
$ rpki-client -vvf rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
File: 06AAF713D939AC6C090B6343B6905318B83A1DE3.mft (raw, json)
Hash identifier: vJaJoPoRp7qfOUbFz0TXjfJ6dw0w43Pv89C8PoTDNCo=
Subject key identifier: BB:31:D4:7A:2B:6E:42:57:0F:79:89:42:A7:73:85:28:00:96:0D:85
Authority key identifier: 06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3
Certificate issuer: /CN=06AAF713D939AC6C090B6343B6905318B83A1DE3
Certificate serial: 25E7D9C5A34543595E5917921CEC929D8A2DCB52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 20:42:01 +0000
Manifest this update: Tue 28 Jul 2026 20:37:01 +0000
Manifest next update: Wed 29 Jul 2026 21:52:01 +0000
Files and hashes: 1: 06AAF713D939AC6C090B6343B6905318B83A1DE3.crl (hash: lC8UYZrzRE1x5SWk1bgXVIIwhhetPlRBSpTJJexASAM=)
2: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: PkVVbgoFw66MPF2zwjon2GNSfbIfJE+9WsRpKXP88mM=)
3: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: 4RQga7sC7v8Tfsu3sFFTumIkJvaZxGdgZNTnQPnNeyc=)
4: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: j9SbKnw1WxVlPJ1dulKyLWaPKzwCQU/YUp9+97iiA64=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl
rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e7:d9:c5:a3:45:43:59:5e:59:17:92:1c:ec:92:9d:8a:2d:cb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06AAF713D939AC6C090B6343B6905318B83A1DE3
Validity
Not Before: Jul 28 20:37:01 2026 GMT
Not After : Jul 29 21:52:01 2026 GMT
Subject: CN=BB31D47A2B6E42570F798942A773852800960D85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:6f:cf:0d:19:40:a2:f1:ba:74:ea:7b:20:
a4:ac:0e:c8:4e:7b:26:cd:bc:f7:9b:18:9f:ad:08:
df:e6:bb:cb:ee:b2:41:06:9a:36:33:10:07:c1:30:
96:92:97:da:4a:b8:7b:b7:19:31:1f:07:75:92:d0:
c4:28:97:5d:56:de:93:7b:32:5e:25:c0:06:bc:73:
4f:21:c0:4c:72:1b:91:ec:ca:d8:fa:2d:88:14:01:
f4:9f:34:f1:ad:cc:44:23:6b:46:34:77:cf:56:7b:
40:e5:43:91:8c:e7:44:80:df:61:d0:94:25:69:40:
74:c8:ee:14:d2:f9:6c:6c:b2:99:5e:8b:3b:f7:18:
4a:9a:ef:2e:93:64:5c:21:ce:78:46:ca:32:a7:85:
71:64:fe:1c:8d:6f:21:75:65:4d:85:67:22:7d:8d:
4f:e4:e9:d3:03:d2:18:a4:e9:08:a5:3e:2d:cb:3c:
10:90:95:f1:46:fb:2d:c3:74:db:28:e5:7f:8d:76:
af:a0:99:ba:ab:77:0d:a3:ac:9f:37:12:86:6e:1a:
b9:82:10:87:6d:a5:04:08:93:26:c9:60:3e:52:e4:
be:a3:06:6f:51:c0:5b:7d:25:a1:61:55:9f:33:73:
dc:c8:67:11:52:ae:10:b6:b2:ac:27:50:0c:45:b6:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:31:D4:7A:2B:6E:42:57:0F:79:89:42:A7:73:85:28:00:96:0D:85
X509v3 Authority Key Identifier:
keyid:06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:26:52:da:b0:41:dd:4f:16:b5:68:16:52:0e:c7:91:b6:04:
b6:f9:1f:ae:f1:6e:b9:9f:25:c7:1e:cf:85:19:3b:6d:9a:d9:
62:40:c0:79:b2:bf:2b:a2:60:23:cd:dc:d0:69:a7:9e:89:cf:
7d:ae:24:c9:0a:9d:ba:32:87:5f:3c:32:2d:9a:a2:a3:19:05:
39:0f:1a:57:0e:07:32:45:97:d8:89:9e:d3:6f:4a:c2:dd:95:
a0:79:e6:64:4e:b6:27:34:aa:ab:91:69:fe:4b:ea:10:a0:2d:
99:99:8c:26:59:01:d0:bb:4b:eb:6c:50:d6:f8:ee:f8:c5:3a:
fe:f0:4f:47:10:5b:83:d4:09:92:38:54:ef:04:79:e4:82:26:
64:2a:d0:6b:a8:a3:3d:c5:d0:7e:8a:66:5a:85:86:a2:1d:aa:
5e:3d:a2:64:69:8d:b7:4a:5b:68:b0:b2:47:63:32:a6:b6:46:
ac:ec:cc:c2:d8:af:b9:ad:1c:61:a2:8e:bf:39:32:2e:4e:1b:
b8:dc:38:c7:60:0d:55:f1:5b:95:8f:07:4d:af:b7:65:ec:5c:
d4:c8:57:44:97:d5:53:18:95:03:bc:40:f8:56:a8:7b:62:0f:
33:0f:4b:11:c8:8a:15:35:ef:d5:24:9e:f9:03:a6:00:9f:7f:
2f:bd:78:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:46:12 2026 by rpki-client