
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
File: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft (raw, json)
Hash identifier: DWghlb9hg0iPozRnYm2DKt0FUsZLsFmexGFOl24re6U=
Subject key identifier: 47:E6:3D:E0:5E:70:95:06:38:7B:15:B0:32:F2:9E:4F:C6:9D:4F:B0
Authority key identifier: A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C
Certificate issuer: /CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C
Certificate serial: 1F65DE9F9076E8476AC134B3473A4549F418AF62
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 14:27:36 +0000
Manifest this update: Thu 23 Jul 2026 14:22:36 +0000
Manifest next update: Fri 24 Jul 2026 16:56:36 +0000
Files and hashes: 1: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl (hash: UeftIVnnNCsXhzotiBQWrkiBVBPvJcK4l8Xk3H4+lsg=)
2: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: Xz4v16/PuWF3xc6NRQS+cFH5cfyFs8wYPFxR2GtXMDw=)
3: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: oVthfsHvJfZFfAfPgVnP6RK4i2YXuHXT4TJi3carfJc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl
rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 16:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:65:de:9f:90:76:e8:47:6a:c1:34:b3:47:3a:45:49:f4:18:af:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C
Validity
Not Before: Jul 23 14:22:36 2026 GMT
Not After : Jul 24 16:56:36 2026 GMT
Subject: CN=47E63DE05E709506387B15B032F29E4FC69D4FB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:a2:ea:71:25:78:a2:dc:00:8a:65:6c:bf:
45:09:4f:da:78:dd:66:2a:6d:e7:5f:7b:9a:ce:5a:
1c:95:ac:51:7c:b5:43:8d:c4:26:5d:4d:21:d0:ea:
a2:26:95:a2:fc:b8:7f:e9:0f:59:91:d6:6c:98:c7:
6c:06:a2:a0:1f:bc:90:c1:de:9f:d3:53:75:3c:a2:
bb:89:aa:de:fa:99:d7:4b:ca:cc:25:9d:cc:8a:a9:
4a:35:f1:70:de:93:64:d4:d5:67:e8:d5:b0:46:f7:
11:42:4b:98:90:be:ac:41:57:fa:ea:e0:6c:77:9f:
2b:56:8f:99:b0:b6:39:ef:e8:68:09:e0:a3:11:a2:
b2:b9:8a:bd:01:7f:2d:52:05:bc:94:77:0b:87:8c:
4c:b8:84:b2:d3:e1:5f:13:aa:09:00:d4:88:6b:cb:
de:5e:84:1b:05:ca:4e:96:7a:92:ea:2f:43:4b:62:
ac:45:f3:b7:54:a2:9f:c4:5c:4c:b1:86:b7:d9:71:
8d:cc:e9:04:e0:fe:2a:f3:ff:e1:7a:cf:6b:08:89:
a6:bd:bc:51:3e:00:19:6e:86:cd:6d:cb:b2:b4:3c:
2f:31:99:5a:28:d5:76:82:c3:78:96:8e:bd:3d:d4:
fb:1d:16:0f:c0:c9:52:17:49:43:fd:4d:04:59:36:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E6:3D:E0:5E:70:95:06:38:7B:15:B0:32:F2:9E:4F:C6:9D:4F:B0
X509v3 Authority Key Identifier:
keyid:A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0e:ed:39:10:10:ab:ef:43:eb:45:86:4d:21:b4:0d:a7:c3:
59:b6:1d:bc:39:71:e7:20:c9:4c:0d:21:35:94:57:71:6b:69:
86:07:17:b2:13:3e:e2:f4:69:c3:11:81:14:23:05:15:91:76:
76:ca:20:ad:16:d9:de:0b:0f:32:01:50:86:87:7e:a4:f1:80:
e3:2a:08:d5:59:3a:72:81:47:19:ad:2f:85:e9:9a:23:58:f6:
40:fc:23:c3:af:15:df:8a:82:12:c3:27:18:e6:e6:66:08:19:
1e:7f:03:13:a1:1f:12:2d:20:5b:eb:8d:d9:51:ca:dc:32:d0:
b3:00:cf:f5:a7:f0:df:16:14:b0:2d:ac:79:b0:60:61:c6:03:
f4:79:d4:a3:52:2f:54:20:1e:fb:f4:c9:09:f2:93:f0:76:a8:
ac:f3:c8:8d:df:8a:c1:f3:66:89:58:27:84:58:53:b4:70:5b:
6d:2d:6e:c2:f0:04:c5:d4:e3:7e:b2:e8:35:24:3f:d6:99:66:
d4:3a:f4:f8:dc:43:1f:b5:d9:43:c4:4d:88:93:6b:72:84:f6:
c3:1f:0d:4a:3f:a1:4d:40:0a:6d:a4:b1:1e:ea:9b:57:0b:86:
38:e4:c6:92:08:cc:20:30:7b:d6:7a:87:68:0e:75:66:7a:4f:
f8:44:a5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:40 2026 by rpki-client