
$ rpki-client -vvf rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft
File: A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft (raw, json)
Hash identifier: 9D1GlUMBffAc5PrAn/f1tPJvhH6ALf/wuOKhQuBbU40=
Subject key identifier: 56:84:3A:1C:1E:3F:DB:86:F2:3D:DB:AA:7B:AA:D6:F1:E4:26:A4:E8
Authority key identifier: A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E
Certificate issuer: /CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E
Certificate serial: 0E6B81D97386EB9EE78FA9BB6B5B076EB968C8CF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 14:54:33 +0000
Manifest this update: Tue 12 May 2026 14:49:33 +0000
Manifest next update: Wed 13 May 2026 16:13:33 +0000
Files and hashes: 1: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: LzRdfO8uQHGjjJx+IZG72L+49qDt2LuDV7Qzeoi9vMg=)
2: A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl (hash: Xbhgokavt+ZFIMt5uSGzKI6fZpYRJ99BslHhOhe0dZI=)
3: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: +X4DdSQ9xtq8kPseZiuCwH6E+1VNqzzRG0A2Dn7OrXc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl
rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:6b:81:d9:73:86:eb:9e:e7:8f:a9:bb:6b:5b:07:6e:b9:68:c8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E
Validity
Not Before: May 12 14:49:33 2026 GMT
Not After : May 13 16:13:33 2026 GMT
Subject: CN=56843A1C1E3FDB86F23DDBAA7BAAD6F1E426A4E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:25:7c:88:08:f0:b7:b2:e7:04:b8:6c:ef:
a0:e5:4f:58:eb:90:6d:e8:b1:4d:9f:78:87:05:96:
fd:4d:f6:2a:e4:7f:d1:e3:44:52:c1:a1:59:3c:e3:
1d:bc:98:a2:ca:24:ce:53:0b:41:5d:3f:2a:28:e8:
82:02:c1:d3:e6:3a:82:39:7e:89:96:06:b3:d6:86:
c4:f6:4a:b3:61:1e:02:99:1f:7c:87:f6:b2:5f:92:
be:09:c7:9b:81:5b:15:8a:28:ff:0a:aa:85:4d:ac:
be:28:c3:b6:ff:9c:ef:d1:97:8b:c3:5a:5a:eb:9b:
3f:d3:b8:0c:ca:33:bb:f4:cb:80:16:ff:40:67:52:
e5:ac:35:15:b6:f3:ea:34:07:71:a1:f6:ad:71:af:
f4:46:92:77:48:77:06:ed:42:37:5e:ae:a5:0e:cc:
9b:32:46:e5:c0:f3:a2:f0:46:06:c6:df:56:f5:51:
f3:14:3b:00:64:1f:c8:c3:50:85:20:88:5f:c1:52:
cf:b4:df:14:11:1e:f2:38:7d:c1:78:dc:1f:3e:d3:
73:aa:ea:b5:c9:cb:5c:7e:a8:a3:12:73:ad:57:55:
f5:a1:86:b6:7e:04:1c:98:82:96:bf:3d:8e:78:27:
46:a7:f2:8f:96:cd:07:83:f2:6b:53:5a:db:e5:f7:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:84:3A:1C:1E:3F:DB:86:F2:3D:DB:AA:7B:AA:D6:F1:E4:26:A4:E8
X509v3 Authority Key Identifier:
keyid:A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:29:ff:d3:5e:7b:3a:f9:d4:27:be:7d:b8:3a:ed:6c:fb:ce:
34:c8:74:32:2c:72:e8:9e:ea:3b:c4:ef:51:e3:78:e5:15:da:
8a:e9:04:66:9f:6e:3f:f6:d7:d1:8b:6a:e8:13:a2:3b:4c:ab:
24:a7:ca:55:38:65:0d:5a:5b:9f:69:93:a3:2c:b0:7c:da:ce:
3c:3e:ad:3b:8d:9f:61:bf:df:75:88:75:52:9a:74:5e:1d:cf:
8f:4c:8f:18:f0:d9:97:4f:3e:5f:32:ba:fe:a9:1e:f0:b8:aa:
e6:2d:b2:a3:0c:a9:7b:48:b8:1d:46:f1:26:09:4e:df:cc:d1:
88:0b:53:64:3d:07:7b:a5:b7:5d:b8:0e:1d:47:1d:c6:9f:c6:
81:f5:31:d8:44:9f:79:89:cf:33:ad:66:17:0c:84:07:9f:31:
0b:37:c9:a0:42:f1:56:45:81:49:eb:3a:16:50:bd:6a:b4:06:
aa:ea:61:22:7b:89:d6:93:24:b9:c6:84:be:5e:d9:2f:e0:7c:
f9:68:65:1a:e7:f9:7c:8e:85:be:e4:f7:81:60:49:a5:f4:6f:
ff:27:a5:98:10:20:4f:d7:a4:ab:58:f6:c2:2a:84:57:d6:76:
91:bd:8a:8d:1b:0a:7f:78:25:34:97:0d:6a:d1:7d:90:be:53:
65:06:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:23 2026 by rpki-client