
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft
File: A1AE56A4554AF816FB70C7D151B60B95E8688866.mft (raw, json)
Hash identifier: LMPB3RQhIndcMpsEVfnehbHHtYUsC1SkI6zuaZH5J1k=
Subject key identifier: 24:40:7B:6C:6F:75:90:4E:8C:9F:E1:2E:DB:5A:7D:C3:23:00:F9:1C
Authority key identifier: A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66
Certificate issuer: /CN=A1AE56A4554AF816FB70C7D151B60B95E8688866
Certificate serial: 62FDA70AF23C91B9FCC1A105EB329A8071D809C3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 19:08:03 +0000
Manifest this update: Tue 02 Jun 2026 19:03:03 +0000
Manifest next update: Wed 03 Jun 2026 22:34:03 +0000
Files and hashes: 1: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 9v0FNIRz7U0Do3bFO3VnUQP4Wx+ba0tNG1r1AH/OeqY=)
2: A1AE56A4554AF816FB70C7D151B60B95E8688866.crl (hash: aMbSghGy5PPXqBnIdYv7/MKsLtApTZhCEWU1jkCXVEU=)
3: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: GHM2a/obSFnIX4sm3ZBeoTgx7NT/IcpWeeqALQWuCgk=)
4: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: He41ch40XucuK+aPHGiuSTFi+Lk7tn/MpsAXY1hRpGE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl
rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:fd:a7:0a:f2:3c:91:b9:fc:c1:a1:05:eb:32:9a:80:71:d8:09:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1AE56A4554AF816FB70C7D151B60B95E8688866
Validity
Not Before: Jun 2 19:03:03 2026 GMT
Not After : Jun 3 22:34:03 2026 GMT
Subject: CN=24407B6C6F75904E8C9FE12EDB5A7DC32300F91C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:70:85:bf:ec:24:f8:75:79:92:72:0f:81:1f:
54:c4:34:c1:f3:37:9a:57:38:be:3f:1a:3a:7b:25:
ff:ae:73:bf:34:b8:55:9a:d4:51:de:3e:5a:88:86:
ac:71:44:e8:e5:5e:ed:5d:d1:3c:56:ad:47:cd:1a:
d0:53:c6:0d:f9:16:87:26:5d:9b:20:0a:52:f7:b1:
59:7b:30:e7:13:94:0e:5d:2a:e8:1c:28:69:ed:94:
eb:91:54:30:dc:06:a9:7f:85:db:6d:01:85:80:df:
6d:67:6a:68:c2:ea:1a:b1:8d:1c:85:d1:b9:71:e4:
82:87:2a:56:5c:c4:f2:63:24:49:96:e1:2f:a3:82:
e6:26:55:49:7a:a8:65:64:78:c3:79:5a:e5:78:67:
c4:ca:d4:8c:f6:b2:c5:b7:d4:de:e2:3f:49:e0:a0:
a1:db:e1:c5:0d:52:aa:17:1e:c4:bc:7c:e9:f5:d1:
4f:5a:62:3b:76:95:b1:cf:f7:fd:d0:78:48:94:ee:
bf:0c:c3:38:a9:fb:62:39:72:4a:b3:73:71:7a:8f:
f6:ae:db:a3:3a:d4:aa:54:36:c0:0b:98:9d:55:46:
f0:d1:39:c5:ca:09:f3:e2:13:97:d8:e1:30:d1:5e:
9f:45:82:49:86:2b:83:df:73:1a:bf:ed:cd:1a:78:
7a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:40:7B:6C:6F:75:90:4E:8C:9F:E1:2E:DB:5A:7D:C3:23:00:F9:1C
X509v3 Authority Key Identifier:
keyid:A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8e:90:ca:a5:52:07:ab:80:d8:6e:cc:91:00:e0:c4:ac:79:
60:7e:3c:04:be:7d:ed:44:1c:33:38:4b:1f:28:8e:52:34:fe:
32:37:eb:de:55:04:d3:62:34:e3:b3:d1:00:f9:f1:0d:11:45:
59:80:c1:74:d8:f5:68:94:af:40:a5:32:ac:60:14:fe:77:7a:
f2:b6:85:c2:38:37:bc:8f:f9:0e:b7:d0:6f:ca:1e:78:79:33:
36:4f:88:36:11:ee:93:12:e5:a0:a7:d8:c4:b0:7f:9f:5e:f5:
65:7e:c4:d1:ce:b7:a2:ac:3e:7d:d1:51:85:5f:a6:3e:8a:6a:
d2:0f:4c:89:97:24:d6:8f:1e:49:f6:f5:66:26:ce:70:34:09:
2c:78:f9:46:03:0e:ff:3d:9a:9f:6c:fd:ce:73:a8:b6:71:a2:
ce:bd:18:47:ca:fa:d4:50:14:30:03:e3:d0:8d:40:6f:60:87:
1e:19:bf:30:a8:ab:55:97:ef:6b:1e:ad:2c:e2:93:c6:01:c1:
03:7c:98:26:7f:85:15:42:29:a9:b8:4f:ae:9d:c8:5b:e5:b5:
de:fc:eb:77:4b:b1:9a:98:b8:5f:7a:08:d3:99:79:5b:11:e0:
ff:ab:cf:3e:cc:ab:f6:4a:5e:fb:cf:e1:7c:c8:93:dc:5a:40:
74:84:35:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:08 2026 by rpki-client