
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
File: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft (raw, json)
Hash identifier: /tU4bP3sXQZv2zssb3c27BuzOOo/Q3jMmI1EoO27oZc=
Subject key identifier: AA:D0:C7:E4:45:4A:E6:B1:C4:DB:10:7D:E2:44:A9:0E:E6:F4:86:4D
Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
Certificate issuer: /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Certificate serial: 6DBF6B5123EED617DB46E898467825B0F4EFB119
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
Manifest number: EA
Signing time: Sat 24 Oct 2026 07:58:49 +0000
Manifest this update: Sat 24 Oct 2026 07:53:49 +0000
Manifest next update: Sun 25 Oct 2026 09:24:49 +0000
Files and hashes: 1: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: UF7aCyE5FESxwGGWBM/poN89N17rR7jv22FSOfKjvlk=)
2: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: Cz0RsKoVkeeB1IsUqTtQO8T5aC2XyKwMvob94kUO7oA=)
3: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 9bsIgvpn+nDqB1JkEO35LZUnAXe5IvhJf7x4sHOoJLY=)
4: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: PK17dkljk3cirdVkAhnzBVlvFjbQaBFW384JrVTU5eI=)
5: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sfzwSxhwf93yzsApW5cK5kJn4eNAyyEFWMZjQtMY6Ok=)
6: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: 0nmqU55YZ3VtV1W8dEUj6+BAJuQ389WNc46VpzYQeA4=)
7: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: aykb9pBBSkXI3tTi9mpSHn2tVZ0H++we7ChH689sRxg=)
8: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: SsEkvpd7Ya0vJcTfzCdLVaBKw02BlHsoNedgx56rz7o=)
9: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl (hash: aQA/LHYX3HTMJ93EnWvSTMjMV80Tiul5d6gtL0eY10k=)
10: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: xtIac8VAw15L09WUieeUSir9eYOGXhXfymWhdgL7e/Y=)
11: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: ry1zcsxyp5rx5aqnNqVzN9RbPAzFPE5OKy5fVA/tBsY=)
12: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: bzgmeNk+RTlBoGqusN6v8fvRVhXp8YED5fczTfvL+Pk=)
13: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: Azh7PmQbddqZUxJOxiTwYESOb0WkJfacl3QlGxSp7Ls=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:bf:6b:51:23:ee:d6:17:db:46:e8:98:46:78:25:b0:f4:ef:b1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Validity
Not Before: Oct 24 07:53:49 2026 GMT
Not After : Oct 25 09:24:49 2026 GMT
Subject: CN=AAD0C7E4454AE6B1C4DB107DE244A90EE6F4864D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:00:61:42:54:df:5a:62:f1:a9:d3:01:b2:bf:
3f:26:02:87:e7:78:34:03:5c:5e:45:cc:4a:40:fd:
85:69:09:17:a9:3a:59:15:8d:34:41:50:b4:da:55:
c7:f5:70:66:8b:04:3c:a0:61:d6:d1:43:54:4a:8c:
79:e9:db:9e:7a:d8:e5:20:4b:dc:2d:5f:1b:8f:52:
bf:05:04:5e:c0:90:4c:72:c7:bc:7e:50:c5:f8:50:
06:16:2e:21:c2:f5:ad:84:1c:bb:3c:32:35:cb:77:
1e:d8:89:86:65:c8:e0:75:b7:5c:dc:df:27:fa:17:
29:42:4f:e2:e5:8e:09:99:5a:20:92:a7:34:71:f9:
91:65:d7:bc:f3:b8:57:2b:39:a4:25:fa:6d:df:ee:
88:c0:53:85:05:45:b1:1f:b1:df:8c:56:59:f7:ca:
28:59:80:6e:a7:82:e2:a2:54:85:d0:0f:b1:69:02:
