
$ rpki-client -vvf rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
File: 06AAF713D939AC6C090B6343B6905318B83A1DE3.mft (raw, json)
Hash identifier: vjr04GU6ycaOt0c7wUuEvwYakTm910a/d/D9sEiCVvM=
Subject key identifier: 5F:DF:4A:09:4E:BC:B9:69:79:39:3B:5B:C3:24:0E:36:68:7F:00:E4
Authority key identifier: 06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3
Certificate issuer: /CN=06AAF713D939AC6C090B6343B6905318B83A1DE3
Certificate serial: 77DEC0040711701717DED9AEF84A03E653B46417
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 17:01:15 +0000
Manifest this update: Fri 19 Jun 2026 16:56:15 +0000
Manifest next update: Sat 20 Jun 2026 17:30:15 +0000
Files and hashes: 1: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: 4RQga7sC7v8Tfsu3sFFTumIkJvaZxGdgZNTnQPnNeyc=)
2: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: PkVVbgoFw66MPF2zwjon2GNSfbIfJE+9WsRpKXP88mM=)
3: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: j9SbKnw1WxVlPJ1dulKyLWaPKzwCQU/YUp9+97iiA64=)
4: 06AAF713D939AC6C090B6343B6905318B83A1DE3.crl (hash: vU5MyZjYSykeRowhaNTjuLaWcRfIO3SatKw72ODGEWM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl
rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 17:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:de:c0:04:07:11:70:17:17:de:d9:ae:f8:4a:03:e6:53:b4:64:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06AAF713D939AC6C090B6343B6905318B83A1DE3
Validity
Not Before: Jun 19 16:56:15 2026 GMT
Not After : Jun 20 17:30:15 2026 GMT
Subject: CN=5FDF4A094EBCB96979393B5BC3240E36687F00E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:4f:aa:3f:fd:eb:88:3b:62:8f:e0:bb:45:
3c:b3:86:14:9a:05:00:ce:8e:1a:9a:6b:19:6f:61:
7d:40:89:bc:4e:14:2d:2f:9d:a0:11:a4:61:d8:f7:
47:ba:af:1d:58:06:27:28:0b:3b:68:64:c1:87:e6:
82:ac:88:26:c4:7b:33:a6:9a:15:10:1e:0c:5a:7f:
7f:88:04:16:d0:41:09:f6:a1:34:33:02:4f:14:55:
f1:4a:de:fc:e3:2c:6d:a4:f6:8f:a1:1c:5d:8f:c4:
2a:d9:77:ef:01:ec:93:a1:c4:2c:ce:3f:a9:d6:1b:
8b:65:42:2c:fe:7b:e5:8e:29:1a:04:bd:84:6c:32:
fa:f4:78:aa:d9:8b:a2:6e:56:17:23:e7:8c:d6:3e:
30:b9:f6:39:2a:60:0a:f3:71:06:8b:1a:36:ba:47:
2c:20:64:2b:d1:8f:bf:3d:40:d4:69:c8:77:a1:66:
f3:2d:7c:c2:60:09:8c:f0:fe:75:82:05:3b:14:53:
c4:39:4f:06:f7:34:bb:fc:c8:a7:ff:be:81:58:7a:
1f:21:06:43:cd:82:d4:f4:8e:0f:bb:c0:7f:ca:2d:
a3:ce:5a:16:e7:c8:f7:60:02:8a:47:20:41:e7:76:
e4:b6:6f:e2:1a:e7:0b:ea:67:ac:8e:86:96:d3:80:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DF:4A:09:4E:BC:B9:69:79:39:3B:5B:C3:24:0E:36:68:7F:00:E4
X509v3 Authority Key Identifier:
keyid:06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:32:fd:00:f7:39:d9:82:ab:55:18:25:a8:97:76:7a:bc:80:
ea:8a:e8:4a:b1:c7:d4:b6:32:4f:28:cd:9e:cf:3c:3e:16:9f:
c0:d9:4a:2a:db:68:58:f9:84:33:59:78:da:1f:41:48:74:c1:
85:b1:81:cf:bf:9d:c1:89:88:b3:54:a0:cf:62:79:c7:08:79:
b9:b5:f2:27:94:9f:84:95:6d:eb:07:ec:cb:1a:8b:10:ff:d1:
b7:7a:2d:8c:cc:23:ab:42:08:46:cb:67:ec:df:49:c1:fc:3d:
67:32:5f:8d:f0:21:1b:d7:f9:09:ab:ac:e5:d4:98:58:a5:de:
6c:f1:8e:78:94:e7:7e:b4:08:36:ba:57:5f:56:ea:77:70:b1:
ca:1e:38:35:69:8c:f8:3a:62:15:fd:ee:36:36:01:ab:fd:4a:
20:fb:0d:c0:e2:56:e3:43:8c:2e:3a:e3:31:6a:a3:a6:72:63:
0b:60:6b:44:78:22:e1:4b:45:b4:37:8f:97:a5:d6:20:8b:2a:
26:2a:8f:de:81:b4:97:e1:45:00:c2:bd:35:00:79:53:b9:c2:
11:31:ea:ae:7e:d5:f6:99:c5:68:4f:80:f8:23:10:fc:e4:a9:
2b:25:71:5b:aa:d0:52:c3:e2:62:b3:60:1a:bc:61:ce:48:dc:
a2:13:e2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:00:56 2026 by rpki-client