
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft
File: AF0C42FF385AC16D8868625322DDC9687E064976.mft (raw, json)
Hash identifier: 2giEDeOM1impy5YiQm4AMPBRhxom9aKxAqdV7+A6tTY=
Subject key identifier: 6C:DC:46:04:7F:88:8C:5B:FE:E6:AB:8A:88:9D:84:19:D8:49:36:A6
Authority key identifier: AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76
Certificate issuer: /CN=AF0C42FF385AC16D8868625322DDC9687E064976
Certificate serial: 5065C5285ADABD103C9F3EB1E4AB34CC3EB59575
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 08:53:30 +0000
Manifest this update: Sun 02 Aug 2026 08:48:30 +0000
Manifest next update: Mon 03 Aug 2026 10:40:30 +0000
Files and hashes: 1: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: oLBZrJQYooXv1AaJqvvqFmmqga9DhEWLnd2Rras7ouk=)
2: AF0C42FF385AC16D8868625322DDC9687E064976.crl (hash: iGUvOZftPfgLJNvb4R0WKI7TRZrMixr8ZsrlrRAhPkA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl
rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:65:c5:28:5a:da:bd:10:3c:9f:3e:b1:e4:ab:34:cc:3e:b5:95:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF0C42FF385AC16D8868625322DDC9687E064976
Validity
Not Before: Aug 2 08:48:30 2026 GMT
Not After : Aug 3 10:40:30 2026 GMT
Subject: CN=6CDC46047F888C5BFEE6AB8A889D8419D84936A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4a:b9:be:ca:aa:5c:15:cd:ea:e2:da:2b:95:
4b:18:d5:df:db:6c:3f:60:1c:e2:f8:d7:f3:d8:6c:
4c:85:52:0a:c6:64:a7:60:ce:30:86:5a:fd:d1:cd:
23:a2:86:f5:8c:05:99:17:f3:74:aa:ae:55:8e:e6:
de:8a:9e:fa:50:7c:37:42:a0:c0:60:91:df:9c:c5:
a3:c7:19:46:be:6f:1d:bd:43:53:d4:19:30:e9:47:
17:32:03:6c:a5:3d:4f:a1:eb:d9:7d:c5:e7:54:7d:
b6:a4:0f:59:c4:d0:9b:78:f3:72:6f:10:22:af:04:
e9:03:93:b2:0c:e8:7a:fa:89:05:b7:23:c5:13:81:
58:dd:1e:f5:f1:6a:08:e4:c7:04:4b:cc:83:41:b4:
df:ac:a8:6c:a9:70:ea:cd:70:d0:58:98:9b:52:f4:
63:f0:2d:45:73:cf:f7:40:8e:3d:fa:9f:8f:ca:58:
bd:e3:d2:73:b2:57:0e:80:7f:f3:7a:e3:6c:df:2b:
c4:bc:b0:79:26:92:3f:d8:27:b7:37:a3:7c:e5:2e:
41:24:ea:fe:7e:59:df:7b:3d:d9:4c:fe:f8:11:5f:
6c:40:6f:e1:0a:17:fd:b2:30:3d:8c:7f:6d:e9:20:
55:5b:3a:a6:71:3d:eb:1c:f3:5b:e0:ec:82:0d:05:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DC:46:04:7F:88:8C:5B:FE:E6:AB:8A:88:9D:84:19:D8:49:36:A6
X509v3 Authority Key Identifier:
keyid:AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e0:d1:a2:20:c6:1b:64:24:e7:63:59:c8:49:53:4a:9b:ce:
4b:ee:07:da:99:80:9c:25:43:c7:39:6f:db:20:fb:e7:0c:65:
7a:32:02:25:12:0d:19:96:24:c1:4f:b6:64:43:fd:ab:dd:d3:
c7:0e:61:52:ac:84:6b:ea:ad:bb:60:21:a2:7e:74:5f:42:70:
2d:43:97:36:e3:ec:0e:23:57:7a:92:71:13:fd:87:83:13:c5:
a0:ea:d6:8d:d8:25:35:97:79:c4:80:ce:99:45:16:93:c5:c9:
d4:3d:26:fb:d9:d8:c0:ed:7e:e5:e7:06:66:76:ed:ea:d5:41:
f4:a5:e5:5c:82:07:aa:a3:da:f8:02:03:62:3a:92:15:29:2b:
a1:e4:4d:06:06:97:e8:a3:b0:37:8d:09:f9:6e:8f:38:2e:43:
28:f1:4e:ab:d8:11:c2:26:7c:d1:d2:a6:a6:b4:c7:86:36:26:
63:04:13:89:5c:f9:0b:f3:71:3b:3c:9e:b4:41:8e:dd:86:11:
91:27:8b:24:ef:a1:46:46:63:5e:bf:46:67:a4:2a:14:e7:77:
0f:50:91:f2:b4:f0:9b:2e:68:0f:5a:16:47:07:d0:10:67:76:
24:b8:e5:1f:f8:27:3a:c4:3c:23:6e:7b:0e:84:95:2d:08:de:
09:b2:e4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 22:56:20 2026 by rpki-client