
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft
File: A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft (raw, json)
Hash identifier: hUpaJ4Pkeh3oUvjUzZlVsH60MA01SNqJQIA+fUjDeis=
Subject key identifier: EA:B4:C5:23:1F:4C:CD:CD:11:64:05:BF:F1:36:33:03:A7:7F:B2:FD
Authority key identifier: A4:E1:4E:D9:62:51:66:5F:CF:9F:C4:FA:C3:68:DC:40:95:3E:34:0D
Certificate issuer: /CN=A4E14ED96251665FCF9FC4FAC368DC40953E340D
Certificate serial: 498B8CED2C82375E6904692C58D8EB0AF1771658
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft
Manifest number: C0
Signing time: Wed 23 Sep 2026 10:03:36 +0000
Manifest this update: Wed 23 Sep 2026 09:58:36 +0000
Manifest next update: Thu 24 Sep 2026 12:53:36 +0000
Files and hashes: 1: A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl (hash: 89CyopSo4IVZC9vIwsmuwvVvuZ/vD9fpsVCqlBdbb4M=)
2: 3130332e3136312e3134362e302f32332d3234203d3e20313431363238.roa (hash: q0vh/quQ+eV+UyFsOiPKTjhnWvk1GZbhfwaX1pBs5t4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl
rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 12:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8b:8c:ed:2c:82:37:5e:69:04:69:2c:58:d8:eb:0a:f1:77:16:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4E14ED96251665FCF9FC4FAC368DC40953E340D
Validity
Not Before: Sep 23 09:58:36 2026 GMT
Not After : Sep 24 12:53:36 2026 GMT
Subject: CN=EAB4C5231F4CCDCD116405BFF1363303A77FB2FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:27:d7:c7:97:be:9f:19:e2:fb:f9:f5:e0:
9a:79:95:78:63:e1:f3:76:9e:b1:63:d7:e7:62:12:
f8:aa:c1:96:fd:f4:f7:6e:55:12:98:26:ff:94:74:
e4:8a:9b:1e:1f:8a:c0:e2:34:d4:81:1c:19:e2:bf:
19:3e:3f:16:5c:cf:82:26:4f:d9:d7:6a:1b:43:e0:
1e:e2:be:f3:85:de:62:dd:52:14:9f:9e:52:ef:cc:
35:b0:66:81:fd:70:f2:43:d2:a8:33:b6:cb:99:82:
cb:ee:b6:e5:aa:7e:71:38:62:a8:1d:67:bb:27:32:
21:0f:52:1f:b3:84:1f:92:53:15:2f:26:5d:0e:c0:
8a:da:05:d7:40:a4:93:2f:ca:2d:01:88:3b:5c:73:
a1:64:9c:0f:37:13:31:fe:4c:12:5d:af:10:7c:71:
1c:82:11:40:db:5f:2f:5d:e2:5f:03:be:b2:bc:b0:
fe:62:72:67:38:b1:78:60:00:d8:a9:c7:e5:80:4a:
ab:ba:72:b0:5b:df:0d:f3:f7:fa:9a:39:0d:1b:6f:
3e:0d:ce:dd:29:75:d4:55:28:1c:e0:cc:7d:a6:c2:
d0:d0:b0:39:60:43:94:0c:6f:85:08:7e:12:c9:e7:
cf:c3:1d:3d:08:ae:df:8b:3f:cc:e4:2b:2a:2c:62:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B4:C5:23:1F:4C:CD:CD:11:64:05:BF:F1:36:33:03:A7:7F:B2:FD
X509v3 Authority Key Identifier:
keyid:A4:E1:4E:D9:62:51:66:5F:CF:9F:C4:FA:C3:68:DC:40:95:3E:34:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:26:87:23:67:c5:13:e1:fb:c8:00:50:33:b7:87:1f:3a:27:
6f:ad:65:0c:65:2a:ff:89:e1:b0:ae:9f:50:7b:9f:8f:c8:02:
e8:57:56:f2:ba:1b:f7:9f:20:0f:69:d7:d8:13:24:89:9a:45:
59:42:84:bb:9e:f6:81:26:e8:b0:4e:b1:4e:45:0b:60:75:a6:
dd:06:ad:1a:49:0e:13:5b:e0:69:38:b3:95:6e:75:9a:a2:9f:
cf:97:ed:07:5a:49:b0:c1:e2:7f:ab:1e:f4:b9:66:c9:2d:96:
c2:23:c0:d7:fd:a1:17:26:42:fc:42:18:64:06:a5:e1:1b:9b:
8a:54:49:a2:0f:f3:16:43:2f:12:d4:77:8b:b1:40:8f:3d:f2:
de:4c:65:ad:a6:76:cf:7d:88:43:10:38:f2:7d:47:4f:a8:27:
1d:cb:da:ee:da:78:fb:0c:5d:a8:8a:36:d1:88:ca:8f:3a:9b:
19:b5:e1:7a:2e:31:37:ac:b8:75:79:8d:9d:71:25:73:ff:91:
9d:9a:b9:e0:c3:4d:05:0d:99:d3:39:ce:5b:0f:0c:e5:37:b4:
b9:4b:00:6a:d5:9e:de:19:b9:5b:1d:bf:ff:75:7f:55:9f:98:
e7:4d:00:28:13:1d:25:fa:26:23:3f:d2:45:ec:d7:6f:fd:d5:
87:c7:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:22 2026 by rpki-client