
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
File: A241AC704BB26D3BB01102643E819AF4873EBFF4.mft (raw, json)
Hash identifier: 9YOr0aYXA5a3dDb2EiHMfbvhpR6dDiN/+7IBDPVrKhw=
Subject key identifier: 85:9C:FE:DD:B1:C8:83:D8:32:28:F4:48:64:3D:0E:34:67:D8:86:E6
Authority key identifier: A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4
Certificate issuer: /CN=A241AC704BB26D3BB01102643E819AF4873EBFF4
Certificate serial: 425A048A9057974A2F0673EB894F8D9362BE9E2E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 21:56:45 +0000
Manifest this update: Thu 23 Jul 2026 21:51:45 +0000
Manifest next update: Fri 24 Jul 2026 23:50:45 +0000
Files and hashes: 1: A241AC704BB26D3BB01102643E819AF4873EBFF4.crl (hash: doTK8IaUVLD9fMZjR0s8wcZdfX72N/7PCzwJtT+vySw=)
2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: A0dq7gCpUZizRlTZxmyyhDpzPzM9JT/yiUa6QfFC4Os=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl
rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5a:04:8a:90:57:97:4a:2f:06:73:eb:89:4f:8d:93:62:be:9e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A241AC704BB26D3BB01102643E819AF4873EBFF4
Validity
Not Before: Jul 23 21:51:45 2026 GMT
Not After : Jul 24 23:50:45 2026 GMT
Subject: CN=859CFEDDB1C883D83228F448643D0E3467D886E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:23:a8:d8:df:56:c3:2c:bb:1d:db:74:c3:
a5:2d:98:1e:45:8a:b0:a9:a7:6a:31:ee:a2:71:98:
46:0e:fe:ec:b4:e7:74:8f:0b:6b:b8:12:a5:d8:24:
86:db:71:2e:a5:1d:5a:2c:e8:48:04:96:e2:9b:fd:
ef:fb:4d:38:c3:a8:5e:d1:d9:f7:cf:22:4c:b1:ae:
e8:ee:25:dc:a5:35:93:29:2a:ad:ef:a0:67:dd:af:
46:64:5f:17:c6:e4:d5:c5:9e:c4:e9:1d:aa:9a:73:
d6:78:b9:14:10:92:f5:e8:55:f2:67:d5:a5:46:77:
fe:ce:d9:d8:d3:d9:29:b0:95:20:dd:28:48:90:70:
a6:e1:a5:e7:41:81:19:23:1d:7a:44:5b:35:ae:02:
4b:e3:14:70:c8:fb:b3:e5:83:8f:54:b9:46:3a:0d:
bd:51:9d:c6:43:d8:ed:6c:5c:49:99:16:fc:63:d2:
66:4e:ad:f3:c4:43:fa:6d:d2:d1:b3:2c:ef:17:96:
4e:33:cb:91:23:de:94:47:d2:bf:b9:8d:49:45:5e:
b4:6d:81:f1:9c:a7:df:4e:39:f5:de:87:08:5d:bf:
6f:7e:c3:59:cd:26:6d:5d:c3:02:a5:49:14:13:39:
62:fc:55:c0:00:37:02:28:e7:e2:ab:3f:e5:62:7e:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:FE:DD:B1:C8:83:D8:32:28:F4:48:64:3D:0E:34:67:D8:86:E6
X509v3 Authority Key Identifier:
keyid:A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3b:ad:28:f8:64:03:4f:c6:fe:51:6c:2e:5f:0e:b9:82:3f:
b0:39:fb:91:59:57:d0:94:d7:99:b7:86:c2:dd:e3:39:4f:f7:
d8:a6:f1:15:51:09:99:d0:d6:08:ee:db:3a:d6:35:b4:b4:d6:
c8:90:3e:f7:30:d1:72:c2:c5:6c:20:f3:f4:78:31:88:77:51:
98:4f:33:50:40:5f:22:8c:2d:57:7b:82:72:fe:65:59:86:a8:
0f:0e:86:0c:df:18:a8:71:7e:a5:86:74:7b:c3:4e:91:63:91:
b6:48:1f:50:2b:15:b8:c6:57:7d:0c:e7:4f:41:42:63:41:e2:
a0:03:0a:c7:17:a4:1f:87:cc:00:af:fb:5d:8d:d4:5d:15:59:
ae:7a:12:33:4f:63:5f:19:76:76:16:be:7f:12:e4:f2:db:a9:
e8:bb:86:b8:a5:d7:f2:ad:8b:a1:ce:2a:23:04:49:e7:38:51:
a1:8a:45:dd:04:29:54:e3:c1:5b:16:4a:8d:b4:9b:76:55:3c:
1f:6e:61:10:4c:5a:2a:5c:5d:f4:25:c3:0f:51:11:c7:0c:f2:
f7:c0:0d:72:97:db:b0:c8:7c:96:83:38:91:86:07:fa:b9:71:
c9:be:c4:d3:b7:43:a1:cf:b3:da:9b:96:df:df:da:9d:8b:ac:
28:b2:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:02:40 2026 by rpki-client