
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft
File: AE03A0FB122D3B828822172D20A923BA84A5CB76.mft (raw, json)
Hash identifier: /uV+tN7gnD2i/pjU6xvjmUHw21qJBMlx3nqiwVjPeQk=
Subject key identifier: 27:19:F8:10:7E:AB:A0:8E:EF:D7:F4:CC:14:CC:3E:A7:00:87:8D:79
Authority key identifier: AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76
Certificate issuer: /CN=AE03A0FB122D3B828822172D20A923BA84A5CB76
Certificate serial: 18920483EE5336568AD83DF2745D17C90C0706FF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 01:27:34 +0000
Manifest this update: Tue 21 Jul 2026 01:22:34 +0000
Manifest next update: Wed 22 Jul 2026 01:45:34 +0000
Files and hashes: 1: AE03A0FB122D3B828822172D20A923BA84A5CB76.crl (hash: 9kmP3RpIdzhd1zWgkOwyYfiXW5WZ57LV/pUdZFMY0vA=)
2: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: ur7yrhWHiFsydqZ/PScY2ULnHYX291BUphgqfad6RC4=)
3: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: sM8kT9+lnDp66j8gZ6lQEt5JkL6qeZtqa7PnwIaHyfU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl
rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 01:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:92:04:83:ee:53:36:56:8a:d8:3d:f2:74:5d:17:c9:0c:07:06:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE03A0FB122D3B828822172D20A923BA84A5CB76
Validity
Not Before: Jul 21 01:22:34 2026 GMT
Not After : Jul 22 01:45:34 2026 GMT
Subject: CN=2719F8107EABA08EEFD7F4CC14CC3EA700878D79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:25:05:fb:df:a7:b7:1f:28:ad:81:9a:58:
f4:59:d2:b4:8d:2a:30:aa:24:65:ff:c0:bd:91:a8:
0e:95:30:32:58:01:3d:c1:3e:37:c3:06:c9:da:70:
fc:c5:3e:c5:44:db:14:ae:be:6f:86:60:8d:52:4e:
24:1d:e2:e8:be:fc:e2:18:38:95:23:5d:5b:c0:6b:
e3:b3:c6:3a:e5:43:95:0f:47:02:30:94:e9:41:82:
f4:a4:dd:b1:cc:94:69:84:58:a1:97:03:15:ea:55:
51:48:90:b5:5e:00:15:2d:31:e9:30:f4:b1:fa:fd:
e3:65:d4:f8:98:f5:e9:cf:93:2d:9a:5d:f8:43:c4:
94:7c:8d:d0:5d:6f:99:a2:87:df:64:5e:32:38:e0:
48:17:75:4f:15:d2:bc:67:f6:c0:bb:c5:ec:7f:46:
41:7a:00:9d:10:c8:41:b3:17:e4:d2:9b:dc:68:26:
13:d8:0e:76:03:f2:f1:b9:df:a9:22:69:b5:0e:df:
4c:a5:17:40:08:38:da:12:8e:1f:ee:78:12:ec:36:
6e:1f:ce:d6:14:48:cb:b3:93:93:73:f6:30:26:ca:
85:99:97:82:a4:14:27:30:5e:fe:4d:02:74:2e:46:
ec:a9:bf:b5:29:ae:d1:10:e1:36:d7:0c:aa:21:c6:
44:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:19:F8:10:7E:AB:A0:8E:EF:D7:F4:CC:14:CC:3E:A7:00:87:8D:79
X509v3 Authority Key Identifier:
keyid:AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fa:00:19:41:42:7c:11:df:d0:38:4d:3d:db:94:ce:ec:8e:
