
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
File: A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft (raw, json)
Hash identifier: kGjgBWCxoZqACtlEGYNrBu/CxVtu+XdWTGfagkDCcTY=
Subject key identifier: 0F:41:66:D9:56:95:9B:02:FB:1C:C8:DC:36:35:1E:BC:4E:01:66:FD
Authority key identifier: A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4
Certificate issuer: /CN=A6E683651BBB97D321A42D48AA16ED775E81B1C4
Certificate serial: 4CAE38E9CB2427C920C9CA900A5A0E5B3F5CE505
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:00:31 +0000
Manifest this update: Tue 12 May 2026 15:55:31 +0000
Manifest next update: Wed 13 May 2026 17:38:31 +0000
Files and hashes: 1: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (hash: s+sTY2aYtG/SFja7fxXnQbGi+haO9AYfperyGy23oaM=)
2: A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl (hash: SpPxhVqfsry8P0Mn/fXUo8efF7Wzr/3i3qf0Mlx0INM=)
3: 3130332e3137382e322e302f32332d3233203d3e20313431303737.roa (hash: xGJx+r1ntKLFX7/fs8KLZEY5oObqr/E40CahT7/MaA0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl
rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:38:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ae:38:e9:cb:24:27:c9:20:c9:ca:90:0a:5a:0e:5b:3f:5c:e5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6E683651BBB97D321A42D48AA16ED775E81B1C4
Validity
Not Before: May 12 15:55:31 2026 GMT
Not After : May 13 17:38:31 2026 GMT
Subject: CN=0F4166D956959B02FB1CC8DC36351EBC4E0166FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:33:3e:c4:be:11:7a:0b:b0:d4:40:12:71:
8c:d6:40:00:11:26:60:b4:a0:74:e9:d7:dd:db:18:
fb:23:16:f1:1f:74:e2:d3:49:4c:2c:fe:f1:04:a7:
9a:1e:b8:97:62:df:62:e7:6d:d7:88:0c:3b:8a:a1:
09:c6:f9:c4:df:68:82:9b:0a:4e:68:ef:e7:c8:b3:
06:20:bb:3f:a7:2f:36:4c:f3:3b:d2:50:a3:72:ee:
23:52:bb:73:42:a0:f8:2d:80:57:56:a0:61:6f:38:
a2:ba:8f:3c:29:bb:8c:b6:00:c6:de:4b:f3:dd:bf:
da:79:78:14:23:11:b2:e3:40:cc:8d:6c:91:95:da:
a8:c1:87:67:f6:9f:3a:d3:be:d9:ab:44:55:40:fb:
ea:a7:5f:1c:e6:e9:96:2f:51:86:c3:e9:51:86:e6:
ef:4c:d2:43:93:5e:df:c7:11:e7:f5:9f:e9:83:3a:
14:90:dd:22:60:e7:e0:a3:db:a1:da:97:9e:8d:c4:
1b:16:3b:97:67:3f:b4:e7:9b:66:d1:c7:78:a6:a9:
75:55:78:26:b3:3b:e1:5e:ac:47:0b:a6:fc:39:26:
f7:4b:33:41:a0:f2:cb:bb:9c:4f:e5:6c:79:a0:e1:
c6:39:5b:01:80:9e:ab:09:0d:46:02:e2:63:7e:28:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:41:66:D9:56:95:9B:02:FB:1C:C8:DC:36:35:1E:BC:4E:01:66:FD
X509v3 Authority Key Identifier:
keyid:A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0f:dd:e0:08:ac:e5:aa:64:fc:cd:a9:dd:a2:53:19:81:2b:
1a:ef:fe:68:aa:c4:c7:22:66:36:74:07:58:e4:5d:ae:60:95:
eb:de:2e:07:1c:6b:0b:29:15:c1:42:35:bd:94:94:96:10:c3:
45:56:c7:23:7f:a0:bb:b4:e9:2c:d5:b4:c5:b1:91:3f:b4:7b:
fd:85:f3:da:44:b5:03:ca:aa:e2:dd:6d:23:97:57:57:25:f6:
4d:d6:35:ab:c9:ab:aa:d6:e4:2c:cf:30:a5:27:b7:d3:fe:ef:
90:74:82:d2:d8:2e:22:75:d0:00:22:d8:f1:26:58:0e:49:84:
ea:6e:b0:ad:14:e6:d3:f8:e2:17:45:f6:b9:90:d2:1b:3a:f5:
16:71:79:75:8e:64:4f:f7:aa:ce:b2:32:a5:dd:fc:f3:18:a0:
dc:f2:65:3b:fc:98:69:23:3e:ec:08:29:ae:26:29:5d:ac:fa:
21:b1:15:3c:43:b8:aa:37:db:7a:ee:64:65:be:72:69:c6:93:
0e:9c:86:61:44:67:cf:a9:34:2e:05:53:ee:c6:91:e6:5b:4d:
ac:6c:ba:92:26:0d:f0:6d:74:f4:d5:eb:02:a6:5b:37:d2:bd:
3c:06:7b:3a:fc:9c:9f:25:90:75:e8:23:77:5b:e8:35:2c:fc:
0f:bb:89:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:04:06 2026 by rpki-client