
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft
File: A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft (raw, json)
Hash identifier: H8/XZhiywSYxejqNtcPHJFJ6cQALsorh1zb6tGE9ZyU=
Subject key identifier: 0C:00:76:A9:EB:9C:F5:4E:AC:0C:E1:72:82:FE:2B:F4:83:33:FA:E0
Authority key identifier: A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4
Certificate issuer: /CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4
Certificate serial: 48AF412867F0A3C47075E224B0D16F62DA51CB4E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:25:47 +0000
Manifest this update: Tue 12 May 2026 22:20:47 +0000
Manifest next update: Thu 14 May 2026 00:27:47 +0000
Files and hashes: 1: 3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (hash: Hhcr9VVOfd5FtvKI4zutV/Yegy8flj3mD3AHSU+kLcM=)
2: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (hash: EarQVvbcyhKmaxD6rqFZgUQY/Ww5omgDD2NzWO0knDY=)
3: A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl (hash: XA1y7a5VSn+iILGMywxkpuPNYFH4VohU2/XJXFvLQQw=)
4: 3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (hash: fD7AXzzRekNw/K0iCKi41nGKBP7FKJCCqtJkswohhe4=)
5: 323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (hash: NPRzpEohzPWTI4fs5HCPZgCAeOv/KJaZwx4NYYDYA/U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl
rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:af:41:28:67:f0:a3:c4:70:75:e2:24:b0:d1:6f:62:da:51:cb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4
Validity
Not Before: May 12 22:20:47 2026 GMT
Not After : May 14 00:27:47 2026 GMT
Subject: CN=0C0076A9EB9CF54EAC0CE17282FE2BF48333FAE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:af:d8:1c:0f:6f:14:57:11:21:85:04:8c:
28:8c:34:e2:b0:56:2f:76:1b:e4:25:80:b4:2b:8b:
88:ba:69:45:30:77:7f:9c:e7:ce:ab:f3:86:c3:05:
2a:53:51:c8:df:d0:1f:e9:53:8a:7c:d9:05:77:a0:
24:8f:78:86:55:83:7c:62:90:ae:f3:4d:fe:2d:57:
a6:b6:18:a1:a2:ec:e5:9c:07:4f:08:a0:6d:54:71:
92:14:e5:8e:f6:25:30:4c:17:e3:8e:ca:d2:6a:91:
f5:31:4c:ad:d1:6b:ab:09:c9:91:85:33:04:b5:95:
63:7f:44:ee:de:1b:e8:ee:30:d1:77:c2:71:c7:2a:
39:d6:24:96:43:1f:cf:b7:2d:30:77:8a:1e:4a:25:
9b:66:d2:b3:a4:bd:12:c9:6d:1b:84:1d:0e:db:e2:
dd:ed:ad:f3:07:1e:fa:c2:19:7e:81:e4:44:05:4e:
f3:d1:9f:14:74:d0:cf:68:b5:66:67:16:46:21:47:
16:be:29:87:d4:f9:68:2f:03:06:51:35:fb:32:b8:
3f:05:3f:48:40:0b:d9:f3:36:c1:55:62:52:fd:a8:
0d:c0:74:6b:ac:69:2b:84:e9:80:49:85:05:db:a9:
5d:fe:00:ca:84:b2:da:6d:70:af:0b:91:48:f0:d7:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:00:76:A9:EB:9C:F5:4E:AC:0C:E1:72:82:FE:2B:F4:83:33:FA:E0
X509v3 Authority Key Identifier:
keyid:A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:99:ee:e2:d6:92:15:21:bb:3a:6a:00:45:15:d9:1e:d7:51:
86:14:e5:5d:87:68:e6:26:b2:d7:53:eb:4a:53:03:37:f9:9f:
48:4c:78:75:93:30:d3:af:0f:20:7b:31:8d:56:51:df:e2:58:
75:67:15:85:db:19:92:45:fa:dc:41:ca:c7:05:2a:f6:17:36:
c1:8e:b1:94:7e:9b:11:e4:b9:ef:2a:48:7e:bf:fe:6c:f6:c1:
77:a1:23:d7:77:25:b6:49:81:73:e0:55:27:8c:5d:79:ef:02:
21:6b:76:83:91:37:03:54:ec:61:4a:14:f7:55:b9:d8:0c:d3:
89:39:97:0e:a0:f1:b3:1b:99:7d:ba:3e:91:35:2f:a9:15:97:
6c:80:12:60:12:f5:46:58:74:7a:8b:a4:88:c0:3a:a1:16:db:
60:e0:a0:00:76:db:35:c5:d5:61:5f:5d:f6:dc:44:4f:3f:ef:
92:a7:86:b1:02:94:5e:e5:36:94:39:ae:f7:86:4b:af:0c:67:
2b:75:24:c4:f3:0e:c5:f8:dc:5b:88:e1:df:22:61:4b:1d:01:
1a:8f:82:60:64:df:31:82:84:36:57:ef:f2:51:19:7f:3e:f7:
45:e3:67:60:c8:79:2c:8f:40:30:2a:e8:45:33:e1:44:65:11:
df:78:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:32 2026 by rpki-client