13:9e:4b:dc:4a:7b:ce:26:61:40:77:72:44:48:bd:cf:b1:53:
e3:28:4b:7f:52:2d:d9:0f:0d:81:5d:2f:04:d0:a8:eb:0d:d5:
b8:6b:ec:00:4b:ff:1a:57:2c:3f:88:44:ad:6c:08:2a:e2:83:
1f:f0:e6:df:e8:11:51:45:fb:0b:c8:e1:3c:47:ad:d0:01:0a:
bc:b7:d2:da:df:2d:fd:2e:78:c4:d3:27:7d:74:9f:7b:7a:fb:
19:db:5f:c9:6b:26:7e:fc:8a:44:0a:c7:07:23:36:56:5c:59:
52:e8:0b:03:b0:f2:df:b9:38:76:2f:ba:a5:48:79:58:7f:65:
1b:ce:97:24:4f:88:05:26:b7:8a:0e:47:db:16:32:52:a9:d5:
fd:63:69:74:96:54:1f:8d:14:a6:d5:b5:2e:71:c4:98:bf:9f:
56:55:2d:d2:cc:c2:08:87:3c:9f:6a:ca:e6:f6:bf:0a:5d:a6:
aa:db:10:fa:32:9e:63:89:59:d2:1a:9e:e5:9b:c0:0c:d5:cb:
50:f0:55:22:eb:0d:5c:8f:8f:95:1d:f7:51:e2:38:92:2d:b6:
58:25:bb:f7:8a:4f:42:ce:82:99:2d:75:6b:93:c9:96:f0:ce:
3e:ab:fb:e9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGJIEg+5TNlaK2D3ydF0XyQwHBv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUwM0EwRkIxMjJEM0I4Mjg4MjIxNzJEMjBBOTIzQkE4
NEE1Q0I3NjAeFw0yNjA3MjEwMTIyMzRaFw0yNjA3MjIwMTQ1MzRaMDMxMTAvBgNV
BAMTKDI3MTlGODEwN0VBQkEwOEVFRkQ3RjRDQzE0Q0MzRUE3MDA4NzhENzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLCUF+9+ntx8orYGaWPRZ0rSN
KjCqJGX/wL2RqA6VMDJYAT3BPjfDBsnacPzFPsVE2xSuvm+GYI1STiQd4ui+/OIY
OJUjXVvAa+OzxjrlQ5UPRwIwlOlBgvSk3bHMlGmEWKGXAxXqVVFIkLVeABUtMekw
9LH6/eNl1PiY9enPky2aXfhDxJR8jdBdb5mih99kXjI44EgXdU8V0rxn9sC7xex/
RkF6AJ0QyEGzF+TSm9xoJhPYDnYD8vG536kiabUO30ylF0AIONoSjh/ueBLsNm4f
ztYUSMuzk5Nz9jAmyoWZl4KkFCcwXv5NAnQuRuypv7UprtEQ4TbXDKohxkQ3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJxn4EH6roI7v1/TMFMw+pwCHjXkwHwYDVR0j
BBgwFoAUrgOg+xItO4KIIhctIKkjuoSly3YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzYxZTlkZTItYTRlYy00N2EyLTliYjgtMTA4MjFkZGE2N2YzLzAvQUUwM0EwRkIx
MjJEM0I4Mjg4MjIxNzJEMjBBOTIzQkE4NEE1Q0I3Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BRTAzQTBGQjEyMkQzQjgyODgyMjE3MkQyMEE5MjNCQTg0QTVD
Qjc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli
YjgtMTA4MjFkZGE2N2YzLzAvQUUwM0EwRkIxMjJEM0I4Mjg4MjIxNzJEMjBBOTIz
QkE4NEE1Q0I3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGD6ABlBQnwR39A4TT3blM7sjhOeS9xKe84m
YUB3ckRIvc+xU+MoS39SLdkPDYFdLwTQqOsN1bhr7ABL/xpXLD+IRK1sCCrigx/w
5t/oEVFF+wvI4TxHrdABCry30trfLf0ueMTTJ310n3t6+xnbX8lrJn78ikQKxwcj
NlZcWVLoCwOw8t+5OHYvuqVIeVh/ZRvOlyRPiAUmt4oOR9sWMlKp1f1jaXSWVB+N
FKbVtS5xxJi/n1ZVLdLMwgiHPJ9qyub2vwpdpqrbEPoynmOJWdIanuWbwAzVy1Dw
VSLrDVyPj5Ud91HiOJIttlglu/eKT0LOgpktdWuTyZbwzj6r++k=
-----END CERTIFICATE-----
Generated at Tue Jul 21 07:51:27 2026 by rpki-client