30:d2:bd:f9:cc:31:3f:b8:2e:99:a8:e6:3f:cd:2a:
31:94:36:2e:b4:7b:7d:28:31:95:78:7a:e4:39:21:
fa:af:cb:a2:6a:22:fd:74:f4:f9:42:21:2e:e1:8e:
3e:4c:21:80:52:66:ff:87:9d:fd:ff:9d:c9:30:3f:
0a:ea:67:7e:f7:3b:71:e6:d3:4f:16:f6:18:d4:37:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:C7:E4:45:4A:E6:B1:C4:DB:10:7D:E2:44:A9:0E:E6:F4:86:4D
X509v3 Authority Key Identifier:
keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ad:e9:63:1d:ab:af:b5:6b:4c:33:3b:63:53:93:7c:7d:60:
bb:27:03:3d:87:b1:57:05:e4:dd:9e:a1:e3:ba:e1:25:0a:5c:
14:83:39:fc:ba:d0:c0:42:26:3c:2a:4e:8e:0d:b4:76:77:24:
5a:6c:bc:70:61:08:22:5f:23:19:31:a3:6f:62:4e:67:f4:02:
bd:ad:2f:b2:98:e5:eb:dd:7b:bc:25:a5:03:45:73:55:fb:24:
bd:04:6a:a7:ae:50:c4:b9:93:a8:dc:38:dc:68:60:19:6e:48:
f1:77:91:5e:ff:44:e6:76:33:bb:86:84:84:89:64:12:d8:79:
83:a4:79:bc:a7:f1:bd:2a:9a:12:e8:68:4c:59:05:1a:d4:f6:
22:87:da:c6:47:22:5b:75:66:34:a0:76:38:e5:74:e5:89:ab:
b5:b3:76:81:78:55:b5:e3:db:eb:a7:33:c9:f2:56:dc:26:dc:
49:04:a2:cb:3e:e7:31:17:95:81:f3:44:b2:eb:c3:c2:11:30:
48:ca:f8:e7:7b:05:be:ff:d0:4e:17:f0:f1:46:34:c1:22:22:
35:ec:48:4b:b8:d3:83:87:06:b6:0d:50:8d:24:ee:5a:d2:bb:
b6:86:f1:ce:a0:59:10:13:3b:11:2d:02:26:37:e7:48:74:08:
33:9e:c8:51
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbb9rUSPu1hfbRuiYRnglsPTvsRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE3RTgzREU3NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZG
NkJDOTU4QTAeFw0yNjEwMjQwNzUzNDlaFw0yNjEwMjUwOTI0NDlaMDMxMTAvBgNV
BAMTKEFBRDBDN0U0NDU0QUU2QjFDNERCMTA3REUyNDRBOTBFRTZGNDg2NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXAGFCVN9aYvGp0wGyvz8mAofn
eDQDXF5FzEpA/YVpCRepOlkVjTRBULTaVcf1cGaLBDygYdbRQ1RKjHnp25562OUg
S9wtXxuPUr8FBF7AkExyx7x+UMX4UAYWLiHC9a2EHLs8MjXLdx7YiYZlyOB1t1zc
3yf6FylCT+LljgmZWiCSpzRx+ZFl17zzuFcrOaQl+m3f7ojAU4UFRbEfsd+MVln3
yihZgG6nguKiVIXQD7FpAjDSvfnMMT+4Lpmo5j/NKjGUNi60e30oMZV4euQ5Ifqv
y6JqIv109PlCIS7hjj5MIYBSZv+Hnf3/nckwPwrqZ373O3Hm008W9hjUN5QbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqtDH5EVK5rHE2xB94kSpDub0hk0wHwYDVR0j
BBgwFoAUqn6D3nQ1q3it5hN7Hqz9xva8lYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWE1MTlhZWItNWM1Ni00Y2IzLTk0YTAtMGY0MDBlYTZhMzc1LzAvQUE3RTgzREU3
NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZGNkJDOTU4QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQTdFODNERTc0MzVBQjc4QURFNjEzN0IxRUFDRkRDNkY2QkM5
NThBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0
YTAtMGY0MDBlYTZhMzc1LzAvQUE3RTgzREU3NDM1QUI3OEFERTYxMzdCMUVBQ0ZE
QzZGNkJDOTU4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEut6WMdq6+1a0wzO2NTk3x9YLsnAz2HsVcF
5N2eoeO64SUKXBSDOfy60MBCJjwqTo4NtHZ3JFpsvHBhCCJfIxkxo29iTmf0Ar2t
L7KY5evde7wlpQNFc1X7JL0EaqeuUMS5k6jcONxoYBluSPF3kV7/ROZ2M7uGhISJ
ZBLYeYOkebyn8b0qmhLoaExZBRrU9iKH2sZHIlt1ZjSgdjjldOWJq7WzdoF4VbXj
2+unM8nyVtwm3EkEoss+5zEXlYHzRLLrw8IRMEjK+Od7Bb7/0E4X8PFGNMEiIjXs
SEu404OHBrYNUI0k7lrSu7aG8c6gWRATOxEtAiY350h0CDOeyFE=
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:38:14 2026 by rpki-client