
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft
File: A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft (raw, json)
Hash identifier: aawIiBDZrjsT371z2hlaAKsw4EIX5P9u+rDNFtFjpU8=
Subject key identifier: 6F:AD:87:5B:D2:7F:42:80:26:46:E4:8D:A5:1B:67:6F:61:5F:AF:AC
Authority key identifier: A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D
Certificate issuer: /CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D
Certificate serial: 0AD8FCE757B1A864E4B765036AC6A03AB413D4BF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 20:40:11 +0000
Manifest this update: Thu 23 Jul 2026 20:35:11 +0000
Manifest next update: Fri 24 Jul 2026 23:26:11 +0000
Files and hashes: 1: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (hash: 8eEz6hzQ+vunwmpuzCRDL78SRiuZLqQtnLKEvllRxT8=)
2: A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl (hash: 48KFPzmzqPRa8HmPaes7GLH2Jelfw8jQ7RWMZmAOLtg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl
rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d8:fc:e7:57:b1:a8:64:e4:b7:65:03:6a:c6:a0:3a:b4:13:d4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D
Validity
Not Before: Jul 23 20:35:11 2026 GMT
Not After : Jul 24 23:26:11 2026 GMT
Subject: CN=6FAD875BD27F42802646E48DA51B676F615FAFAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:b7:b8:2c:3a:49:e7:3c:2a:7d:9d:64:ab:
c6:f1:02:7f:62:43:d9:67:4e:79:c2:76:ba:28:f8:
73:6d:f4:c8:25:1c:17:05:6a:7c:0e:70:7c:16:2e:
69:46:f6:15:76:3d:83:7e:18:6c:04:54:7d:0e:9f:
af:84:76:34:0f:79:81:af:31:2c:08:c6:0b:4d:11:
f6:54:83:76:fe:bb:20:d5:f0:3a:2c:7a:d8:74:74:
5f:00:77:52:14:a6:40:0e:a2:6b:f4:75:2d:c5:b1:
fd:88:88:88:74:50:f0:c6:12:ba:12:9c:53:f2:52:
ff:32:44:c7:81:de:72:48:ce:b6:d2:d0:19:f6:42:
05:c1:c1:73:a7:b3:81:78:4f:15:54:4f:b9:b6:b9:
f9:57:1c:57:37:36:7d:3c:73:6a:c2:52:20:13:e1:
50:e4:60:b5:a0:cf:f2:b8:b4:35:85:94:a4:81:ee:
61:b4:1f:8f:82:47:b2:b3:8b:4d:ac:9d:dc:44:08:
99:62:7d:bc:4b:d9:dd:a7:93:70:f0:21:30:06:36:
c1:08:39:73:f0:5a:3d:1a:21:7a:dd:58:25:12:e2:
ac:97:11:75:68:0a:85:d6:74:e7:d4:85:e2:ef:18:
9b:ee:5b:78:fc:5d:3a:de:2d:8a:32:a3:ff:a2:16:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AD:87:5B:D2:7F:42:80:26:46:E4:8D:A5:1B:67:6F:61:5F:AF:AC
X509v3 Authority Key Identifier:
keyid:A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d2:f9:f3:b9:c1:75:be:17:11:11:58:6e:4e:11:d8:d5:27:
ed:95:1e:b3:ac:19:f1:bd:50:18:42:46:f4:32:26:e6:15:b5:
d6:de:42:a7:f7:09:b0:ea:13:73:74:ae:2a:b8:c4:8d:27:e8:
27:3f:2f:f7:1d:db:c6:c0:6c:6a:7c:bd:8f:96:3a:da:51:26:
f1:d5:ab:6c:a4:0e:92:54:8b:32:37:09:8c:db:6d:c5:fd:a4:
ef:24:3c:14:a9:a5:4c:c6:cf:b3:b7:e0:ae:cb:e0:8b:15:05:
11:10:5f:e3:23:27:51:10:06:06:eb:ef:60:3a:32:69:20:f3:
24:d9:bd:3c:c9:fc:b5:e3:6b:14:e6:1d:4d:07:dd:79:96:b7:
35:9c:48:a7:ea:52:8b:1a:ac:30:1d:50:90:b0:c8:c6:b7:27:
b0:91:b0:b6:33:35:46:77:8b:6c:18:75:bd:a6:a7:57:be:c7:
2b:42:e5:f4:22:7d:78:e9:f9:c5:60:15:2e:76:26:0b:82:8f:
17:d7:c0:84:a8:53:45:13:24:89:37:eb:ce:7f:e1:d9:96:42:
f5:51:84:4b:41:ee:c8:d9:d1:1d:da:9a:b8:98:4f:8d:da:5d:
87:18:1b:a7:da:23:37:d1:7e:14:62:42:c6:63:fd:86:ab:b1:
46:25:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:46 2026 by rpki-client