
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft
File: A20182F9E8910D783A73A086F2AE72D89BE78C37.mft (raw, json)
Hash identifier: auRgfDi1G7VQa6x0rTH19cetlMCrSaMfc31vxpvLALo=
Subject key identifier: 9A:25:F4:7D:68:CD:C9:58:5C:6C:44:D0:9E:EF:29:2F:48:32:AA:1D
Authority key identifier: A2:01:82:F9:E8:91:0D:78:3A:73:A0:86:F2:AE:72:D8:9B:E7:8C:37
Certificate issuer: /CN=A20182F9E8910D783A73A086F2AE72D89BE78C37
Certificate serial: 6242818DF9425B3825CA45477C9FDB3E1F117087
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A20182F9E8910D783A73A086F2AE72D89BE78C37.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 21:31:22 +0000
Manifest this update: Thu 23 Jul 2026 21:26:22 +0000
Manifest next update: Sat 25 Jul 2026 00:10:22 +0000
Files and hashes: 1: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: LhYIbVJJA5dJnxEypyUmNgz7cp+p/g+/mtBrk7YH2hI=)
2: A20182F9E8910D783A73A086F2AE72D89BE78C37.crl (hash: gsBCutbGG7eEQ4r8VM7d+jXmgL30FSw3GLlfjNfPVaQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.crl
rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A20182F9E8910D783A73A086F2AE72D89BE78C37.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:42:81:8d:f9:42:5b:38:25:ca:45:47:7c:9f:db:3e:1f:11:70:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A20182F9E8910D783A73A086F2AE72D89BE78C37
Validity
Not Before: Jul 23 21:26:22 2026 GMT
Not After : Jul 25 00:10:22 2026 GMT
Subject: CN=9A25F47D68CDC9585C6C44D09EEF292F4832AA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:49:c1:31:f8:67:bc:3b:79:cb:b2:5c:1e:
4a:f6:01:4a:c8:da:bd:20:81:f4:54:44:c5:13:b9:
9d:a9:58:e0:aa:cc:e1:0e:26:94:ae:69:00:58:9c:
ba:63:d6:2f:e1:d3:41:d7:64:0a:dc:7a:95:df:4f:
9b:f6:93:c6:6b:fc:86:32:80:f3:62:82:5a:4f:b7:
f4:e2:81:a3:16:93:ee:97:dc:5c:34:7b:1c:fd:7f:
35:fb:43:53:64:53:97:76:c0:8d:b7:45:f2:b7:c7:
a0:01:c2:83:2b:e0:46:8e:f4:2a:f4:77:84:f5:9e:
85:0e:4f:e4:c9:a0:bc:5d:0d:69:65:2d:e1:24:66:
ef:b1:1e:f1:86:bf:c0:85:28:0f:ba:23:11:75:a2:
3f:60:1f:62:b6:a8:98:29:3b:22:44:a4:2e:7f:4f:
0d:94:dc:3f:07:e7:79:22:6a:2d:d2:28:4b:4e:b4:
19:ff:27:57:ea:3c:da:3d:2c:e0:49:99:f8:ff:6b:
98:72:a1:4d:f1:25:a8:19:45:1a:41:54:23:4e:f3:
38:c7:72:a5:f0:86:6d:5f:68:85:ba:09:ea:bc:a2:
d7:d3:41:87:be:07:68:30:93:e0:37:c0:9e:37:ba:
78:da:66:5b:04:08:43:eb:02:a5:97:ba:d6:2c:37:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:25:F4:7D:68:CD:C9:58:5C:6C:44:D0:9E:EF:29:2F:48:32:AA:1D
X509v3 Authority Key Identifier:
keyid:A2:01:82:F9:E8:91:0D:78:3A:73:A0:86:F2:AE:72:D8:9B:E7:8C:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A20182F9E8910D783A73A086F2AE72D89BE78C37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e0:03:94:2a:2d:db:e4:63:5f:f5:61:c4:ef:7c:eb:25:24:
ea:74:16:26:a5:f7:83:f8:de:1a:3a:ef:78:5a:3d:4c:1d:8e:
52:36:bb:c0:56:db:8d:eb:28:8c:ea:b3:1f:87:bf:18:75:bb:
bb:6f:93:c8:b8:86:1e:2a:3a:79:84:47:6f:9e:8d:39:17:d2:
fd:eb:d1:46:20:91:72:ce:b5:72:f5:44:2a:ca:e7:2b:17:e6:
f8:fc:e5:a4:03:bd:02:cb:25:3d:31:84:6a:bf:8e:de:83:84:
c6:6c:21:d1:61:5d:ad:a9:b2:6d:e8:a2:f0:fa:0b:75:cf:69:
b8:3e:0e:5d:ed:19:dc:f2:74:6e:04:f3:63:59:9c:47:f7:a2:
9e:4c:0b:73:77:4e:0b:62:5c:85:9d:4b:9e:8e:d5:d2:5b:30:
67:f1:1e:5f:6f:18:ef:4d:f9:4d:38:07:9b:9f:d6:06:d8:07:
07:c1:2a:3a:15:8e:c7:11:2f:24:c2:48:68:26:6a:12:83:61:
7c:c7:12:94:a3:55:3a:df:0f:fc:15:12:ff:25:b5:dd:cf:b7:
ea:1c:2b:28:e4:2d:f0:72:27:2a:8d:9f:80:6e:83:07:f7:a8:
a1:aa:00:dc:28:89:82:b1:e4:71:e3:9a:18:44:9c:f5:88:5c:
eb:05:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:08 2026 by rpki-client