
$ rpki-client -vvf rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft
File: A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft (raw, json)
Hash identifier: ELvW1zuH3QeS1++W8ib+MFR+VYx88aS5nwgZBmPQK5Y=
Subject key identifier: E9:39:96:7A:FA:2D:11:78:00:8A:60:E7:02:D6:0A:39:C1:3B:64:D3
Authority key identifier: A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C
Certificate issuer: /CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C
Certificate serial: 49A81B7FE07942CCA9F2EA4BA18CE38FFD4E9106
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 22:41:38 +0000
Manifest this update: Tue 16 Jun 2026 22:36:38 +0000
Manifest next update: Wed 17 Jun 2026 23:56:38 +0000
Files and hashes: 1: A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl (hash: z4Umw5yJCgAWNF8rMK7J4eqgHRysTmRatuD5N+ZErjo=)
2: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: 9oG14yFX0JqA/A4Gb5KSL8SJiMaQk5xxtaHwWhta8TI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl
rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 23:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a8:1b:7f:e0:79:42:cc:a9:f2:ea:4b:a1:8c:e3:8f:fd:4e:91:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C
Validity
Not Before: Jun 16 22:36:38 2026 GMT
Not After : Jun 17 23:56:38 2026 GMT
Subject: CN=E939967AFA2D1178008A60E702D60A39C13B64D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:80:c0:98:b7:c4:1a:1c:8e:f0:37:d3:a9:
8b:8f:a4:8a:14:b6:a7:0b:31:cf:01:bd:6b:31:e4:
86:29:3f:16:ce:7d:2e:75:23:f6:0f:69:f1:b8:78:
92:1a:f8:2b:21:ce:fe:11:04:f4:2b:b5:1f:a4:1d:
54:16:df:6d:46:19:b9:97:f7:1f:d2:5d:7d:38:3f:
ce:88:0f:85:12:57:9f:32:29:ea:a3:54:e1:58:a5:
73:01:44:3d:50:ce:10:cc:07:7a:c4:f2:53:e6:29:
6b:9c:5b:ca:60:2a:9f:f2:b4:1a:d1:9a:97:03:61:
87:93:86:75:e3:87:e9:22:12:fd:0a:0f:1e:81:22:
66:32:4b:dc:c9:67:bd:74:9d:0d:93:72:9b:2a:1b:
44:17:69:a3:d9:52:8d:79:b6:aa:a6:45:6c:2a:b4:
bd:cb:6a:04:b6:b1:74:8e:b1:05:c0:e5:33:b7:15:
61:70:66:d5:e5:40:95:2f:40:c4:22:b5:d5:e5:8a:
82:7a:56:62:66:5c:bf:f8:38:c5:e9:e8:56:16:de:
c7:0d:a8:f1:9c:52:9a:b1:89:ad:6d:76:3e:b7:c5:
a4:22:69:c9:80:50:4d:33:5b:cf:28:2b:47:1f:07:
70:73:b9:2c:9e:4f:6a:9a:df:43:13:57:3b:a4:fa:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:39:96:7A:FA:2D:11:78:00:8A:60:E7:02:D6:0A:39:C1:3B:64:D3
X509v3 Authority Key Identifier:
keyid:A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:65:9e:5d:62:9f:ca:ae:0a:81:7b:ba:fb:ea:21:35:a3:a6:
87:e3:1b:f0:de:ab:76:5c:cc:a8:15:6f:46:03:12:bd:fe:ee:
32:7e:1a:bf:90:cb:4d:4b:2c:89:29:79:39:af:74:72:5e:61:
2f:7d:00:90:b6:21:f3:a5:f6:be:27:4e:4a:2a:1e:1e:51:8d:
d3:e4:7c:77:a1:e9:bd:a9:cc:f0:4e:5f:33:fe:17:d3:50:3f:
be:49:a6:b5:fd:03:11:ef:5a:42:4c:60:76:b3:3a:2f:57:84:
7c:b3:25:28:cd:87:65:fd:31:c2:6d:9f:48:85:ae:92:80:d1:
16:68:77:2b:17:ea:bf:db:aa:b2:ca:ba:47:7b:fb:f3:6b:f8:
72:2a:eb:87:5b:62:18:27:9f:0d:ab:00:e9:49:74:1d:70:82:
87:1c:6c:c0:14:3b:8b:8f:aa:b0:02:54:d5:43:c4:e1:7b:e6:
f9:a8:16:e2:29:6d:09:c1:21:bd:6d:1b:6f:7b:50:7a:d0:98:
a3:d3:d8:82:96:c8:21:4b:b9:d7:a2:4d:a7:ce:12:ec:e4:86:
0c:b8:a9:83:b7:6f:e5:e1:92:a5:1a:c2:b0:81:7e:27:52:2b:
90:d7:5c:19:d5:fc:92:dc:0c:d9:f7:81:a9:30:d8:04:b1:b9:
a3:03:8b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:20 2026 by rpki-client