
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
File: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft (raw, json)
Hash identifier: WoTayLSnv3FkOJ4s1wopXx7y3dQh4I1EBxKCArXmuLM=
Subject key identifier: F3:F6:3C:96:6C:E7:A3:76:78:23:A6:5F:AD:8B:3D:17:59:2A:0D:1E
Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
Certificate issuer: /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Certificate serial: 6EAD008972854CA526F0F794767DD0C739FF87DD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
Manifest number: A5
Signing time: Thu 03 Sep 2026 02:41:12 +0000
Manifest this update: Thu 03 Sep 2026 02:36:12 +0000
Manifest next update: Fri 04 Sep 2026 05:14:12 +0000
Files and hashes: 1: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: ry1zcsxyp5rx5aqnNqVzN9RbPAzFPE5OKy5fVA/tBsY=)
2: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: UF7aCyE5FESxwGGWBM/poN89N17rR7jv22FSOfKjvlk=)
3: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: PK17dkljk3cirdVkAhnzBVlvFjbQaBFW384JrVTU5eI=)
4: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: SsEkvpd7Ya0vJcTfzCdLVaBKw02BlHsoNedgx56rz7o=)
5: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: Azh7PmQbddqZUxJOxiTwYESOb0WkJfacl3QlGxSp7Ls=)
6: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: aykb9pBBSkXI3tTi9mpSHn2tVZ0H++we7ChH689sRxg=)
7: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: 0nmqU55YZ3VtV1W8dEUj6+BAJuQ389WNc46VpzYQeA4=)
8: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: Cz0RsKoVkeeB1IsUqTtQO8T5aC2XyKwMvob94kUO7oA=)
9: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: xtIac8VAw15L09WUieeUSir9eYOGXhXfymWhdgL7e/Y=)
10: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl (hash: K3sxGRnf4rdRJiUMhdIdw1CRwzsP+uh2OVF6ZQ2EDXY=)
11: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: bzgmeNk+RTlBoGqusN6v8fvRVhXp8YED5fczTfvL+Pk=)
12: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 9bsIgvpn+nDqB1JkEO35LZUnAXe5IvhJf7x4sHOoJLY=)
13: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sfzwSxhwf93yzsApW5cK5kJn4eNAyyEFWMZjQtMY6Ok=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 05:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ad:00:89:72:85:4c:a5:26:f0:f7:94:76:7d:d0:c7:39:ff:87:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Validity
Not Before: Sep 3 02:36:12 2026 GMT
Not After : Sep 4 05:14:12 2026 GMT
Subject: CN=F3F63C966CE7A3767823A65FAD8B3D17592A0D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:f2:95:b4:0a:69:2d:e8:1d:6f:17:83:91:
7e:a9:e5:64:58:39:5d:59:a7:20:9c:a3:40:e8:fd:
3d:c4:58:13:41:4a:9d:43:dc:d4:2f:b8:42:27:02:
33:c9:d2:cb:43:a1:67:9c:fa:19:79:d1:9a:ec:7a:
9b:f0:a4:bd:9d:5f:74:69:7d:d3:83:f1:92:d5:50:
06:54:bf:26:34:e3:d6:20:32:4d:89:3f:d6:14:2b:
73:95:c9:b0:e4:10:c1:91:91:c4:5b:67:31:98:65:
98:9d:88:ec:59:be:84:e8:09:c6:64:6a:cc:36:0d:
29:a2:cc:51:8e:e5:95:ed:56:93:ef:2c:77:2d:77:
23:3a:0e:c9:d7:f3:96:88:46:24:17:07:3d:21:55:
9d:3b:93:a8:8a:23:6e:fd:6b:eb:2d:7a:10:f9:3b:
f1:90:9b:69:c7:2a:0b:4f:b7:fb:60:1b:02:be:84:
ab:e3:7c:4f:2a:30:66:2e:7a:a8:19:69:16:4f:66:
fc:bf:70:a6:6b:05:81:1e:ef:25:8a:92:b9:29:c4:
17:5f:2d:dd:37:4f:6c:19:fe:be:9c:16:30:5b:40:
38:e3:97:36:01:01:1b:52:ce:e2:ca:bf:fc:a0:76:
7b:57:06:1f:29:f9:88:43:df:78:c2:f6:cf:1d:9e:
f1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F6:3C:96:6C:E7:A3:76:78:23:A6:5F:AD:8B:3D:17:59:2A:0D:1E
X509v3 Authority Key Identifier:
keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a3:d2:0d:c5:e3:75:0b:5f:74:47:b4:5a:77:b0:95:c0:a8:
84:73:63:81:36:ec:74:74:07:be:77:18:c7:27:21:8b:3f:1a:
45:b6:0c:40:9a:43:45:35:97:ae:00:28:1f:c4:95:74:d8:ab:
a5:38:92:2d:43:8d:5d:7c:b3:45:0f:61:4c:dd:e6:f8:93:91:
b7:cb:26:f8:a4:f3:46:58:2e:7d:9e:e6:89:5d:36:9a:5a:36:
b8:09:73:e8:ef:ad:14:59:2d:53:d3:b6:0d:9f:34:ae:4f:8d:
db:44:05:e4:87:e1:e3:03:67:ae:11:d2:77:5c:49:2f:2b:0f:
e8:f8:9b:6a:8c:b2:06:57:ca:3c:54:0f:94:10:66:fe:dd:66:
25:5d:d0:d1:46:63:c2:2e:f1:ae:51:25:16:fe:a0:05:e5:74:
38:af:9f:95:e1:57:83:aa:d1:b8:82:fd:a7:b9:84:64:5d:63:
61:7f:fd:4f:96:12:0a:1b:ae:b7:f1:2d:32:f6:cb:3a:d8:29:
33:3a:e9:3f:61:60:f4:9d:55:0d:0d:f4:67:f7:f1:85:4f:ad:
25:c2:0e:61:18:9f:f5:ea:97:c1:7d:a6:20:12:2a:09:82:9b:
de:54:17:4d:eb:de:ed:a0:96:f1:84:22:9a:3b:4b:79:ee:c6:
59:90:80:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 13:00:09 2026 by rpki-client