
$ rpki-client -vvf rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft
File: A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft (raw, json)
Hash identifier: o09B7NnPSteLxGaX9YxvCxkNVkAm6l4vYvqi9Q/uD40=
Subject key identifier: B4:6C:00:DD:42:3A:07:02:53:A0:FF:19:F6:C3:98:CA:92:E9:89:C6
Authority key identifier: A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA
Certificate issuer: /CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA
Certificate serial: 613A3A744981A6F7831A913A7A020551EC733C75
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:26:00 +0000
Manifest this update: Tue 12 May 2026 16:21:00 +0000
Manifest next update: Wed 13 May 2026 18:44:00 +0000
Files and hashes: 1: 3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa (hash: 6SPqfWofEqX1QD5UAEMH2hqU1phhUwtiErMkzEVth0s=)
2: A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl (hash: p36N/27XxsaOf+KVXgNXGHfVeZ/76g3xWtjxIM0Cxsc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl
rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:3a:3a:74:49:81:a6:f7:83:1a:91:3a:7a:02:05:51:ec:73:3c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA
Validity
Not Before: May 12 16:21:00 2026 GMT
Not After : May 13 18:44:00 2026 GMT
Subject: CN=B46C00DD423A070253A0FF19F6C398CA92E989C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:4d:55:22:40:cf:be:19:b1:9e:37:1f:2f:
c8:6f:73:83:70:7b:c2:f6:5f:8b:f9:fe:d2:46:c1:
ab:99:ee:06:97:77:bb:e8:20:63:aa:4c:93:cf:3a:
a8:a9:54:74:a1:06:64:27:25:3b:8d:de:5c:56:37:
f2:cc:39:7b:67:38:7d:f1:e1:a2:36:72:41:c9:da:
f5:2d:d8:e2:07:fe:15:2d:7f:d3:ea:fe:d7:75:4a:
df:d4:f9:44:f5:03:d1:f2:3b:05:50:2e:2c:01:20:
e9:d5:5f:9a:2f:72:30:18:6c:05:cd:98:47:b3:6b:
b4:95:3a:91:7a:f5:28:e0:60:62:c5:29:36:2a:a6:
8e:ef:a1:78:73:6a:0b:73:d2:6e:3d:b5:56:91:b4:
82:a4:df:b8:de:dc:4e:cc:73:17:cd:02:70:96:59:
a7:ca:ae:0e:0d:db:e1:ff:ea:3e:21:e0:85:ed:10:
23:1c:e2:e5:5e:8d:f9:b5:a1:c8:ed:cc:45:5d:c7:
24:6a:57:18:c6:38:c5:81:22:28:44:8e:3b:15:0a:
da:31:26:7c:a1:e8:aa:95:5f:2f:c7:31:b4:f9:fb:
51:0a:13:13:9c:d5:41:a2:bd:f8:03:5b:8f:09:67:
a7:d1:10:c9:0d:1a:ae:d2:97:29:10:d3:8a:0d:a6:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6C:00:DD:42:3A:07:02:53:A0:FF:19:F6:C3:98:CA:92:E9:89:C6
X509v3 Authority Key Identifier:
keyid:A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:eb:ed:06:c2:e3:70:b0:b4:86:13:d7:7d:f8:b3:74:11:9a:
10:bb:42:bc:0d:58:c5:69:2c:2f:a1:9c:26:7d:f9:d1:c4:0c:
14:43:ef:76:e4:3b:43:78:0b:6c:ef:41:a4:68:51:8c:7c:90:
58:a6:9f:16:c4:2b:06:4d:3a:be:4a:32:ce:b9:49:4e:66:cc:
22:09:81:04:0f:2c:9b:47:bd:ce:c0:6d:47:40:cf:8d:4d:d9:
25:0c:b0:eb:75:b6:47:b5:59:f1:7a:48:c3:4f:21:2b:19:03:
0e:44:fe:06:be:9b:64:1f:5e:31:c1:00:1e:30:a0:fb:22:a0:
04:50:02:46:5b:02:7d:67:67:ca:d3:f7:57:ea:62:65:ed:ab:
4b:03:7e:b8:9b:0a:29:46:16:20:0f:86:fc:78:ea:6e:df:6e:
e4:27:e1:48:de:ad:7d:47:34:b9:dc:5c:30:62:54:19:30:5b:
54:9a:28:12:7f:97:d1:22:96:79:c4:35:00:4a:85:58:7b:fa:
c4:4b:44:e3:99:6d:d5:ed:ec:7b:61:b4:93:73:d4:d6:78:b5:
21:a8:86:a9:fc:dc:81:dd:32:6f:9b:0b:52:9b:c1:74:c2:2a:
cc:54:f3:77:6b:d9:67:38:7f:bb:e7:04:05:59:85:b0:7f:ba:
9b:a3:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:27 2026 by rpki-client