
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
File: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft (raw, json)
Hash identifier: 5EwjTmVxuvDwZlhUAT5iQxQy9aF06/zOyVVOasoMc2E=
Subject key identifier: 9E:D0:39:68:6D:AF:0A:30:C7:0E:5D:D9:81:C6:E6:DA:D0:2C:A8:9C
Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
Certificate issuer: /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Certificate serial: 59FED2CFEC4A7EDA81156C83098BD7F3D0490343
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 19:02:56 +0000
Manifest this update: Tue 02 Jun 2026 18:57:56 +0000
Manifest next update: Wed 03 Jun 2026 21:18:56 +0000
Files and hashes: 1: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: Azh7PmQbddqZUxJOxiTwYESOb0WkJfacl3QlGxSp7Ls=)
2: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: UF7aCyE5FESxwGGWBM/poN89N17rR7jv22FSOfKjvlk=)
3: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: Cz0RsKoVkeeB1IsUqTtQO8T5aC2XyKwMvob94kUO7oA=)
4: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 9bsIgvpn+nDqB1JkEO35LZUnAXe5IvhJf7x4sHOoJLY=)
5: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: PK17dkljk3cirdVkAhnzBVlvFjbQaBFW384JrVTU5eI=)
6: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl (hash: tIV47yciW66xhDaP6X8W0kZ3P4s4nTOcd0rnFvFjxhA=)
7: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: ry1zcsxyp5rx5aqnNqVzN9RbPAzFPE5OKy5fVA/tBsY=)
8: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: bzgmeNk+RTlBoGqusN6v8fvRVhXp8YED5fczTfvL+Pk=)
9: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: 0nmqU55YZ3VtV1W8dEUj6+BAJuQ389WNc46VpzYQeA4=)
10: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: SsEkvpd7Ya0vJcTfzCdLVaBKw02BlHsoNedgx56rz7o=)
11: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: xtIac8VAw15L09WUieeUSir9eYOGXhXfymWhdgL7e/Y=)
12: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: aykb9pBBSkXI3tTi9mpSHn2tVZ0H++we7ChH689sRxg=)
13: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sfzwSxhwf93yzsApW5cK5kJn4eNAyyEFWMZjQtMY6Ok=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fe:d2:cf:ec:4a:7e:da:81:15:6c:83:09:8b:d7:f3:d0:49:03:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Validity
Not Before: Jun 2 18:57:56 2026 GMT
Not After : Jun 3 21:18:56 2026 GMT
Subject: CN=9ED039686DAF0A30C70E5DD981C6E6DAD02CA89C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:cb:4e:eb:17:10:90:45:a2:3e:34:26:f6:
76:b2:9b:e7:38:24:10:8e:8f:fa:d3:11:f7:5d:ed:
28:c2:7b:07:dc:c7:5c:a2:2d:e4:5e:7c:85:da:16:
2b:18:b7:21:a7:a8:4a:23:e5:3c:16:47:a0:a1:f3:
35:6d:04:7a:ae:e8:9b:c6:f2:f9:11:aa:09:d0:6c:
4c:96:bd:55:3a:86:ec:ca:f5:d6:3f:e8:1b:67:e8:
19:d2:46:16:79:2c:7e:a5:dd:bc:e4:fe:52:9d:9b:
bc:4e:18:28:e0:10:23:9c:c7:94:94:07:47:0c:0e:
8f:6e:1b:12:1a:ea:b1:ae:9c:d6:d2:b7:07:c8:31:
c1:0c:07:78:31:ca:48:6c:a8:cb:9c:cf:1a:a9:c0:
45:6e:74:ad:a3:68:bc:f5:d5:90:d1:12:65:e9:e3:
45:0d:65:d0:be:a0:a7:ab:95:d0:e2:12:13:f7:df:
bc:58:03:f7:c0:05:61:f0:03:f5:c5:96:aa:b8:c6:
2e:39:68:47:25:02:76:d6:c8:be:5d:8a:3c:73:47:
23:a2:3d:d8:ef:a2:31:be:0a:14:2a:06:c7:2b:9d:
94:33:e5:49:c6:81:3c:8e:b7:c1:24:1a:eb:0f:76:
f5:39:62:09:84:ef:86:4c:c8:4f:3a:ff:07:70:b3:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D0:39:68:6D:AF:0A:30:C7:0E:5D:D9:81:C6:E6:DA:D0:2C:A8:9C
X509v3 Authority Key Identifier:
keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:58:eb:2f:b9:7c:56:85:3c:0d:09:07:c6:f1:1d:46:dc:40:
6d:5e:a7:c2:8f:6d:67:71:78:e8:64:61:86:f5:b9:77:4e:9e:
d7:d7:cf:09:0a:6a:77:e8:9e:d0:b0:9a:a4:77:a1:da:ed:3f:
57:50:77:59:65:8d:66:7a:51:fe:65:d0:23:6d:4b:b9:3f:7a:
3a:2d:3a:a2:98:d9:fe:2b:65:bd:d3:19:63:a6:0c:32:82:24:
61:74:90:99:c4:b2:39:45:67:1b:a1:72:68:18:27:be:d5:f8:
2e:18:de:25:65:d9:85:68:5c:81:ef:67:ba:12:90:17:e6:09:
d1:4a:8a:d0:31:4a:a2:61:80:65:9c:1f:96:01:29:08:d3:30:
b3:10:90:26:e7:cc:d7:29:2e:59:60:7b:c1:77:46:ae:29:88:
0f:ba:06:cf:0c:66:bd:4d:38:3a:e7:b7:1f:12:ab:37:29:c3:
3c:79:94:d0:6f:b4:18:e7:2c:75:a2:7d:1f:ee:8e:7b:6a:53:
35:8c:53:ee:63:cc:28:7b:8f:6c:25:f8:33:5c:96:7d:d7:e4:
1f:f0:33:54:cb:43:84:ce:f6:2a:c5:c1:33:83:eb:15:80:e2:
ca:6a:aa:ef:3e:00:dd:33:a9:2a:f6:fa:77:9f:d6:72:82:b1:
2e:59:84:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:28:21 2026 by rpki-client