
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft
File: AE03A0FB122D3B828822172D20A923BA84A5CB76.mft (raw, json)
Hash identifier: 5UShXuYubBkTWDLJSIMPRlDn5niURlz3czPUnpovuBA=
Subject key identifier: 9F:DD:FD:AF:DF:BE:D8:E3:E4:7E:6D:28:E5:30:7B:47:8A:93:77:B1
Authority key identifier: AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76
Certificate issuer: /CN=AE03A0FB122D3B828822172D20A923BA84A5CB76
Certificate serial: 2B774A57C8B90D39057FC8272D94A1A1D31EA8F2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 05:50:43 +0000
Manifest this update: Thu 17 Sep 2026 05:45:43 +0000
Manifest next update: Fri 18 Sep 2026 09:25:43 +0000
Files and hashes: 1: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: sM8kT9+lnDp66j8gZ6lQEt5JkL6qeZtqa7PnwIaHyfU=)
2: AE03A0FB122D3B828822172D20A923BA84A5CB76.crl (hash: 370UB6YYUVLVp9oZNnlG56Hk7852+eWHzq+V5xI96tk=)
3: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: ur7yrhWHiFsydqZ/PScY2ULnHYX291BUphgqfad6RC4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl
rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:25:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:77:4a:57:c8:b9:0d:39:05:7f:c8:27:2d:94:a1:a1:d3:1e:a8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE03A0FB122D3B828822172D20A923BA84A5CB76
Validity
Not Before: Sep 17 05:45:43 2026 GMT
Not After : Sep 18 09:25:43 2026 GMT
Subject: CN=9FDDFDAFDFBED8E3E47E6D28E5307B478A9377B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:0f:d3:e0:8b:67:c5:3b:da:ef:6d:86:cd:
f2:45:2a:b1:20:34:0a:55:35:f4:2a:31:94:42:82:
bb:65:e7:59:31:a9:1a:92:75:d5:06:80:bf:5e:5b:
7a:fa:bf:18:50:5b:ae:7a:42:5a:cf:a9:70:b8:64:
69:99:a5:1c:5d:20:e1:b9:2e:44:18:df:be:1d:91:
57:29:92:0e:f1:d3:ab:6b:6e:3b:aa:81:a2:2d:ce:
24:f1:e8:93:72:be:20:3f:cc:1d:6c:5c:2f:55:90:
93:a8:24:c8:c4:d5:6d:cc:3d:a0:bf:94:fc:b7:7a:
51:bb:3f:96:ec:81:72:60:cd:35:2a:bd:43:b0:45:
3c:84:2b:6f:f4:26:c8:bf:83:5e:98:6e:76:99:13:
39:0c:60:43:dd:76:33:5a:f5:ed:60:26:bd:36:96:
11:c4:28:f7:c2:0d:28:6c:c8:44:6a:07:39:52:db:
ba:82:bf:c5:e0:c6:50:2a:e8:b5:f2:6f:26:7a:4b:
5b:8b:03:2d:fc:23:55:e2:66:f5:b9:64:11:eb:6e:
01:2a:0f:e5:f7:2f:6f:5a:a2:b4:44:fb:86:b6:5b:
50:01:6b:0c:33:12:36:e8:6f:ce:a1:b7:cb:f2:1e:
6e:fb:50:34:42:ca:b7:79:ac:c2:07:7b:08:24:28:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DD:FD:AF:DF:BE:D8:E3:E4:7E:6D:28:E5:30:7B:47:8A:93:77:B1
X509v3 Authority Key Identifier:
keyid:AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ee:d2:7a:38:21:b1:78:18:0d:3c:4d:aa:0a:e4:54:cf:40:
bb:f7:3d:0f:54:29:37:b9:5f:d4:0b:db:0c:6d:fb:90:be:44:
d0:de:c1:25:db:eb:a3:f2:f7:65:07:a8:4f:37:39:9f:4b:12:
bc:1f:94:8c:b9:12:f9:a9:05:9e:dd:84:24:78:42:17:1f:dc:
7b:60:70:82:0d:63:09:a1:82:9c:14:64:78:c7:d8:fe:8f:da:
cb:05:66:e0:5d:9d:be:8b:69:c3:0d:42:72:70:32:59:51:9a:
68:46:2d:1e:75:8e:4d:3c:8c:4d:42:d3:9e:f0:bd:03:a1:5d:
2b:6f:2e:67:3a:54:1b:bd:06:15:40:84:b5:11:29:d0:f4:e2:
5b:ac:af:f3:69:56:f9:a5:b4:fe:f4:32:82:b9:3c:56:27:5a:
ff:35:8c:eb:74:cd:c5:8b:6c:b5:86:12:51:d2:56:4f:6a:af:
09:35:29:45:21:8e:3f:d1:37:41:bb:f8:c2:6f:36:06:d9:65:
82:a7:f1:cc:d0:43:4d:80:82:93:dd:4b:76:c7:81:da:d9:11:
74:66:08:29:a2:a0:bf:71:b7:22:e7:1f:88:e1:9f:ab:30:a5:
eb:7b:10:79:53:56:fc:98:b0:5c:05:ef:e8:95:e7:04:68:1d:
bd:a4:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:39:32 2026 by rpki-client