
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft
File: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft (raw, json)
Hash identifier: /Ayfjl7TY01GhJzdokh/AmB5SHEa5TZ4j/K/chMYJnY=
Subject key identifier: 5D:75:06:7B:1C:D4:EA:B3:8D:AB:72:8E:7F:29:53:96:41:B7:FD:13
Authority key identifier: A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE
Certificate issuer: /CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE
Certificate serial: 385F486029D68D427AD0EE12D62ED6B039F30F8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 22:26:20 +0000
Manifest this update: Tue 16 Jun 2026 22:21:20 +0000
Manifest next update: Thu 18 Jun 2026 00:28:20 +0000
Files and hashes: 1: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl (hash: yiEk0GBwf2Xhe3spyNZQTl6KcZd3gFTdZnc0fibX4qE=)
2: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: ICLSFvgSRRkmlVey9F0aZzpRAm3MpVToF57RNv3826o=)
3: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: XjEh4h/m9O4zav0oJbGUt3KwmUOKS7DwqIAy5aQ35aY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl
rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:5f:48:60:29:d6:8d:42:7a:d0:ee:12:d6:2e:d6:b0:39:f3:0f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE
Validity
Not Before: Jun 16 22:21:20 2026 GMT
Not After : Jun 18 00:28:20 2026 GMT
Subject: CN=5D75067B1CD4EAB38DAB728E7F29539641B7FD13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:7e:e2:d8:7e:e7:5f:67:a3:f4:87:c9:6c:
97:f2:f6:ac:4c:38:d3:b2:f3:2a:b0:b8:7b:5e:01:
4a:18:7b:9f:21:5d:58:24:42:75:2c:64:e8:fd:8e:
fc:86:73:28:b2:2d:79:fe:71:91:fe:cf:0b:e5:a2:
a0:45:d3:85:74:37:5b:5d:e8:dc:fc:b6:8d:23:fa:
c2:63:04:61:2f:cf:dc:37:59:25:a6:d2:e5:1f:1d:
76:1b:ec:17:23:2e:0d:9a:e0:60:85:26:7f:c5:ea:
1f:10:f5:b6:09:a2:77:ed:f2:29:4d:5e:bc:d8:3c:
96:64:3e:3c:87:dc:20:18:6c:36:bd:65:68:ba:36:
32:cf:5f:43:67:1d:b5:9d:df:39:9d:0a:23:19:76:
2c:68:6f:c4:12:30:b3:5e:6e:10:f3:75:73:64:07:
66:52:5b:6a:f7:ff:7e:71:b9:18:a5:23:86:81:d0:
d0:ca:0d:88:90:28:54:65:d2:a2:80:69:18:c0:4e:
3f:f5:20:b8:54:90:86:06:ef:c8:48:f0:d0:aa:8d:
9d:42:c3:fe:0e:dc:10:a9:80:3d:b2:ad:b0:c1:e8:
6f:ee:dc:63:45:9b:15:c9:0e:a5:62:58:b3:58:31:
64:d6:7e:01:85:db:f1:69:c7:4b:2f:3a:16:96:54:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:75:06:7B:1C:D4:EA:B3:8D:AB:72:8E:7F:29:53:96:41:B7:FD:13
X509v3 Authority Key Identifier:
keyid:A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:02:06:4a:bb:2c:03:bc:b1:48:d9:5d:8f:8e:19:55:d2:41:
7d:c3:59:63:b0:ed:ac:ae:77:f8:74:3a:b4:f7:48:b7:d4:34:
58:8a:60:68:e7:8e:57:06:15:fd:76:2b:fb:96:c4:55:44:66:
48:89:7f:c9:5b:3c:f6:53:09:31:1e:c5:50:11:1c:8d:fa:25:
73:8d:79:43:30:51:23:78:e3:85:2e:fd:4f:9f:3b:37:57:f2:
e5:42:bf:64:2d:c2:20:2c:a9:01:3a:a3:fd:8e:4a:6d:8c:bb:
61:43:28:cb:e9:6d:b2:f3:c8:d1:0b:65:c9:37:20:e1:ec:e4:
20:52:19:78:88:ce:b5:3a:b8:87:9d:85:72:da:86:1c:c6:c9:
39:18:b3:5e:45:fc:87:0b:48:34:11:9c:ad:69:43:1a:ae:2d:
cf:e3:a5:e4:9b:9c:f1:c5:b3:91:98:d1:d1:df:06:5b:8a:d9:
3d:a1:46:0c:a3:e9:28:a9:cc:03:64:6a:c5:ab:6c:ac:f7:aa:
ea:6d:e8:21:9f:ab:81:37:5e:75:51:96:b4:5a:f6:f8:57:f2:
f4:64:24:53:39:47:91:1a:4a:ec:26:fc:e3:2c:43:45:eb:79:
68:0e:19:a4:5c:1d:4e:d7:ed:13:2b:ee:ef:d9:34:7b:f6:3c:
b6:ed:73:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:43:26 2026 by rpki-client