:a4:80:81:
b1:ee:6c:e8:30:6d:bc:f6:7d:20:d6:5f:be:96:2c:
8a:84:4b:f2:ab:fc:f6:54:66:a0:29:00:bb:27:53:
48:d9:96:d1:1f:f0:9c:e5:02:20:e0:89:9a:a8:92:
72:20:fd:79:f2:4a:a6:0a:2b:46:7c:6f:6d:4b:5f:
f4:4f:44:fd:0f:50:e4:5c:16:13:20:21:08:f4:47:
a8:03:ed:cd:9e:b7:a3:14:83:51:e3:a7:e3:77:30:
ac:48:ed:66:65:ff:3c:68:da:98:53:5f:4b:c5:c2:
0b:7f:bb:77:27:84:99:e7:3d:4e:ea:ba:9c:73:33:
15:cd:59:35:44:d5:41:e1:d1:17:d0:7d:05:b9:e6:
4d:7d:05:a8:91:b1:8e:1f:90:c1:4e:68:8e:98:0a:
c3:a2:f9:f0:e3:19:b3:ac:2f:3a:08:4c:b2:69:cf:
b2:58:07:73:12:75:d9:90:bd:81:9b:ae:e6:93:2a:
e3:75:23:15:dd:2f:86:42:c0:7f:ac:65:a4:5c:72:
88:ab:4c:71:fb:20:c4:7b:10:47:1b:16:67:df:5f:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E3:C7:69:4A:40:97:58:BD:DE:D9:42:4A:94:A6:C6:8A:3E:3C:37
X509v3 Authority Key Identifier:
keyid:AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f2:81:f1:dc:c8:50:38:aa:16:e6:b5:0c:e7:ce:24:1c:23:
d3:78:f1:30:7a:9f:ad:9e:14:15:d0:9e:a1:c5:b9:48:e2:23:
3d:4f:f6:cf:3a:ec:ac:57:8d:2e:61:11:21:42:1a:ab:3f:b5:
a8:3c:86:75:67:23:10:88:e0:6e:14:d3:ab:99:26:cd:7a:01:
dc:08:2c:70:07:2d:85:57:26:c1:c4:07:37:84:01:c5:5a:4b:
b8:1a:4c:be:02:aa:5c:91:4a:b7:9d:ad:43:3c:ec:0d:93:68:
9b:42:a2:03:b4:80:8c:26:b6:4f:1b:55:1d:4f:34:02:95:c7:
4c:01:f8:5d:a9:dc:9c:db:cf:6e:94:6c:33:5f:3f:8a:e0:1f:
cd:42:d6:e3:99:50:1c:c7:9f:ad:2b:ba:24:0f:b5:6f:ba:3e:
d4:e8:50:f3:65:6b:3b:15:b6:46:8f:f1:ec:90:f5:6b:f8:43:
18:14:b3:a7:71:b1:8a:43:5e:a7:56:5f:56:9b:5f:77:2b:94:
2f:da:40:1a:18:a0:35:da:3c:04:ea:27:75:3a:34:9e:8e:3a:
a7:ab:33:5d:8e:f1:51:43:ce:d9:63:41:32:00:05:78:a6:6b:
af:be:19:90:a8:59:99:40:cb:a8:bc:d2:43:ee:ca:1e:b5:82:
a9:74:b6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:30:08 2026 by rpki-client