
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
File: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft (raw, json)
Hash identifier: 2POJp5jUUh2/ROajuiNlRjcwtFH3SrpyxgtiDzGSCLk=
Subject key identifier: 41:F3:4B:66:A3:73:48:F7:0F:A2:33:5C:6C:78:D8:0D:B5:7F:0A:99
Authority key identifier: A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB
Certificate issuer: /CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB
Certificate serial: 0A93059DFF548BD1BE1B80A686BE8F67E95305D9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 10:06:16 +0000
Manifest this update: Tue 12 May 2026 10:01:16 +0000
Manifest next update: Wed 13 May 2026 13:50:16 +0000
Files and hashes: 1: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl (hash: HrQbtYmVBVhStZUntwfuKzjtx3nZm5l7pYE/44RrPDw=)
2: 3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa (hash: KJ4tcOWA2SH5n/Mp2J21qXYJWXIviat2U7Oo6EVnrbg=)
3: 3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (hash: inh5OwQ0YrBgY5xCxaOxxgj16EXDsFBhdopHtNq3Eyc=)
4: 3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa (hash: 53bRIBjSwWo7fUHZf8q8wJM22KHC6YENy9XlgqItFdw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl
rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:93:05:9d:ff:54:8b:d1:be:1b:80:a6:86:be:8f:67:e9:53:05:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB
Validity
Not Before: May 12 10:01:16 2026 GMT
Not After : May 13 13:50:16 2026 GMT
Subject: CN=41F34B66A37348F70FA2335C6C78D80DB57F0A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:67:e8:53:86:db:91:05:9f:a2:38:61:db:
82:40:49:36:a9:68:71:15:98:fb:13:da:48:93:90:
aa:16:ec:f4:d6:36:01:2f:ce:1a:f6:d8:3a:f8:7c:
bd:00:ec:d6:b5:c7:e3:01:eb:5d:bb:5d:ca:b8:a4:
99:61:80:8e:ae:2d:f8:e8:2d:a5:01:da:6e:99:d4:
69:54:b0:2f:a8:85:2c:3d:68:db:a0:82:e2:2c:b7:
c2:e5:cc:d6:74:d0:b7:84:ac:db:ec:88:62:67:13:
30:fb:14:1a:ff:c0:0e:4b:71:6f:75:fd:55:05:f5:
07:fc:4a:89:dd:9f:07:b3:f2:fe:dc:88:8d:3e:69:
18:7b:aa:9a:f7:5b:24:1e:20:c9:9d:14:e2:02:55:
af:46:45:70:1e:1a:25:e9:0a:83:07:60:c1:85:e8:
8f:3b:51:08:fa:ce:48:21:a1:5f:31:77:d1:4f:86:
4b:2c:0c:2f:24:ff:b2:df:5f:05:f6:ad:56:5f:75:
be:19:f6:ec:9c:96:46:97:20:2f:f5:19:0f:2d:78:
db:ac:ef:3c:7b:fa:e6:5e:80:8e:07:62:83:eb:e5:
27:8d:7f:39:60:dc:40:13:2c:96:14:db:7f:b9:ae:
06:cc:d3:93:ee:8b:8b:6d:c6:75:77:77:e0:0f:21:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F3:4B:66:A3:73:48:F7:0F:A2:33:5C:6C:78:D8:0D:B5:7F:0A:99
X509v3 Authority Key Identifier:
keyid:A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:06:9c:1c:2d:c8:0c:f2:28:4f:8e:a6:61:0b:ae:3f:aa:f1:
b7:29:b2:7a:4d:82:d0:c0:59:a1:3b:7c:df:21:54:7e:87:46:
cd:90:1b:74:b9:ee:75:3a:d9:32:ed:1f:4e:b5:dd:39:2e:f8:
ae:0e:f7:e1:e2:9b:b7:c7:d9:78:dc:d4:cd:4e:27:26:55:7f:
25:c4:ae:02:38:1f:cf:f7:40:29:15:d4:4d:fa:8f:2e:1d:3b:
fa:ff:69:a6:3a:c7:c0:3f:35:b2:5d:24:90:2e:c7:35:7f:2e:
cd:46:8a:ec:21:4c:97:b4:47:92:e5:29:12:67:3d:65:64:7f:
d7:a5:02:2c:47:ed:d1:3e:b1:88:5b:0e:42:25:35:f3:56:55:
c0:92:68:53:32:a5:5f:30:62:05:e8:05:99:07:ec:51:8f:7e:
e5:07:2c:3d:45:f0:af:ff:42:2c:70:1f:4e:33:5d:6e:eb:30:
ae:3b:24:e7:5b:2d:59:a1:27:f8:11:43:97:5d:c8:b8:26:06:
55:f8:9e:88:cb:f3:b2:91:15:15:f5:e2:66:ab:82:b5:77:64:
6c:5a:b9:e5:82:83:fe:aa:a6:a4:f3:9c:1b:48:35:2e:36:74:
76:a0:23:6d:be:48:36:8d:bd:62:9b:46:92:e1:a6:09:62:3a:
87:f6:7d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:42 2026 by rpki-client