
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft
File: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft (raw, json)
Hash identifier: WjTayyzH/HQakTGJT+6C+ekGzuAx4MtrQdlfG2O0itA=
Subject key identifier: A0:6B:61:AC:81:C0:8C:04:73:84:75:2F:FD:23:63:0F:6A:DD:66:F5
Authority key identifier: A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E
Certificate issuer: /CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E
Certificate serial: 24E729A1885EE3FD56EA8E433B5E30BAE7B5CF67
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 18:42:58 +0000
Manifest this update: Thu 23 Jul 2026 18:37:58 +0000
Manifest next update: Fri 24 Jul 2026 21:22:58 +0000
Files and hashes: 1: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: qHvmH7kkKUgxVXxeqg/YxT0IJ6BIS+6+UvvwAM7JNvs=)
2: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: bj0wxd5ICBouELscs1c53rXVki6zrAfUoc5PnYBmxBA=)
3: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl (hash: 0UrpzN6n/a3vqyKq1FE2EFJpKZrWCB5dQhFwZOaZA90=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl
rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e7:29:a1:88:5e:e3:fd:56:ea:8e:43:3b:5e:30:ba:e7:b5:cf:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E
Validity
Not Before: Jul 23 18:37:58 2026 GMT
Not After : Jul 24 21:22:58 2026 GMT
Subject: CN=A06B61AC81C08C047384752FFD23630F6ADD66F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:5a:f3:ae:be:03:70:1e:92:95:17:fe:59:
b7:3c:47:27:48:f5:94:a7:33:9f:01:07:93:40:26:
1a:e9:1d:23:71:d5:6f:2d:f2:0e:eb:e8:ad:0a:40:
fc:45:05:e4:33:52:98:89:da:ce:59:d3:1f:4d:95:
b1:a6:c7:52:90:2d:bc:10:5c:52:cf:47:5f:00:58:
ab:b2:38:b4:01:20:a3:70:47:dd:e6:c4:38:fd:04:
67:ae:2d:01:ce:1e:7c:2d:b0:bd:c5:7a:c5:d2:00:
ff:5d:d3:15:09:21:72:c4:67:c2:0e:a3:38:06:75:
77:28:6f:23:b3:94:80:75:97:84:24:4a:3a:85:b4:
e1:2e:d9:23:d6:37:2f:51:17:20:f7:17:fd:be:a4:
ad:cd:f0:ea:ce:32:82:74:59:b4:b6:48:5c:3e:1f:
c1:e0:f1:ab:e3:e7:75:33:4c:ca:8c:9f:99:b8:0b:
c8:d0:1b:9d:3a:0c:f7:f9:f0:78:4e:c2:14:08:57:
75:ca:0f:5b:41:a4:38:ec:03:2b:23:2b:71:82:1e:
f9:e8:5e:d1:b1:d2:be:67:74:e6:96:5b:3e:34:a4:
24:44:f8:2e:b3:a9:c4:dd:91:8c:a0:c5:c9:f8:8a:
7b:d5:40:58:70:c2:0b:e0:17:9a:10:99:fc:72:9d:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6B:61:AC:81:C0:8C:04:73:84:75:2F:FD:23:63:0F:6A:DD:66:F5
X509v3 Authority Key Identifier:
keyid:A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:12:8e:ef:69:c4:d7:f2:0d:32:2d:d7:e8:1e:9e:7d:a5:ed:
06:0c:71:9a:c1:1c:0c:51:7e:37:fa:d4:97:c5:4e:cf:1c:f0:
da:a7:cc:02:9e:14:1f:c6:54:4f:dc:65:6f:82:a6:6c:e3:3b:
64:ab:ef:ad:07:a0:bc:d2:68:a3:59:ea:5a:4e:60:0d:8b:c8:
a7:92:f6:dd:1c:9b:e7:d0:47:eb:a2:d9:8b:5d:ba:ab:1a:2a:
b2:6a:87:15:b6:a3:cf:b4:59:82:bc:ab:b4:ce:45:fb:80:dd:
99:08:65:20:4a:e1:de:b7:44:aa:ff:7a:0b:74:d8:dd:4c:1d:
3a:17:db:e0:d5:37:6d:c5:1c:11:b7:d5:06:68:77:91:1e:77:
9c:48:8e:a5:03:85:2a:03:a4:bd:a9:7a:f8:5d:4b:f2:35:16:
1f:87:75:21:15:2f:d9:b1:a0:a6:52:be:6a:39:a1:5a:a6:4a:
80:aa:26:eb:48:4a:4c:11:ba:8f:0c:e3:13:bf:e6:a3:af:f9:
63:29:2d:ed:d4:51:5e:bf:cd:78:b4:ac:54:f9:e7:c0:0b:ed:
a5:ac:28:17:13:a6:8c:7c:27:92:3a:47:bb:17:36:a8:0e:fe:
6d:61:6d:02:99:55:05:e8:2d:8f:69:84:e0:d1:b6:c6:56:b3:
9b:25:04:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:06:10 2026 by rpki-client