
$ rpki-client -vvf rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
File: 06AAF713D939AC6C090B6343B6905318B83A1DE3.mft (raw, json)
Hash identifier: b0QmR4sAOrDLfHh1tglGRAsrABE8n4o8ALlzVIjH1vI=
Subject key identifier: A2:A6:CA:35:2C:D9:0D:3C:F9:2D:21:29:46:17:5E:A1:57:E1:EE:DA
Authority key identifier: 06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3
Certificate issuer: /CN=06AAF713D939AC6C090B6343B6905318B83A1DE3
Certificate serial: 762EB2E4F1D30346F8C072CBF21D42BD9931C57F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 13:36:06 +0000
Manifest this update: Sat 13 Jun 2026 13:31:06 +0000
Manifest next update: Sun 14 Jun 2026 16:42:06 +0000
Files and hashes: 1: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: j9SbKnw1WxVlPJ1dulKyLWaPKzwCQU/YUp9+97iiA64=)
2: 06AAF713D939AC6C090B6343B6905318B83A1DE3.crl (hash: UZ4Z/MGSvqJZn7RKLeIH219CcnLlOcuYUDIRdMjpCDc=)
3: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: 4RQga7sC7v8Tfsu3sFFTumIkJvaZxGdgZNTnQPnNeyc=)
4: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: PkVVbgoFw66MPF2zwjon2GNSfbIfJE+9WsRpKXP88mM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl
rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:2e:b2:e4:f1:d3:03:46:f8:c0:72:cb:f2:1d:42:bd:99:31:c5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06AAF713D939AC6C090B6343B6905318B83A1DE3
Validity
Not Before: Jun 13 13:31:06 2026 GMT
Not After : Jun 14 16:42:06 2026 GMT
Subject: CN=A2A6CA352CD90D3CF92D212946175EA157E1EEDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:92:ca:58:79:ad:e1:4d:b8:ca:34:10:db:
ef:76:89:88:cc:da:84:d0:e2:ba:0c:13:4d:54:84:
6d:76:52:83:20:6f:cf:2d:55:57:21:8d:4e:27:7e:
23:b1:f7:e2:72:8f:de:2e:dd:35:23:d5:92:68:de:
e0:63:45:a4:07:7b:44:b6:81:fe:91:b3:b9:d2:9a:
63:19:f8:24:53:63:4e:ec:0e:a6:55:60:2f:c6:6e:
92:05:87:93:0d:1e:0e:ca:70:82:74:68:92:08:45:
97:aa:64:1e:40:67:58:2e:5c:46:67:da:b8:f4:e4:
53:c8:38:99:ee:1a:95:a9:be:b2:cd:e9:84:c6:24:
d5:3c:88:a9:4e:59:d9:87:7d:b0:52:8c:e6:d4:48:
12:65:7c:3c:5d:22:26:2f:3c:1e:ea:45:5e:e8:32:
0c:7d:8d:97:7f:6e:5a:a0:a7:39:a6:5e:8d:5b:68:
73:cd:12:bf:7a:c0:08:5b:a2:dd:4a:06:a4:b1:7e:
82:0e:05:7d:dd:f4:04:31:35:5e:0c:a8:dd:11:6e:
b0:dc:41:ea:5e:b3:9b:75:83:c7:3d:9f:3c:64:83:
31:2b:d7:ee:5c:22:d8:05:3a:9e:c0:30:9b:9a:c1:
f3:46:a7:75:2a:15:44:bf:4e:55:62:a8:6a:2d:74:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A6:CA:35:2C:D9:0D:3C:F9:2D:21:29:46:17:5E:A1:57:E1:EE:DA
X509v3 Authority Key Identifier:
keyid:06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f5:b9:38:4b:2e:1c:4b:f2:00:ab:50:42:77:38:c3:1f:82:
ae:b5:04:b5:d7:e9:b0:44:43:92:1e:62:df:2e:ec:47:e7:04:
fa:58:ee:b3:a3:33:b8:17:19:e4:29:19:57:c5:5f:fe:7f:53:
6a:49:eb:25:74:28:29:5c:db:86:5b:c1:28:1e:1e:b6:bc:79:
14:6b:24:7a:af:38:6a:3d:fe:54:66:87:77:85:3f:c8:22:97:
45:11:1c:34:42:cb:c5:39:75:ed:b5:37:7b:5b:22:3a:9c:86:
10:0c:b9:6a:d0:ab:39:0c:41:8e:d2:98:2d:43:20:fe:d5:0e:
f1:9b:7b:90:07:4b:bf:37:02:71:5d:bc:cd:d0:b4:d8:4a:9e:
26:b1:cd:b3:8e:7f:68:61:3f:21:be:46:7f:cd:60:a3:7d:78:
d7:e1:54:e4:15:43:3d:b4:ac:de:bd:54:99:4d:57:13:9b:59:
b9:cd:22:72:a2:94:59:a6:8f:44:ba:80:53:20:97:93:5f:bb:
ef:61:1c:c5:68:61:b4:8b:8d:b0:b1:80:56:73:d7:4e:f5:46:
7d:93:f5:34:37:ce:5b:6e:f0:0f:ef:0e:8b:2b:c8:fa:8f:bc:
49:91:6a:06:1d:78:09:33:08:46:9f:56:2e:d4:7e:d9:c6:68:
d1:0d:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:40:03 2026 by rpki-client