
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
File: A795AFC3ACE68FD4EB18D45F48148F669260F261.mft (raw, json)
Hash identifier: iPUuvsqXAghKuuIteDtGFbWXNea2KBRqxZ90ds+G1fk=
Subject key identifier: 4C:A8:A7:55:CF:BD:A6:C8:ED:54:B2:F2:1C:A7:CA:C1:4F:36:9E:7E
Authority key identifier: A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61
Certificate issuer: /CN=A795AFC3ACE68FD4EB18D45F48148F669260F261
Certificate serial: 091DDC8C1E79FEA79E1CF40D85794757240EA9EA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 03:06:55 +0000
Manifest this update: Tue 12 May 2026 03:01:55 +0000
Manifest next update: Wed 13 May 2026 06:29:55 +0000
Files and hashes: 1: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: pmHLxMdkC8jCCynXCQwBWuDUZCyBP7BmUKKeGNQ6X6A=)
2: A795AFC3ACE68FD4EB18D45F48148F669260F261.crl (hash: hGsYXgTua2uMQ9qvqv8UuqNP8JPQlj7l0iB/P/X5Qns=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl
rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 06:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:1d:dc:8c:1e:79:fe:a7:9e:1c:f4:0d:85:79:47:57:24:0e:a9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A795AFC3ACE68FD4EB18D45F48148F669260F261
Validity
Not Before: May 12 03:01:55 2026 GMT
Not After : May 13 06:29:55 2026 GMT
Subject: CN=4CA8A755CFBDA6C8ED54B2F21CA7CAC14F369E7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:cc:91:0e:09:65:29:03:fe:fc:0b:34:d2:
3e:18:e6:75:08:8c:dd:f6:74:ae:f7:eb:98:07:e1:
51:70:d9:c3:8d:39:00:e0:5b:70:9e:b7:79:09:29:
6c:f1:37:a1:1c:fa:27:d2:43:d1:97:bc:6b:e6:f2:
dc:d3:f7:f5:74:4c:08:50:2b:ad:7c:6c:2f:55:62:
1b:15:ab:0f:dd:19:b2:8f:4b:7a:9d:0f:2d:d0:aa:
de:13:1c:b0:c9:25:01:bb:b4:2b:a5:9a:8d:7c:8e:
cd:bb:74:93:f9:f7:48:15:9c:eb:8b:4a:7e:84:7b:
06:d5:19:1d:75:77:9e:80:d7:cb:10:e3:0f:6a:db:
f6:bf:d7:e2:da:7b:95:70:f9:f0:79:1a:a0:f0:1d:
66:a6:e8:46:bc:d2:12:30:97:2f:9e:b1:f0:11:9a:
e6:03:6c:60:c0:e5:c6:54:e3:96:53:1f:0e:04:2f:
17:c7:3b:92:dd:92:91:6d:b0:1d:29:e6:4d:14:a2:
58:aa:85:27:6f:f1:4a:7b:03:7a:bc:92:74:24:86:
89:3d:a6:1c:37:fb:16:3d:00:37:51:1d:f1:0c:57:
47:d1:66:e2:11:9c:f8:24:2a:10:d9:b1:93:a0:eb:
96:f8:9a:58:8e:4a:d7:7d:50:43:90:bd:66:82:3e:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A8:A7:55:CF:BD:A6:C8:ED:54:B2:F2:1C:A7:CA:C1:4F:36:9E:7E
X509v3 Authority Key Identifier:
keyid:A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9a:f2:3f:7c:10:ca:a5:10:27:0b:47:61:29:ad:d8:48:db:
f5:0f:d8:c6:70:b8:d5:06:7d:ac:1f:ab:f7:c6:36:a4:34:ea:
78:3b:56:fa:42:5e:19:b1:0b:ba:dc:f9:b1:d9:52:cd:70:e7:
9b:cb:e4:7d:37:af:81:ff:2d:d1:c4:1d:ea:76:2f:9f:b2:a7:
16:1e:84:86:5c:62:e2:36:cd:e2:e2:56:b9:08:b9:48:36:12:
81:55:94:b1:35:af:cb:75:b5:d1:36:9c:f5:db:d6:81:a8:1f:
23:9c:78:b8:18:28:e8:ba:1f:d6:24:ba:ef:e7:df:69:1f:f5:
72:b1:8a:17:94:76:e6:6e:42:0e:bf:b2:4e:99:b8:2d:f2:35:
10:3e:c6:c7:c3:bb:45:f4:20:56:6c:ab:04:c5:91:a9:54:43:
3a:0d:fe:b7:47:cc:b9:63:d2:3a:99:44:64:e1:14:e9:eb:21:
4e:5d:a0:8e:3d:a7:9c:e8:6b:16:21:fb:46:af:19:c6:f7:a9:
9a:44:33:87:28:3f:b9:d2:32:93:6a:b4:1f:3a:41:b9:7c:83:
f4:ee:ee:18:d5:53:f4:de:4f:cc:d0:93:b8:f6:bc:e3:27:04:
5e:b0:dd:be:2f:41:07:00:6d:53:c4:a1:d2:93:30:9a:c0:fb:
68:75:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:36 2026 by rpki-client