
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
File: A5251C27E1AF09AE2F28618250807EA4D573694B.mft (raw, json)
Hash identifier: zrFP4xNUtaGrYlkNmhhHmPAMa5p+d3WXtiNvUbXVvjA=
Subject key identifier: 6E:12:13:05:63:EF:8A:9C:E6:59:07:55:17:6F:95:79:E4:35:16:E6
Authority key identifier: A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B
Certificate issuer: /CN=A5251C27E1AF09AE2F28618250807EA4D573694B
Certificate serial: 78B87D6DA561B11F85661FFC70A4182574CA7565
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
Manifest number: 0106
Signing time: Sat 14 Nov 2026 11:39:10 +0000
Manifest this update: Sat 14 Nov 2026 11:34:10 +0000
Manifest next update: Sun 15 Nov 2026 14:42:10 +0000
Files and hashes: 1: A5251C27E1AF09AE2F28618250807EA4D573694B.crl (hash: 06Za729A+xo0iyBwQ0CTre3a1343nww/cVyoPTiBR6c=)
2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: 8PPdaCX6mIjApYArjunSo3wNOsnTma7JcAZ0c6t+SzU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl
rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 14:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b8:7d:6d:a5:61:b1:1f:85:66:1f:fc:70:a4:18:25:74:ca:75:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5251C27E1AF09AE2F28618250807EA4D573694B
Validity
Not Before: Nov 14 11:34:10 2026 GMT
Not After : Nov 15 14:42:10 2026 GMT
Subject: CN=6E12130563EF8A9CE6590755176F9579E43516E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:0b:4e:c2:6b:f0:22:68:ee:b6:51:4a:f7:
51:8b:c3:88:6a:01:76:9f:0a:95:e2:a5:1d:f1:21:
36:b7:35:d9:d7:53:8f:05:d7:6f:7f:90:6d:f4:f6:
f0:46:2f:a9:af:9f:fe:cd:cb:ce:15:61:b1:18:a0:
8c:f1:3d:14:95:33:a2:fa:d1:18:1a:9d:87:6d:da:
7e:3b:d9:bc:40:a4:44:47:98:42:05:84:2e:9d:c4:
e3:84:c5:a4:fb:a0:a2:c5:a1:dc:aa:6f:94:f2:73:
59:a9:8c:09:7e:8e:f8:b5:00:2b:67:61:ec:1b:6d:
55:ce:8d:97:f1:77:b0:32:68:ee:bc:53:fb:f2:a3:
08:a6:30:26:13:83:74:23:86:7d:b0:29:94:30:16:
f3:09:5d:9d:71:db:99:5c:d2:1d:e4:c2:73:3f:08:
c5:c6:f3:d7:49:04:a0:b3:80:0e:62:31:e6:49:b0:
48:df:a3:7d:71:48:b0:28:19:c6:b7:f9:ee:91:72:
f7:9a:f1:b3:65:0c:ed:a4:27:74:c0:9c:ca:13:e3:
fb:42:50:5b:6a:72:98:90:69:4f:03:6b:84:9d:42:
55:24:ef:74:59:a7:70:4c:2a:c8:c6:26:b4:a0:50:
97:73:92:0a:3d:f0:a1:b4:07:df:4b:c0:30:4a:0b:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:12:13:05:63:EF:8A:9C:E6:59:07:55:17:6F:95:79:E4:35:16:E6
X509v3 Authority Key Identifier:
keyid:A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:db:32:6c:65:14:f6:ff:3f:d3:16:96:fa:54:16:ee:62:b6:
