
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
File: 7FAE1489FF53B0236543706FB85A70734890458C.mft (raw, json)
Hash identifier: 9owjQdTioEaBSy0jHmkgMSd1GaB4BkdGyrzdZX98jHI=
Subject key identifier: 69:18:FF:7B:6B:46:0F:43:88:A7:4E:8F:4B:1C:49:9C:9D:DD:21:43
Authority key identifier: 7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C
Certificate issuer: /CN=7FAE1489FF53B0236543706FB85A70734890458C
Certificate serial: 401232B41B2C3ABE3F6EFB7DCD35ADC78E0BCF33
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
Manifest number: 3C
Signing time: Mon 15 Jun 2026 05:12:39 +0000
Manifest this update: Mon 15 Jun 2026 05:07:39 +0000
Manifest next update: Tue 16 Jun 2026 08:23:39 +0000
Files and hashes: 1: 3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa (hash: 6M66XRhDFpnkGG9KVSAo4c89kPTU1jvZczvHe42e5Vk=)
2: 7FAE1489FF53B0236543706FB85A70734890458C.crl (hash: K2Yu7hvpz9aqVC7oSE3DxHCZalsUiYh8YKLPfVr4zzk=)
3: 3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa (hash: 67tLYB0A33fJCbu/P8oKthW+WxAqMc2wdryTZw9cK1c=)
4: 3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa (hash: JCQvcMoFj6uGUNUjgqCHZPoWp7SdWl4w0J5aS1v8QPA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl
rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 03:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:12:32:b4:1b:2c:3a:be:3f:6e:fb:7d:cd:35:ad:c7:8e:0b:cf:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FAE1489FF53B0236543706FB85A70734890458C
Validity
Not Before: Jun 15 05:07:39 2026 GMT
Not After : Jun 16 08:23:39 2026 GMT
Subject: CN=6918FF7B6B460F4388A74E8F4B1C499C9DDD2143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:24:8e:3f:b2:1e:46:c5:61:a0:5f:e0:b1:
34:a7:e0:11:e5:6c:fa:d9:05:35:f8:50:3c:ef:e8:
df:08:c2:f5:68:8b:c3:37:52:74:ef:40:43:7d:fe:
b3:72:54:47:af:d5:f2:93:ff:6b:38:19:c3:d1:3a:
bc:08:93:f7:5f:14:8b:40:d6:fa:18:99:f6:17:c5:
bc:ff:bf:78:e1:a6:02:14:d0:3e:ff:96:f9:d7:26:
1c:1c:20:80:3f:60:ff:fd:83:8b:e6:80:63:6d:70:
6e:e3:f6:75:e5:23:4a:fb:08:1f:21:48:35:44:2c:
00:a9:59:33:32:87:19:20:72:cb:75:dd:bb:40:33:
3d:c9:d7:52:89:ef:92:1d:d1:8f:1f:ce:03:a6:1f:
6c:d0:9d:84:8e:cc:97:af:04:db:80:48:3d:71:dc:
cc:3f:55:22:d7:f4:bd:96:e4:f3:0c:50:23:61:a4:
5d:b8:35:04:62:51:c4:70:7f:72:7b:ab:d6:ab:2b:
a4:f4:3e:42:f2:5c:f9:db:e1:28:7d:12:fc:da:25:
e9:e0:70:2c:c0:b3:90:a0:fc:6e:11:1d:c9:df:0c:
7c:bf:1d:0e:f6:61:31:99:0c:8c:ea:69:c6:9b:ba:
93:47:17:d7:36:14:e1:7f:98:83:a2:dc:3f:35:15:
a9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:FF:7B:6B:46:0F:43:88:A7:4E:8F:4B:1C:49:9C:9D:DD:21:43
X509v3 Authority Key Identifier:
keyid:7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f6:4a:cf:d0:b6:b0:c6:00:fb:19:7e:2b:d8:84:7c:20:a5:
8b:d8:21:26:f5:e3:6e:4c:26:d2:2b:0c:a9:f2:58:b5:d5:0f:
94:72:0c:8c:70:c8:8f:b4:c1:73:b5:20:a8:82:88:66:12:c9:
b1:d5:35:bc:e9:1c:43:70:d7:90:46:d3:af:8e:fa:b0:6b:1a:
60:5c:54:4a:d4:e2:f4:d8:e6:60:01:81:b2:a0:95:71:83:e7:
d3:d0:52:fe:5c:62:1e:7e:81:87:5a:52:89:7e:bd:91:8c:00:
8b:b6:dd:f3:2d:06:9a:3a:05:3f:4e:62:39:97:8e:4c:e7:c4:
29:10:74:9e:38:f8:52:f8:52:97:a9:2d:d2:d9:3f:d0:63:31:
8c:40:1f:4d:e5:e8:b7:1c:c8:67:76:76:37:ac:24:12:10:81:
25:cf:d2:6b:44:68:4d:86:2a:ef:ea:f3:bd:03:19:bf:98:6d:
fe:54:5b:98:bf:27:6f:2e:a4:3d:d3:82:ea:d4:5c:aa:fa:4c:
73:b3:46:46:b0:c0:63:a7:0a:9d:2f:68:94:9d:88:32:ea:f5:
2e:7c:4b:6a:b3:33:2f:34:1d:a6:15:92:e5:2f:df:e7:bb:2f:
66:86:e7:8d:03:68:88:92:81:f9:9a:12:2d:a3:a7:5e:1d:55:
03:f0:80:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 14:15:01 2026 by rpki-client