
$ rpki-client -vvf rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft
File: A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft (raw, json)
Hash identifier: AGuXkwV6vpISZiV1LNFreFAxqkIInvNb7lU8TBFgB2U=
Subject key identifier: 9A:63:B0:B1:67:D9:14:9C:C1:73:60:3D:0C:4A:1E:B2:00:42:42:52
Authority key identifier: A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E
Certificate issuer: /CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E
Certificate serial: 3702CD9F4095FB7779D976428DBD61CA72529922
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft
Manifest number: 3C
Signing time: Tue 16 Jun 2026 14:11:31 +0000
Manifest this update: Tue 16 Jun 2026 14:06:31 +0000
Manifest next update: Wed 17 Jun 2026 17:16:31 +0000
Files and hashes: 1: A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl (hash: AKe+uVKiaMH5IT89uPt1eRw8YVuTmQnrzWOm91A5qbE=)
2: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: LzRdfO8uQHGjjJx+IZG72L+49qDt2LuDV7Qzeoi9vMg=)
3: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: +X4DdSQ9xtq8kPseZiuCwH6E+1VNqzzRG0A2Dn7OrXc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl
rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:02:cd:9f:40:95:fb:77:79:d9:76:42:8d:bd:61:ca:72:52:99:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E
Validity
Not Before: Jun 16 14:06:31 2026 GMT
Not After : Jun 17 17:16:31 2026 GMT
Subject: CN=9A63B0B167D9149CC173603D0C4A1EB200424252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:ce:51:91:8e:8c:e8:96:94:a1:77:6d:e2:
0e:80:b2:14:30:95:5d:92:43:e1:a0:f3:2b:de:28:
c2:d1:cb:b2:e5:31:30:4e:8f:02:65:62:03:a1:91:
7d:9a:8b:83:ea:87:14:79:cb:86:4d:52:30:53:02:
4f:a3:dd:49:24:77:e0:e5:f3:1d:2e:b0:75:9c:f4:
f9:22:c5:9d:17:1a:27:59:58:05:e7:0f:2c:96:90:
06:23:38:8f:dd:8e:af:4e:32:36:43:fc:63:18:4f:
ed:cf:97:e2:fb:e6:7f:87:9f:4a:51:88:a7:4c:01:
26:99:db:39:3e:1e:3f:b3:28:18:83:af:9b:52:04:
c7:29:19:0d:a8:2a:92:4c:72:c1:79:c6:28:bc:e3:
68:7c:22:b2:38:3b:88:3a:87:f0:91:6b:06:15:71:
c4:c3:e9:c4:d7:a6:e8:f7:c1:10:e7:ee:d4:36:ce:
5b:c5:43:9f:9d:f1:aa:a7:5b:fb:47:f7:dd:44:b0:
5f:6b:cf:43:54:7d:d1:df:2e:96:4e:55:f0:51:61:
d4:06:d2:d3:20:6e:74:b6:27:5f:31:49:94:a1:57:
50:32:f2:5d:db:d8:29:69:91:7c:ce:6c:bf:53:a9:
d5:d1:a8:28:3a:87:4a:89:da:58:9c:84:68:2d:d4:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:63:B0:B1:67:D9:14:9C:C1:73:60:3D:0C:4A:1E:B2:00:42:42:52
X509v3 Authority Key Identifier:
keyid:A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:dd:c4:ac:d0:84:d8:19:fa:6f:42:5d:03:21:eb:8a:cb:d5:
b3:5b:6c:7e:b4:9f:04:c5:95:7d:f0:9a:b5:ad:82:75:e9:ca:
4b:1e:74:33:87:1c:da:34:29:e1:0f:66:33:73:05:21:12:43:
6a:4a:ca:a9:a4:38:cb:88:03:86:2b:a4:7a:d7:76:88:4a:d8:
f7:90:9b:d9:65:6c:2e:77:f7:98:e5:1b:85:c9:2c:00:79:44:
9b:d6:ab:03:b2:ef:84:c7:d1:b8:a3:ac:c3:b4:23:6c:ee:09:
4f:a7:3e:09:fc:24:cc:fd:c3:07:09:b8:25:e1:da:8c:aa:de:
22:5a:78:c5:59:f1:95:cc:9e:7b:52:6b:6f:b4:bd:74:3a:15:
9b:e8:15:41:2c:0b:c4:5b:41:5a:dc:2f:5d:fe:92:a6:00:59:
59:9a:27:74:6d:c7:97:c2:4d:85:87:a5:27:19:dd:66:ad:68:
f1:bd:19:57:89:f8:a7:06:e3:18:9d:25:a0:2e:bb:e9:0d:bc:
bf:c1:32:89:be:f1:79:4c:af:f3:d5:f7:08:be:fc:75:b5:28:
26:4c:13:92:25:79:b3:0e:56:4b:5a:f7:4f:67:1b:fb:7c:f3:
77:a5:6f:30:c7:b0:5e:f8:ed:5d:c3:2b:05:47:2d:d6:cf:7d:
c3:18:11:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:13:10 2026 by rpki-client