
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft
File: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft (raw, json)
Hash identifier: avGWLTEVoJDZ0fZG8YqVDlwFtxI2ifr96soOihOMNO8=
Subject key identifier: 65:E0:A1:1C:8C:94:17:59:60:01:20:9B:CC:4D:49:42:1C:E9:2A:A3
Authority key identifier: AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE
Certificate issuer: /CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE
Certificate serial: 7957912DF7CF589EBDC30A96C40C8E085A6C2BEB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 14:26:41 +0000
Manifest this update: Tue 16 Jun 2026 14:21:41 +0000
Manifest next update: Wed 17 Jun 2026 17:04:41 +0000
Files and hashes: 1: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl (hash: 0mMq9AWgNZfrAuRYviKPAPx7FHdvQCHhWQjibdao5YQ=)
2: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: 8knmmlk6VbCEzOwxll8mjdcL7YeA/GevLWgeSXesFqE=)
3: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: DURCQ0yaLxsLK0NyQoA/+8rorIbQkFZb7X0OVwrX9XQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl
rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:57:91:2d:f7:cf:58:9e:bd:c3:0a:96:c4:0c:8e:08:5a:6c:2b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE
Validity
Not Before: Jun 16 14:21:41 2026 GMT
Not After : Jun 17 17:04:41 2026 GMT
Subject: CN=65E0A11C8C9417596001209BCC4D49421CE92AA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:a6:57:53:52:1f:7d:2d:5c:a4:2a:86:4d:
b4:c9:7d:40:5d:18:18:4a:af:9d:52:1a:81:d0:e3:
32:10:27:d4:b6:66:38:cd:3a:71:24:ab:bb:e6:a6:
ed:70:3c:a8:b1:c7:dc:83:3f:a0:68:a8:e3:0f:b9:
06:1d:bc:08:29:4e:c5:74:80:d9:9f:15:a1:f5:ab:
f3:aa:c9:2b:f7:b3:7e:48:5f:c3:f2:e2:57:5c:d0:
e6:e6:f7:6c:82:c3:d7:64:7e:1d:96:78:5f:d9:12:
7b:72:24:24:40:ee:3d:08:02:6a:da:65:bb:63:6d:
13:9d:d6:da:b3:a7:be:2a:c0:ce:88:18:e1:39:a6:
fd:94:83:6e:5c:89:eb:85:a2:f2:7c:7e:e1:5a:77:
13:28:9a:8f:11:e5:7a:14:df:40:2f:4a:5c:15:58:
7a:30:d9:7d:f9:27:75:bf:70:40:c4:9a:13:9a:b9:
d2:69:17:c6:23:73:ee:c7:6b:75:14:1a:0d:a6:79:
4b:a3:ff:d5:e3:45:71:f2:01:fd:1f:f5:42:43:b1:
94:62:dc:e7:12:bf:3c:cb:b4:c0:6c:78:67:ae:be:
1d:1b:a4:50:7f:6b:66:12:bd:d7:77:f3:fe:f9:0f:
6d:87:80:18:4d:cf:c7:a2:c7:d1:a8:31:1d:02:08:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E0:A1:1C:8C:94:17:59:60:01:20:9B:CC:4D:49:42:1C:E9:2A:A3
X509v3 Authority Key Identifier:
keyid:AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5d:0f:18:a1:11:77:9a:7d:e3:96:82:02:41:ff:ca:c4:c9:
bc:0b:38:2d:5c:a7:ef:49:93:33:36:02:77:61:83:2c:d2:c8:
6b:c4:a7:9b:fc:b1:ba:f1:36:4d:d1:aa:08:33:2d:7a:76:0b:
e0:4f:79:10:21:55:eb:e5:36:c4:d8:8d:01:dc:8f:bb:a6:1c:
aa:f7:25:ac:77:c7:62:4e:b2:ff:0b:e3:d1:e1:21:cd:5c:36:
4b:ea:ec:8d:d6:6a:c1:1d:40:3a:c2:7d:48:97:68:8a:26:bc:
75:d0:68:8d:9f:81:09:72:a6:33:ee:42:08:68:b6:60:80:27:
be:ce:99:05:f4:8a:68:40:b8:d5:c4:29:62:1d:1f:d5:00:82:
51:5d:30:2d:cf:3d:ff:05:f2:09:49:cf:42:cb:60:d8:15:1e:
37:6e:6a:fc:4a:29:b1:5c:d5:cb:51:4d:92:92:11:3f:3f:cd:
8a:cf:b8:7c:d3:7b:f2:18:b2:f1:bc:11:73:d2:b3:5a:1e:a4:
24:7a:44:f6:9b:36:9c:28:df:8c:bb:05:16:78:d2:f6:62:ba:
f0:5c:d2:47:8a:8e:91:ce:d1:42:1c:05:9a:b8:8d:32:e8:cb:
05:e8:b8:1e:54:d6:f4:e1:f5:4f:e8:6e:cc:18:7b:bb:ae:8b:
4a:6b:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:58 2026 by rpki-client