f8:68:36:76:18:04:13:1a:4e:b1:f3:27:a3:0c:70:f9:d5:b9:
7c:cb:b6:d5:2b:a3:b3:7a:aa:04:74:e9:06:ed:49:a3:7e:2a:
9c:0e:ff:1d:f2:34:b0:64:b2:36:f0:68:e0:d7:2a:47:e5:f3:
c0:a1:9c:13:17:e9:27:69:c6:41:cd:75:4c:70:05:18:6b:b8:
47:42:df:8e:02:aa:32:d2:18:f4:ca:af:33:28:0e:72:92:81:
be:cc:16:fc:19:a0:29:bb:85:7c:fb:c2:d1:a8:cd:61:eb:57:
f4:ad:5a:1f:4a:4f:64:0a:49:bb:61:56:2c:95:2f:80:0d:11:
50:be:e0:ab:51:d5:6a:e3:18:48:79:46:29:48:ed:cd:37:21:
03:d0:4c:61:b9:ab:09:8a:ba:d9:c3:c2:d7:0c:86:c0:51:5b:
4c:97:8d:29:e1:a2:0c:fd:d6:e5:36:9f:d2:a3:78:c1:92:e9:
d4:37:24:0b:84:06:06:b0:fd:8d:ad:8e:2a:90:49:57:04:0b:
0a:9c:10:6b:e6:5c:8e:84:e9:20:8e:56:80:9f:93:6c:2e:f2:
cf:ad:68:fe:ff:6d:56:d8:73:7a:d7:1e:c2:65:bf:17:b3:df:
41:bc:f5:2a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeLh9baVhsR+FZh/8cKQYJXTKdWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUyNTFDMjdFMUFGMDlBRTJGMjg2MTgyNTA4MDdFQTRE
NTczNjk0QjAeFw0yNjExMTQxMTM0MTBaFw0yNjExMTUxNDQyMTBaMDMxMTAvBgNV
BAMTKDZFMTIxMzA1NjNFRjhBOUNFNjU5MDc1NTE3NkY5NTc5RTQzNTE2RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChlwtOwmvwImjutlFK91GLw4hq
AXafCpXipR3xITa3NdnXU48F129/kG309vBGL6mvn/7Ny84VYbEYoIzxPRSVM6L6
0RganYdt2n472bxApERHmEIFhC6dxOOExaT7oKLFodyqb5Tyc1mpjAl+jvi1ACtn
YewbbVXOjZfxd7AyaO68U/vyowimMCYTg3Qjhn2wKZQwFvMJXZ1x25lc0h3kwnM/
CMXG89dJBKCzgA5iMeZJsEjfo31xSLAoGca3+e6Rcvea8bNlDO2kJ3TAnMoT4/tC
UFtqcpiQaU8Da4SdQlUk73RZp3BMKsjGJrSgUJdzkgo98KG0B99LwDBKC3xHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbhITBWPvipzmWQdVF2+VeeQ1FuYwHwYDVR0j
BBgwFoAUpSUcJ+GvCa4vKGGCUIB+pNVzaUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzQ3ZjZjZjYtZGQyYi00ODIzLWIyNjQtZTJiZjRmMzBhYmZlLzAvQTUyNTFDMjdF
MUFGMDlBRTJGMjg2MTgyNTA4MDdFQTRENTczNjk0Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9BNTI1MUMyN0UxQUYwOUFFMkYyODYxODI1MDgwN0VBNEQ1NzM2
OTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy
NjQtZTJiZjRmMzBhYmZlLzAvQTUyNTFDMjdFMUFGMDlBRTJGMjg2MTgyNTA4MDdF
QTRENTczNjk0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACfbMmxlFPb/P9MWlvpUFu5itvhoNnYYBBMa
TrHzJ6MMcPnVuXzLttUro7N6qgR06QbtSaN+KpwO/x3yNLBksjbwaODXKkfl88Ch
nBMX6SdpxkHNdUxwBRhruEdC344CqjLSGPTKrzMoDnKSgb7MFvwZoCm7hXz7wtGo
zWHrV/StWh9KT2QKSbthViyVL4ANEVC+4KtR1WrjGEh5RilI7c03IQPQTGG5qwmK
utnDwtcMhsBRW0yXjSnhogz91uU2n9KjeMGS6dQ3JAuEBgaw/Y2tjiqQSVcECwqc
EGvmXI6E6SCOVoCfk2wu8s+taP7/bVbYc3rXHsJlvxez30G89So=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:32:47 2026 by rpki-client