
$ rpki-client -vvf rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft
File: A9E3887289ED85663942126250F7D66CD58FE1F5.mft (raw, json)
Hash identifier: O6HNAuwKvA3JxAFK3VkiwHnOJcL+cUjb1iGT8Cn2HpY=
Subject key identifier: 03:55:EE:48:84:DD:BB:D1:CE:85:31:BD:3A:7F:0B:38:5C:9D:D4:D7
Authority key identifier: A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5
Certificate issuer: /CN=A9E3887289ED85663942126250F7D66CD58FE1F5
Certificate serial: 5D32EE1D479E4DBFFAD548456B94823B628A70B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 14:53:07 +0000
Manifest this update: Thu 23 Jul 2026 14:48:07 +0000
Manifest next update: Fri 24 Jul 2026 15:42:07 +0000
Files and hashes: 1: A9E3887289ED85663942126250F7D66CD58FE1F5.crl (hash: svxfn7qI8OIKdlzqoOSaFCGzBrZpYbkgt+qO26epsOM=)
2: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: JytxgR9jZstQPJBZYCIpgiXASID1MDjbIa5qz0t9YDc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl
rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 15:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:32:ee:1d:47:9e:4d:bf:fa:d5:48:45:6b:94:82:3b:62:8a:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9E3887289ED85663942126250F7D66CD58FE1F5
Validity
Not Before: Jul 23 14:48:07 2026 GMT
Not After : Jul 24 15:42:07 2026 GMT
Subject: CN=0355EE4884DDBBD1CE8531BD3A7F0B385C9DD4D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:78:96:c4:ca:69:07:2c:67:17:eb:8b:a9:
79:63:8d:97:92:e0:90:bb:12:c6:c5:14:35:5a:e6:
81:a7:4e:46:ea:84:4b:a8:3e:9c:8e:61:6e:36:09:
3c:58:12:0e:70:da:83:d9:e4:7b:3d:c4:d4:36:2a:
ff:dd:be:58:e2:80:9f:9e:7f:72:8f:75:9f:e8:37:
7a:a3:af:cb:92:dc:0c:81:d8:9f:90:78:a2:86:3d:
cf:e9:81:23:69:0c:6c:5d:3d:de:71:b2:4c:54:10:
ac:12:4e:62:b2:83:47:ac:f1:80:af:bb:b5:13:91:
a1:83:c1:24:ec:24:87:07:2f:25:0a:ff:ad:8c:b8:
25:70:df:4c:c3:f6:24:05:af:61:f3:5c:82:9f:0d:
56:c8:42:aa:43:f6:88:b0:9c:d8:2a:00:aa:f1:c7:
5f:79:20:70:e6:51:05:ed:ea:27:1f:46:42:01:ed:
87:01:0d:ce:61:3b:60:5a:13:af:d5:3d:ea:b3:af:
7a:25:a7:88:f4:10:cb:b4:50:37:e4:19:4d:f9:8a:
07:c8:70:8a:64:d5:85:be:55:f4:11:21:b5:cf:5b:
93:36:db:ec:f0:79:0f:06:a8:70:23:87:06:dc:80:
40:c8:48:f0:d9:1a:81:74:d8:70:4b:87:1f:95:ee:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:55:EE:48:84:DD:BB:D1:CE:85:31:BD:3A:7F:0B:38:5C:9D:D4:D7
X509v3 Authority Key Identifier:
keyid:A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f3:89:57:3c:e9:64:58:a8:07:5c:7f:46:6b:d4:77:85:30:
6c:78:e7:c8:e6:a2:5d:d2:32:85:c3:05:69:d5:bd:10:d4:e8:
11:c8:a4:80:2e:aa:44:40:f3:1d:dc:fe:da:a6:22:86:27:b0:
17:e8:30:fb:bc:10:ea:5c:71:ca:b1:16:ad:2b:67:87:c7:93:
e5:2b:b9:50:f2:c1:9b:c5:28:b8:b8:04:ff:58:66:5c:ed:17:
06:06:cc:ab:9e:1c:b0:f6:12:f0:a9:76:7f:43:2e:89:2d:57:
3a:97:ea:3e:42:d3:cb:01:d2:8b:27:7d:a6:ce:e6:64:bc:81:
47:8f:ce:bb:93:1c:fd:10:b5:0d:c8:cd:08:fd:09:6e:d1:e9:
5a:40:89:79:a0:3b:f4:4a:53:49:d9:79:e3:53:07:56:4c:69:
30:b9:1c:5e:a9:f5:84:06:7f:a2:32:94:55:c2:e0:03:c7:70:
f9:f0:b7:fb:da:df:7c:c6:a0:8b:52:59:5b:ab:0c:a9:63:4f:
5d:82:7e:a7:ea:08:7c:fc:c9:a1:01:e5:08:b0:ac:4d:6e:e3:
77:5d:cb:99:98:26:1c:c9:f9:3d:24:3b:65:3e:9e:05:27:b3:
28:7a:4f:f9:4c:ea:18:47:d5:9f:a5:7b:fe:74:24:8b:5a:d0:
6e:52:75:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:40 2026 by rpki-client