
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
File: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft (raw, json)
Hash identifier: R+hRk0IjLdARfGxt34NWksCtG+fRM3updpvpPfQAZ5o=
Subject key identifier: 09:D4:28:B8:A2:72:72:A4:08:FC:13:99:C4:72:D3:A4:29:97:00:6E
Authority key identifier: A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB
Certificate issuer: /CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB
Certificate serial: 59EAC09603C0ADC5A31E1004C80EA537312EC5B7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 16:41:37 +0000
Manifest this update: Wed 23 Sep 2026 16:36:37 +0000
Manifest next update: Thu 24 Sep 2026 17:57:37 +0000
Files and hashes: 1: 3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa (hash: KJ4tcOWA2SH5n/Mp2J21qXYJWXIviat2U7Oo6EVnrbg=)
2: 3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (hash: inh5OwQ0YrBgY5xCxaOxxgj16EXDsFBhdopHtNq3Eyc=)
3: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl (hash: wBHw3HqRXfd5jAwZX3fP7p+R4re3g1UZo8Cuh94Gs/g=)
4: 3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa (hash: 53bRIBjSwWo7fUHZf8q8wJM22KHC6YENy9XlgqItFdw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl
rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 17:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ea:c0:96:03:c0:ad:c5:a3:1e:10:04:c8:0e:a5:37:31:2e:c5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB
Validity
Not Before: Sep 23 16:36:37 2026 GMT
Not After : Sep 24 17:57:37 2026 GMT
Subject: CN=09D428B8A27272A408FC1399C472D3A42997006E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:44:67:72:e7:c3:fe:fa:f3:c4:20:46:bf:
4d:44:38:fe:f7:51:20:c6:07:bf:8e:0c:e8:0f:1e:
be:ec:e1:bf:db:14:30:e9:51:e6:e9:a7:69:11:3e:
76:22:8d:4c:9a:16:78:63:9d:84:d7:3c:76:73:59:
32:2c:b8:d5:c0:9b:75:7c:10:cc:88:ca:9f:b1:2b:
e8:ae:14:c3:79:8d:5f:61:06:20:85:bd:0d:98:d3:
c2:84:c7:94:93:db:49:0a:d0:e1:44:e0:e0:59:b3:
0b:49:c9:9f:7d:01:d1:e1:80:e1:5a:a6:c0:38:a4:
3d:1c:6b:68:8e:de:51:6c:22:52:9b:31:2f:f8:ec:
46:0d:f4:28:8a:fd:5a:98:85:15:f2:fa:8f:91:41:
ce:3f:5e:42:69:3f:f6:df:2b:d0:a1:02:c1:2a:cd:
73:34:4a:b7:39:16:e4:c3:d1:78:e5:9f:b3:06:a9:
34:0b:70:2c:b3:a6:e9:50:29:43:b8:bf:67:9c:8e:
34:05:bd:f6:91:88:0b:11:54:a5:38:15:a7:cc:df:
e2:56:ab:ab:82:8a:56:9a:4c:cb:87:4a:32:26:30:
a2:20:c2:3e:72:ee:db:2a:c7:31:3b:1e:78:ac:d2:
b0:c5:92:df:34:55:57:21:c0:e0:6d:42:27:cc:fb:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D4:28:B8:A2:72:72:A4:08:FC:13:99:C4:72:D3:A4:29:97:00:6E
X509v3 Authority Key Identifier:
keyid:A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1a:15:fb:6a:e8:08:05:62:6b:29:7f:af:6a:08:32:0e:2b:
e1:e5:c9:a9:91:5d:4e:ec:86:75:03:36:8d:58:37:83:04:fb:
fd:30:c7:84:1d:34:35:67:ae:1f:f0:50:cd:dd:88:43:79:50:
f2:49:a8:9c:cb:9b:b3:82:be:0d:e8:91:57:13:9c:ce:6f:b6:
ff:f0:3d:5b:b7:2b:55:7d:9b:23:92:2e:0c:e3:38:f6:ff:9d:
c0:e7:5c:57:c1:94:d7:41:1d:b2:9b:43:b9:ec:91:3e:fc:da:
5a:39:cd:a8:a5:93:51:f0:ad:bf:f4:0e:43:ba:fa:9d:55:7c:
fe:5e:c1:2e:84:91:fd:dc:bb:73:e2:89:10:54:74:cd:d0:f3:
49:5d:19:25:df:b9:e5:6f:08:94:18:8f:01:47:60:af:3e:0a:
aa:7c:41:ae:b5:e6:fa:c2:a2:63:ee:66:7d:29:93:95:16:16:
25:bc:5c:9c:bd:8f:2a:4f:a6:9c:95:75:76:36:44:76:95:39:
5b:84:77:41:4a:7a:2f:43:0e:fa:a0:10:69:33:36:db:14:ec:
7c:26:80:f5:92:71:50:3b:8b:e8:f5:90:44:ad:de:70:47:f4:
7a:2c:00:06:cc:72:59:e4:40:15:7d:9f:3d:6e:65:44:3b:d3:
5f:80:7d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:27:18 2026 by rpki-client