
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
File: AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft (raw, json)
Hash identifier: LtyKdoJYysAD/WjWX1wB92SLBl4iP03CZpfSQYxUy8Y=
Subject key identifier: 67:18:85:9D:90:BB:B1:AC:1E:99:C5:E4:46:2B:05:DB:0C:60:62:A8
Authority key identifier: AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB
Certificate issuer: /CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB
Certificate serial: 3AEA06CD497CC6D14C49E39AD86C5E3BB2BE71B3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
Manifest number: ED
Signing time: Mon 26 Oct 2026 09:33:52 +0000
Manifest this update: Mon 26 Oct 2026 09:28:52 +0000
Manifest next update: Tue 27 Oct 2026 13:08:52 +0000
Files and hashes: 1: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: od92otk1ZBfK/DphT8D9p9Tw3yqgeInTJA8T3zh0m9Y=)
2: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: aXgaQBkXNr3WgkNnT1bbV4Z/rSlPnLbxkffq9PBogAU=)
3: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: S3aT7VcLJ0ssRGTP1ygDwW7+AIQVYKqNTkFjIYTg3fg=)
4: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: l6rGkO8MgVJkambdkAclMvjE+aQSvltuGia3hhd605M=)
5: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: Ee7WWGSltwyaFMHxIIgEvgkLf4dnjnHrFVC5UDqWks8=)
6: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: fZTmTy6g2R28mCtJrpoBFkv/RRFL2DWAt0Cexpbh3bM=)
7: AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl (hash: ozyhQ4i7KDfJe2MfxoIi7zKcngELPWeHwXQ6Wj0RZwY=)
8: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: 7CW/WrucWkwMy6n5L6l1Fl9wsuT6MqzAnA/bZ5ATe84=)
9: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: q33gUCSA+x8ZeBcPhedwaAdIwEj0Ce99+sYJUQuSC9s=)
10: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: yyYOlJ0fwzxGoTlSm81JuoIInjVRI/GeCaxTrgVohIA=)
11: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: dHemt/X+4p/vn34sn9wPgB+Rsu5EmHnVv8RmTO5DvKE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl
rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 12:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ea:06:cd:49:7c:c6:d1:4c:49:e3:9a:d8:6c:5e:3b:b2:be:71:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB
Validity
Not Before: Oct 26 09:28:52 2026 GMT
Not After : Oct 27 13:08:52 2026 GMT
Subject: CN=6718859D90BBB1AC1E99C5E4462B05DB0C6062A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:71:9b:6c:ca:ab:55:bb:ef:ae:5a:a4:85:
05:1e:b3:d0:68:fd:fc:fc:84:f9:66:61:da:4a:ae:
04:b2:a0:b6:27:a1:34:c9:de:22:95:42:0f:05:03:
58:67:46:08:7d:9e:1e:b8:42:ea:78:e3:a8:ef:48:
7c:a8:1a:84:d1:18:35:2a:29:58:b3:ee:a1:db:88:
e6:61:94:d6:8f:46:60:60:4d:02:07:fa:91:8b:ca:
04:5c:71:b1:f9:37:3d:ae:e7:3e:40:d4:15:05:a4:
98:3c:88:11:81:d2:91:64:59:62:f1:6a:6d:8a:d6:
c4:a3:b0:b8:ab:1c:6d:6a:46:e4:8a:5a:6c:35:3c:
fd:ca:38:d8:3b:13:6a:45:a2:6f:f9:b7:55:6d:17:
f7:87:2f:36:e8:4d:39:d0:83:65:9a:1f:7d:aa:f4:
5d:5d:d9:f3:56:4e:6c:ec:76:90:3a:63:6c:1f:fc:
03:b8:e1:ea:37:8c:57:8b:65:18:21:da:c4:ec:75:
24:f4:d4:5e:ab:0e:bb:dd:4b:0a:cd:5c:4b:b1:fc:
1f:91:77:8c:8a:49:75:d3:f3:6c:29:51:ae:8f:9b:
cd:59:2c:1b:a6:a2:4d:79:db:8f:53:bd:36:45:8a:
e7:f6:b7:18:8a:88:cd:7c:af:d0:83:39:4a:6e:87:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:18:85:9D:90:BB:B1:AC:1E:99:C5:E4:46:2B:05:DB:0C:60:62:A8
X509v3 Authority Key Identifier:
keyid:AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:db:5e:2f:77:67:31:d7:15:00:dd:3d:23:20:50:f8:1f:65:
82:87:ad:b9:79:06:79:92:3d:49:a9:47:22:5b:1d:53:1c:51:
ff:6a:32:41:a1:fc:31:fe:10:77:7e:e8:4b:ea:cc:32:73:0e:
85:63:22:77:12:44:6f:a1:2b:df:d7:ae:48:17:cd:75:3f:ce:
19:1e:0b:47:4a:5f:2e:19:62:cc:bf:0d:55:71:20:38:25:b8:
c3:95:90:fa:00:aa:71:61:e4:40:9b:be:57:46:55:c7:8d:dc:
5c:b7:5b:ea:4c:a2:63:18:3b:8a:1e:52:ca:6e:81:41:aa:a6:
d6:0b:51:e4:bd:e0:99:82:bb:02:79:8f:b9:21:5e:13:27:ac:
1f:71:5b:37:18:d1:f2:42:94:ea:62:8f:eb:06:68:bc:03:15:
84:61:c5:5c:35:61:d0:a5:76:52:ff:88:1d:0e:21:00:69:11:
dd:ef:04:5e:59:2b:09:74:5d:a3:75:9a:41:fb:16:bb:33:66:
64:b4:ff:71:61:83:d8:64:a1:31:67:5c:47:0e:4f:1f:79:9f:
53:2a:51:09:19:2b:3e:42:14:61:a1:bb:01:2c:b5:25:10:12:
9e:d3:1d:61:41:68:24:73:3a:5e:9b:e6:ba:53:df:6c:15:e7:
db:fb:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:03 2026 by rpki-client