
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.mft
File: A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.mft (raw, json)
Hash identifier: dUNS3rHoROvfFcSZ3vxlAABYJlxs3iHGV2FKTjR1vEk=
Subject key identifier: 60:EB:00:33:1D:BA:52:96:E0:0A:A6:92:61:73:9E:EA:47:FB:D5:91
Authority key identifier: A4:EA:D1:0A:EF:C1:61:57:43:BF:0E:F5:F6:AB:C8:3C:07:A2:E1:7F
Certificate issuer: /CN=A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F
Certificate serial: 3C267AC91D67FE1F092DFCE529A4694D9D2075C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 15:50:21 +0000
Manifest this update: Tue 12 May 2026 15:45:21 +0000
Manifest next update: Wed 13 May 2026 19:00:21 +0000
Files and hashes: 1: A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.crl (hash: 8IC2wPwc/FpBeXqUBlhODKm+FPn357dYirDdq//+Rxk=)
2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: 3UOM8UDtVFC5aJl4SyODxeYJx4Ly/eZGmLZa4XYvNvA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.crl
rsync://rpki-rsync.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:26:7a:c9:1d:67:fe:1f:09:2d:fc:e5:29:a4:69:4d:9d:20:75:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F
Validity
Not Before: May 12 15:45:21 2026 GMT
Not After : May 13 19:00:21 2026 GMT
Subject: CN=60EB00331DBA5296E00AA69261739EEA47FBD591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:8f:a0:63:a8:ee:73:4a:de:a3:d0:c1:d7:
72:17:32:b7:ad:2c:fb:b3:58:40:ec:35:b6:55:0b:
9d:00:96:e4:c1:af:30:b2:60:88:ed:dd:65:d8:c5:
a1:51:11:e2:a9:e5:a9:47:12:0e:dd:bc:26:a6:1e:
2d:ec:16:dc:09:6e:25:d5:2c:43:1e:94:3d:85:d6:
9d:66:29:1f:89:fd:93:28:0d:60:1a:59:a1:b4:d7:
48:65:7d:a5:77:e9:65:4d:34:f2:0d:c6:0e:3c:3d:
f5:3e:2a:14:56:7d:1e:b2:70:40:f0:77:0f:0a:f2:
64:d0:5f:f6:4c:b7:34:98:68:66:f0:2d:b2:95:ae:
b9:cd:54:5c:68:fb:58:03:28:af:91:14:bd:4d:91:
25:5e:3f:66:4b:b1:58:f9:ce:7c:db:4b:63:65:72:
5d:69:b8:70:f5:56:7a:26:aa:9d:04:62:db:3a:12:
d9:98:9e:33:2a:b3:9d:1d:eb:2e:a6:81:ec:a7:a4:
8e:7b:fc:eb:d9:36:c7:00:ae:c9:c5:bb:bf:b8:8f:
3e:f9:9b:7d:c3:0d:ce:2e:2a:fc:23:00:e1:00:5d:
55:dc:0b:6d:70:61:fa:0b:8d:76:76:34:4f:0e:a7:
8a:22:ef:4e:3a:ba:a0:23:a5:61:f6:82:23:c3:26:
8e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EB:00:33:1D:BA:52:96:E0:0A:A6:92:61:73:9E:EA:47:FB:D5:91
X509v3 Authority Key Identifier:
keyid:A4:EA:D1:0A:EF:C1:61:57:43:BF:0E:F5:F6:AB:C8:3C:07:A2:E1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5b:a7:27:e5:98:2d:39:7a:7f:0d:09:c5:47:83:52:86:c3:
