
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.mft
File: A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.mft (raw, json)
Hash identifier: 15ngdsjP6RQlL9Oekswg4AJkYAuuOmjtcORstgd6S3k=
Subject key identifier: 89:A3:5F:22:4B:67:C0:A9:D4:39:B5:78:EC:15:C2:39:3B:EC:44:0F
Authority key identifier: A4:EA:D1:0A:EF:C1:61:57:43:BF:0E:F5:F6:AB:C8:3C:07:A2:E1:7F
Certificate issuer: /CN=A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F
Certificate serial: 1A209848B8E3E1506FADB1CC52D051C6243C0E91
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 21:37:51 +0000
Manifest this update: Wed 23 Sep 2026 21:32:51 +0000
Manifest next update: Thu 24 Sep 2026 23:40:51 +0000
Files and hashes: 1: A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.crl (hash: 57Fuc72CPugYDCLxmTWyZIibFcqDtnJnAd6CZQBs1T8=)
2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: 3UOM8UDtVFC5aJl4SyODxeYJx4Ly/eZGmLZa4XYvNvA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.crl
rsync://rpki-rsync.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:20:98:48:b8:e3:e1:50:6f:ad:b1:cc:52:d0:51:c6:24:3c:0e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F
Validity
Not Before: Sep 23 21:32:51 2026 GMT
Not After : Sep 24 23:40:51 2026 GMT
Subject: CN=89A35F224B67C0A9D439B578EC15C2393BEC440F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:d7:05:92:be:bd:94:da:69:94:c9:ec:de:
42:c9:0c:4b:7f:cb:17:be:55:65:4b:f0:b8:be:d5:
87:4a:26:37:ab:9c:e8:68:53:2c:9a:24:b6:58:9e:
53:95:ea:53:8f:92:60:35:69:69:b9:2c:4a:f8:e9:
2e:83:9a:32:c1:3b:52:89:4a:55:a1:13:06:1e:7c:
40:53:d7:4f:24:40:3c:33:a7:e2:61:6c:ee:a0:96:
4a:d1:db:44:d5:d7:3b:cd:28:ef:54:1f:ca:95:8f:
95:41:a2:f1:dc:81:1d:bc:c5:c6:15:e0:a3:f2:5d:
fe:a2:86:c7:28:c9:b3:36:6d:47:85:bc:bd:ae:1a:
bb:2a:3f:91:e3:61:be:23:13:41:af:20:eb:61:6e:
ee:60:76:29:ef:98:41:5f:87:d6:59:1c:af:da:0f:
47:5a:18:7b:31:11:df:9b:f2:ca:ca:8b:dc:84:4d:
4d:72:94:4b:64:ec:8c:46:e1:1a:0a:d4:bd:d2:5c:
bf:f9:c0:5a:74:9d:ef:3a:5f:0f:40:cb:a0:f2:75:
87:93:92:ef:1d:03:ab:d1:27:ac:28:0c:bf:92:8e:
87:66:05:a1:64:95:4f:ad:b2:51:0a:2b:f0:2b:28:
e8:74:e8:c1:49:0b:7f:ff:25:96:5d:ee:fe:b4:fa:
94:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A3:5F:22:4B:67:C0:A9:D4:39:B5:78:EC:15:C2:39:3B:EC:44:0F
X509v3 Authority Key Identifier:
keyid:A4:EA:D1:0A:EF:C1:61:57:43:BF:0E:F5:F6:AB:C8:3C:07:A2:E1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/A4EAD10AEFC1615743BF0EF5F6ABC83C07A2E17F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9b:1f:f8:da:9e:64:58:d4:9a:b0:93:5a:dc:c5:c9:39:30:
d0:d9:d5:fb:f4:90:47:aa:f4:63:43:63:95:91:3c:f3:de:5f:
19:13:8a:0d:dc:04:e4:98:fa:f9:fa:00:cc:9b:89:d0:74:65:
b4:d4:70:5e:5c:6c:1f:7b:7d:f3:cb:91:71:97:d8:35:28:e7:
47:56:35:50:c3:39:aa:f3:93:ad:4b:58:0e:ae:4d:52:c3:ba:
fa:aa:6d:79:a3:43:be:0e:47:77:90:8c:3f:73:ea:da:68:67:
38:a0:dd:42:e0:d9:6e:cd:70:14:33:d7:a1:30:14:00:08:61:
e3:36:5f:66:70:ff:17:45:ec:b3:6d:31:b2:1d:2b:30:56:f5:
ef:a5:87:8d:72:51:cf:3f:0b:09:8d:83:bb:c1:3d:e7:cc:75:
35:61:ee:c4:b5:95:55:f9:68:bf:76:dd:0f:5b:85:b8:81:ea:
8c:5a:95:8b:ba:b8:d1:0d:00:da:09:7c:1c:98:4e:a9:8d:f8:
de:82:a4:63:70:bb:3c:b4:1d:1b:73:d6:de:c2:dd:cf:6a:6d:
9e:24:91:69:4f:eb:0c:df:65:e9:42:bb:a5:a9:08:3b:be:87:
09:77:bd:37:38:49:34:87:62:dd:0b:07:0f:92:5d:9a:f3:3e:
a2:7a:dc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:18:12 2026 by rpki-client