
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft
File: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft (raw, json)
Hash identifier: +ymXAHe4mYUMFF6JetmREwl8PwFRG94h+V/aeDzS8C0=
Subject key identifier: 81:21:AD:81:9C:6F:A9:46:73:73:53:87:CE:26:3A:AD:24:4D:89:F1
Authority key identifier: A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B
Certificate issuer: /CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B
Certificate serial: 4BF178407D074D385DB1BC25FE5215DC4DC25E4D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 05:05:41 +0000
Manifest this update: Fri 24 Jul 2026 05:00:41 +0000
Manifest next update: Sat 25 Jul 2026 08:23:41 +0000
Files and hashes: 1: A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl (hash: QXsDZvdlWcvMIQKzKiRC+mwkgqg6vWhsMBeIJisGPrE=)
2: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: pkKcse6FAG/fonitREHg6JjHOyjvDxDYEKdlzUzTsLU=)
3: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: sYMsWD1VBKObv1pP8zVNvIvAhHEMXxvrKQWqbEBA29E=)
4: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: hgj+N3QsD0YWK3hTl5lfrI6b1izOwDR937Pr/qp5vWQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl
rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f1:78:40:7d:07:4d:38:5d:b1:bc:25:fe:52:15:dc:4d:c2:5e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A41BCBCB508379B7E70D77F4DAE7DE0A437E885B
Validity
Not Before: Jul 24 05:00:41 2026 GMT
Not After : Jul 25 08:23:41 2026 GMT
Subject: CN=8121AD819C6FA94673735387CE263AAD244D89F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:71:fc:f2:5e:89:67:6a:f9:9f:22:b4:50:55:
4c:b8:09:94:00:a4:79:2a:76:f8:86:9a:04:d2:a1:
38:64:bb:5d:29:99:7a:9d:d0:c8:a8:0b:ac:27:8f:
a2:a7:e1:78:9d:1e:ae:33:2f:15:a2:6b:d2:27:92:
c9:27:8f:db:d7:82:df:4e:03:b8:70:8e:6a:b7:f3:
1f:e3:9b:33:a6:8e:79:f0:c8:1d:ee:93:1b:f3:4f:
ff:53:03:11:9d:bc:de:eb:f7:e4:ea:0b:32:55:5b:
5c:40:e4:ed:38:8a:84:b7:e5:2b:59:86:f1:53:8a:
15:cf:e1:7a:be:1e:c1:86:ef:da:c7:01:ff:fe:85:
13:55:bd:63:84:18:0a:e0:1f:de:6d:06:14:46:ab:
b8:3b:fe:9c:41:43:79:3b:f2:46:a8:56:36:e0:a1:
be:e2:a3:f2:db:a6:23:71:bb:c0:04:86:ce:2e:2f:
47:3e:b6:34:f9:22:46:1e:e5:8a:5f:90:bd:3d:d8:
14:21:c5:ae:43:be:14:4b:fb:7a:c9:f0:14:5a:71:
56:78:22:fe:e0:0e:14:5e:96:fa:db:23:c0:5b:37:
b6:81:1f:53:0e:68:ee:0c:5f:10:04:3c:5c:dd:b3:
47:4c:57:77:5d:67:37:23:10:ea:9a:5b:00:01:64:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:AD:81:9C:6F:A9:46:73:73:53:87:CE:26:3A:AD:24:4D:89:F1
X509v3 Authority Key Identifier:
keyid:A4:1B:CB:CB:50:83:79:B7:E7:0D:77:F4:DA:E7:DE:0A:43:7E:88:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/A41BCBCB508379B7E70D77F4DAE7DE0A437E885B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:62:cc:92:7e:6c:21:00:ea:79:6b:76:df:99:71:9c:ec:b7:
8f:8f:b1:59:e8:25:6a:7d:fc:ab:7b:9c:10:eb:cd:c6:78:36:
60:ae:f3:6d:5b:19:5e:08:ae:1b:79:ed:b0:65:6f:72:37:6e:
44:16:3a:15:46:16:8e:34:c7:d8:65:71:00:a8:6d:6b:df:9e:
29:f2:82:30:e3:a5:41:7f:87:f3:e5:eb:3d:f3:67:22:8e:6c:
27:f3:bd:db:d2:cb:7e:9f:3d:6c:3c:f5:63:73:a0:f5:f5:7c:
3f:42:41:84:d2:70:18:6d:26:a9:72:8d:b0:f6:99:36:a8:06:
61:bb:82:a8:35:b7:e8:1d:9a:cb:72:e2:aa:f8:b5:51:f5:06:
c3:11:59:8b:73:af:e2:6d:90:4f:4d:a2:9c:c2:98:c0:1b:27:
f5:09:4e:52:bf:38:31:38:d2:b4:aa:ea:0a:89:6c:d0:b6:3d:
51:e4:ba:28:3f:1d:21:0a:64:ce:a7:8b:aa:3c:d6:06:43:5b:
8b:1e:61:33:65:99:bd:9e:92:ec:8d:bd:f1:a8:fb:19:d9:70:
7e:43:77:f4:18:d7:b6:07:55:4f:cb:b5:13:4e:f7:8f:c4:50:
fe:00:22:da:60:f6:83:c2:c5:33:60:df:3e:ea:88:c3:c5:bf:
9f:7a:1d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:39 2026 by rpki-client