
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft
File: A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft (raw, json)
Hash identifier: SjL6TJpNG6N9e3Ez6GmfFJ/A7rlsYDO198xYg17BBnM=
Subject key identifier: CA:D6:F9:FA:C5:63:82:26:CC:57:A4:FF:88:22:92:6D:90:65:AC:CD
Authority key identifier: A1:DF:67:76:AD:2D:FE:35:EE:13:69:E0:2E:52:4F:DE:56:AE:EB:36
Certificate issuer: /CN=A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36
Certificate serial: 6F4C50C10DB463738FF11CA64342D5D33BF5C379
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 01:37:10 +0000
Manifest this update: Fri 25 Sep 2026 01:32:10 +0000
Manifest next update: Sat 26 Sep 2026 04:33:10 +0000
Files and hashes: 1: A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.crl (hash: p8RJ3/YErm0Hx0ewWVN5AcX61lOETU2HOHb6ypCMRO8=)
2: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: 9jew+9sCaLR4uEzM2fOlDSLlwcDUwMl5EIbO/d6WI20=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.crl
rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 03:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:4c:50:c1:0d:b4:63:73:8f:f1:1c:a6:43:42:d5:d3:3b:f5:c3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36
Validity
Not Before: Sep 25 01:32:10 2026 GMT
Not After : Sep 26 04:33:10 2026 GMT
Subject: CN=CAD6F9FAC5638226CC57A4FF8822926D9065ACCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:2a:55:22:96:a0:95:c4:49:b5:0c:00:d8:
f2:e3:15:c8:4a:c4:8c:01:f9:1f:aa:ad:dd:86:40:
94:4d:97:b6:71:39:ec:33:fc:7d:b8:e8:5c:50:7f:
63:67:8f:e4:6a:5a:e7:d1:62:63:4a:20:5b:08:d5:
a4:68:fb:82:98:66:50:b7:a8:cd:e2:78:47:8a:97:
4a:1f:bd:ad:d9:ba:d2:f0:a0:5e:c6:31:d5:2e:7e:
94:b4:99:4b:a9:ea:1f:f9:e3:7d:a0:6c:50:1e:93:
8d:c3:d9:52:43:e3:a7:5d:fd:45:91:45:53:00:2d:
17:09:d4:06:5c:d2:53:76:b5:af:bc:6b:8d:6b:69:
68:da:b1:bc:2e:c0:1b:34:2b:56:0a:78:42:11:d3:
69:ec:41:d8:bc:6f:fd:1b:b0:ca:2b:5c:8e:5e:99:
43:20:fa:3f:f0:ee:08:68:3d:07:62:34:0c:7e:5a:
da:9e:35:44:4a:ea:35:50:38:8e:dd:d6:14:3d:dd:
da:c3:56:91:f8:b7:ab:c8:23:c8:c0:50:00:d9:e4:
23:ee:a3:2a:c8:27:e1:ed:1a:4b:30:c9:62:d0:f1:
37:f8:e8:74:5e:74:cb:23:fd:84:47:74:64:07:e5:
e5:db:c1:45:06:28:d2:b7:75:fb:e0:b9:3e:1f:79:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D6:F9:FA:C5:63:82:26:CC:57:A4:FF:88:22:92:6D:90:65:AC:CD
X509v3 Authority Key Identifier:
keyid:A1:DF:67:76:AD:2D:FE:35:EE:13:69:E0:2E:52:4F:DE:56:AE:EB:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:da:36:be:d6:7d:96:31:55:1d:22:ef:22:89:d2:48:07:d9:
9d:9d:0f:45:85:af:e0:dc:3c:f4:e3:86:74:7e:eb:7c:d0:bb:
9a:e2:97:55:a1:50:4b:f6:11:bb:d3:89:eb:c1:84:fe:cd:fe:
e5:d1:37:4d:3b:0f:bc:ee:7b:1e:eb:68:12:9a:6e:b7:fe:59:
22:4a:ec:23:64:f8:c4:e6:70:b9:6b:61:26:5b:ed:a7:18:bd:
b4:ea:67:81:ce:35:3b:71:01:6e:24:17:86:aa:7c:13:bb:4f:
ec:32:97:3b:3e:07:a9:b6:7a:e1:22:77:3d:f5:74:70:46:45:
84:7a:11:2b:0e:6f:be:60:c7:03:2e:cd:e3:8b:bf:38:c1:0d:
bf:a3:99:4b:1b:ae:d0:cd:19:6e:36:ac:29:17:45:bb:8b:6a:
90:ec:d5:65:60:88:0e:83:de:f0:f1:99:39:95:44:40:9f:2c:
a3:7f:b8:21:fa:83:b9:1a:24:0a:a0:34:b5:e2:57:b9:ad:5d:
4c:67:8a:16:bb:3f:b5:76:80:cd:60:27:69:cc:df:b1:ab:06:
35:1b:cf:72:79:3b:8c:65:28:b4:cc:a7:37:cb:24:11:9f:7f:
85:87:e7:73:4f:01:af:05:af:6c:ec:36:47:92:31:54:61:b9:
b9:1d:3f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:31:34 2026 by rpki-client