96:98:09:c3:41:ad:24:09:07:e3:57:25:b7:1c:2b:58:ab:7d:
28:8a:24:2f:75:20:21:b8:55:78:f6:dd:5e:90:1a:55:98:1d:
f7:36:94:9e:59:4c:d4:39:af:b3:64:00:e7:78:64:84:48:28:
ff:30:ff:7e:ae:ed:7b:8c:b8:b1:1d:0b:21:b4:d6:27:e9:c5:
0b:de:9c:67:19:a6:67:d2:2c:a7:5a:6e:2f:95:34:bf:09:89:
64:e0:db:71:58:3a:aa:d3:4e:69:03:4d:6f:c0:de:cd:69:ce:
78:69:19:7d:cc:d2:c4:ad:c1:a8:a6:d1:c2:98:cf:ad:e9:9a:
16:f2:d2:22:23:5d:ce:1c:a0:11:c5:fa:00:bb:e4:8b:fc:64:
18:fb:9b:1f:6d:49:29:ee:79:d1:8b:bd:cf:e9:22:df:20:b6:
c3:be:50:99:90:96:41:fa:b3:59:0a:c0:95:89:3b:29:4a:33:
d3:22:ce:8c:39:a1:ae:7e:05:c2:23:83:98:ae:53:ce:c6:dc:
01:34:06:bf:08:01:c8:23:fe:30:6a:71:89:3a:ea:ec:fb:82:
37:94:20:b6:f8:6c:91:26:30:51:22:f8:58:80:e1:d9:fe:a3:
40:2f:8a:d2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPCZ6yR1n/h8JLfzlKaRpTZ0gdccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRFQUQxMEFFRkMxNjE1NzQzQkYwRUY1RjZBQkM4M0Mw
N0EyRTE3RjAeFw0yNjA1MTIxNTQ1MjFaFw0yNjA1MTMxOTAwMjFaMDMxMTAvBgNV
BAMTKDYwRUIwMDMzMURCQTUyOTZFMDBBQTY5MjYxNzM5RUVBNDdGQkQ1OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGY+gY6juc0reo9DB13IXMret
LPuzWEDsNbZVC50AluTBrzCyYIjt3WXYxaFREeKp5alHEg7dvCamHi3sFtwJbiXV
LEMelD2F1p1mKR+J/ZMoDWAaWaG010hlfaV36WVNNPINxg48PfU+KhRWfR6ycEDw
dw8K8mTQX/ZMtzSYaGbwLbKVrrnNVFxo+1gDKK+RFL1NkSVeP2ZLsVj5znzbS2Nl
cl1puHD1Vnomqp0EYts6EtmYnjMqs50d6y6mgeynpI57/OvZNscArsnFu7+4jz75
m33DDc4uKvwjAOEAXVXcC21wYfoLjXZ2NE8Op4oi7046uqAjpWH2giPDJo51AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYOsAMx26UpbgCqaSYXOe6kf71ZEwHwYDVR0j
BBgwFoAUpOrRCu/BYVdDvw719qvIPAei4X8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDI3OWVlOWMtYWQyYi00YmVkLTg2NDEtMjNiZjJkM2IxNmRiLzAvQTRFQUQxMEFF
RkMxNjE1NzQzQkYwRUY1RjZBQkM4M0MwN0EyRTE3Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9BNEVBRDEwQUVGQzE2MTU3NDNCRjBFRjVGNkFCQzgzQzA3QTJF
MTdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI3OWVlOWMtYWQyYi00YmVkLTg2
NDEtMjNiZjJkM2IxNmRiLzAvQTRFQUQxMEFFRkMxNjE1NzQzQkYwRUY1RjZBQkM4
M0MwN0EyRTE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADtbpyflmC05en8NCcVHg1KGw5aYCcNBrSQJ
B+NXJbccK1irfSiKJC91ICG4VXj23V6QGlWYHfc2lJ5ZTNQ5r7NkAOd4ZIRIKP8w
/36u7XuMuLEdCyG01ifpxQvenGcZpmfSLKdabi+VNL8JiWTg23FYOqrTTmkDTW/A
3s1pznhpGX3M0sStwaim0cKYz63pmhby0iIjXc4coBHF+gC75Iv8ZBj7mx9tSSnu
edGLvc/pIt8gtsO+UJmQlkH6s1kKwJWJOylKM9Mizow5oa5+BcIjg5iuU87G3AE0
Br8IAcgj/jBqcYk66uz7gjeUILb4bJEmMFEi+FiA4dn+o0AvitI=
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:28 2026 by rpki-client