
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft
File: AE003B21AF12D58F10BE6F5545672EC8E6787080.mft (raw, json)
Hash identifier: MEzxOMi0Okneyf+zBo1xSBlzGu6AST//u3QDoYfNko8=
Subject key identifier: D4:73:0B:46:7F:77:39:91:2E:EB:D6:36:A6:22:9A:CC:68:DC:57:78
Authority key identifier: AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80
Certificate issuer: /CN=AE003B21AF12D58F10BE6F5545672EC8E6787080
Certificate serial: 7F5C2110111B01EF5B2EA3212E4678BAEC080F41
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 19:43:01 +0000
Manifest this update: Tue 16 Jun 2026 19:38:01 +0000
Manifest next update: Wed 17 Jun 2026 20:45:01 +0000
Files and hashes: 1: AE003B21AF12D58F10BE6F5545672EC8E6787080.crl (hash: SkVajtU55QT1SPkMi9SBZf2qDZKHTQMr45yq9KaR6q0=)
2: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: E7IAKB6a6rTg4NTZiJDgOunJYvwyhjz5dVHJcY29CuI=)
3: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: OU61hsQm7THl5FxVFWjY1+WDAX/SnAXM5H/7moze5/s=)
4: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: +x8QwHcKAz5TqcTBc9O+X0JgIiURlcSnmizcSMrXdTg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl
rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:5c:21:10:11:1b:01:ef:5b:2e:a3:21:2e:46:78:ba:ec:08:0f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE003B21AF12D58F10BE6F5545672EC8E6787080
Validity
Not Before: Jun 16 19:38:01 2026 GMT
Not After : Jun 17 20:45:01 2026 GMT
Subject: CN=D4730B467F7739912EEBD636A6229ACC68DC5778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:31:01:e1:b9:04:84:bc:89:ca:88:76:72:
09:0e:78:32:42:93:66:5f:4e:08:1c:da:b8:f5:f1:
81:ab:64:5e:02:34:73:51:34:64:f4:bf:77:2c:bd:
e7:c4:aa:d5:98:52:a3:5a:9c:2b:17:12:31:a5:07:
c1:0e:36:90:37:9f:98:63:91:74:d5:aa:d9:78:f3:
f7:59:48:77:83:50:a1:c1:aa:85:76:e8:a5:c2:8d:
b0:e7:8b:54:93:60:72:de:7e:0e:a1:7f:a7:37:0b:
64:7f:28:85:a7:24:af:e4:fc:0f:2e:10:e0:f0:ab:
97:20:26:1e:3e:44:8e:cd:91:78:97:3d:64:de:a0:
b2:5c:39:9a:30:c8:a1:31:4c:e0:43:cb:9f:80:3a:
61:a6:13:0e:07:5d:30:b2:f4:a5:fa:59:0e:29:ca:
0b:03:cc:9c:b9:cc:da:80:9f:b4:85:11:16:f1:79:
33:e6:78:14:ce:f6:8e:b7:60:2a:87:30:5e:df:ef:
fa:2c:bc:db:45:c9:c9:de:4e:fb:c6:a3:df:ab:a5:
25:83:fb:fc:09:2d:c8:14:45:a5:b1:78:f9:be:41:
6f:67:0b:d6:62:eb:68:1a:03:9a:4d:7a:4b:ac:57:
21:be:ef:6c:f9:67:40:d2:56:6e:50:80:14:08:e3:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:73:0B:46:7F:77:39:91:2E:EB:D6:36:A6:22:9A:CC:68:DC:57:78
X509v3 Authority Key Identifier:
keyid:AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:dc:c9:4f:7a:50:98:c4:83:00:1a:15:ef:21:03:14:39:5e:
b5:25:0d:cb:cb:c6:d2:ed:f7:27:ca:01:c2:fb:bb:c3:10:88:
d4:d9:ab:f0:d6:2b:a2:9a:40:69:6e:35:76:89:10:d8:b6:48:
dd:e2:a3:b9:c6:c8:cc:08:23:26:cb:94:0d:ff:b0:29:4b:11:
31:a0:e1:a4:42:70:ce:4d:ca:1e:fc:f5:ec:17:e9:85:e2:c3:
7b:ee:d1:58:a9:73:21:6f:f3:af:45:d9:be:28:8a:53:43:57:
86:db:bb:10:40:44:40:8e:33:ab:cd:f1:24:7b:77:2b:0c:2f:
d6:6e:8c:bc:2f:10:7c:29:8c:aa:00:79:52:76:de:ab:33:7b:
4d:ac:7f:62:dd:2f:06:56:9b:da:01:69:dd:fd:d1:28:73:ec:
7f:8f:59:50:ba:ba:1a:f3:44:b3:fb:a4:3f:09:d1:9b:f6:f5:
40:dd:54:31:a2:e5:3e:95:b9:f3:0b:2b:65:9b:0e:c2:ec:f0:
a4:51:18:a3:64:41:83:ae:6d:ac:59:d7:98:85:94:60:73:fa:
cd:69:48:9d:c9:c3:ee:c1:b6:8f:23:dc:3e:3a:a6:93:b4:8c:
9a:c7:29:7c:a8:f0:14:d0:ec:5b:e3:05:82:77:7b:f2:d5:fd:
bb:58:3e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:03 2026 by rpki-client