
$ rpki-client -vvf rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft
File: A41E81A674D539D19E0045B0769140AE1C59B2A6.mft (raw, json)
Hash identifier: YYtIKwt8x1Fyi2Y8oByjQp6jR3tq49sysa6c4w+CFL8=
Subject key identifier: 34:CD:B0:0D:24:54:3A:E7:B5:5D:9F:BF:62:34:2A:10:5A:9F:DF:53
Authority key identifier: A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6
Certificate issuer: /CN=A41E81A674D539D19E0045B0769140AE1C59B2A6
Certificate serial: 4C1E342B4778254BE3BB2E4654DCD45864F79320
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 01:14:24 +0000
Manifest this update: Wed 17 Jun 2026 01:09:24 +0000
Manifest next update: Thu 18 Jun 2026 01:59:24 +0000
Files and hashes: 1: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: A+RPn25HxKi9IyMz0fxzOncy7UdZahFmQBMwYHaLTLU=)
2: A41E81A674D539D19E0045B0769140AE1C59B2A6.crl (hash: CipDnavrDA0DZCChnuQGqAdvxyYpecrvE5z7Fcr40vI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.crl
rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:1e:34:2b:47:78:25:4b:e3:bb:2e:46:54:dc:d4:58:64:f7:93:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A41E81A674D539D19E0045B0769140AE1C59B2A6
Validity
Not Before: Jun 17 01:09:24 2026 GMT
Not After : Jun 18 01:59:24 2026 GMT
Subject: CN=34CDB00D24543AE7B55D9FBF62342A105A9FDF53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:15:89:ea:87:84:a7:03:a4:40:e2:b3:f9:f3:
8d:9c:a8:0b:4a:c2:9a:d9:92:1e:ab:7f:31:e2:c9:
fd:03:57:12:e8:89:07:8c:4f:4b:7a:f1:c0:fd:62:
f2:f5:ef:7c:b4:57:ba:d5:84:fe:f4:27:86:f0:59:
ac:3a:98:e1:0f:78:a7:53:8e:93:d9:aa:f8:88:79:
ee:33:ad:f4:03:80:51:18:39:82:95:e8:28:71:fc:
8a:d0:e7:7c:a7:29:52:d0:d4:63:d3:b2:4f:17:3a:
6d:63:df:fc:a2:a3:a2:3f:39:16:19:f9:74:ef:1d:
0d:74:49:bf:7a:a7:86:5c:2f:e7:c1:46:2e:3c:c0:
31:e4:71:c9:0f:9c:35:ab:e1:bf:70:c9:85:98:8c:
45:0b:b5:f8:7b:b5:90:27:1f:b7:c3:5e:60:a2:1d:
87:75:05:ff:59:57:97:00:6d:c9:0b:42:02:ab:63:
b0:43:76:b8:79:6f:bd:a1:8a:b2:46:28:ac:30:80:
1a:a9:ca:49:af:7a:b2:bd:ee:92:4f:4f:fe:5c:e3:
8d:d4:14:8f:9b:2a:0e:1f:3c:83:67:26:b8:4f:b2:
82:46:68:23:77:40:6a:1f:9b:cb:25:d2:d1:d0:83:
52:f1:56:9e:30:fe:b4:db:a0:5a:3e:24:ab:84:1d:
e1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CD:B0:0D:24:54:3A:E7:B5:5D:9F:BF:62:34:2A:10:5A:9F:DF:53
X509v3 Authority Key Identifier:
keyid:A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d6:88:78:13:cd:fa:9b:2e:ce:6d:63:f5:7f:bc:2d:c2:81:
4e:2d:2a:ba:56:8c:08:13:6d:a2:1f:e4:a9:ea:e1:4d:40:7d:
e1:68:e5:50:4c:99:c5:3a:d4:67:46:48:a7:f3:63:fc:18:c3:
77:04:a1:da:17:16:5a:ea:08:15:e8:ea:bd:b3:ab:53:6d:a9:
4d:7a:ae:90:e9:f9:6c:76:a9:bf:10:34:5c:8c:ab:4c:98:8e:
e8:ef:52:fd:35:62:1f:62:09:8c:45:2f:37:f4:ef:92:2a:d1:
47:e3:f7:8e:72:c3:d0:80:10:31:3d:07:ec:e0:1f:9f:7f:48:
26:d6:f0:ef:1b:34:03:b7:f4:c3:ae:5f:66:c2:1a:a2:44:71:
1a:41:d1:4e:c6:70:d2:72:f7:77:7d:75:52:17:d4:8b:ad:27:
de:22:62:a2:0e:e8:20:b1:d8:e8:2f:68:95:55:b8:1b:64:c7:
0e:a2:1b:4b:bd:e2:a0:cb:17:14:ec:19:dd:02:f2:19:2a:63:
a2:3a:91:f0:12:2f:a7:30:2f:98:83:9f:60:5b:f7:72:15:ca:
c7:9f:b4:84:28:60:9b:54:54:27:7a:8d:8b:bc:ea:a8:0b:ec:
13:4d:23:28:a8:3c:02:89:c2:3d:a9:6f:d9:c2:91:61:d0:e7:
75:f8:6d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:31:49 2026 by rpki-client