
$ rpki-client -vvf rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft
File: A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft (raw, json)
Hash identifier: zVo+PKkQEcue0+p9+jHZds+y2VQpFgzQRANaF1Evo+4=
Subject key identifier: B0:02:B9:E6:B4:B7:69:1E:15:07:AA:82:30:9E:20:D2:6A:3C:A8:D7
Authority key identifier: A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A
Certificate issuer: /CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A
Certificate serial: 7823B7F4AB4D282032E614107B8837E5DE680BA7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 19:12:21 +0000
Manifest this update: Tue 16 Jun 2026 19:07:21 +0000
Manifest next update: Wed 17 Jun 2026 20:33:21 +0000
Files and hashes: 1: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: eZlsFaLITxkPeJNSHzaVTJrd/LDOmMtodzgFU/hBW40=)
2: A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl (hash: JJfW8919Pr9S2d7hdxlvrTDZox7SKCBTTsr6RowaNKo=)
3: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: pKo3R747DDUIneHm99mAHqDIwYFklZR6NNCcsU54reo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl
rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:23:b7:f4:ab:4d:28:20:32:e6:14:10:7b:88:37:e5:de:68:0b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A
Validity
Not Before: Jun 16 19:07:21 2026 GMT
Not After : Jun 17 20:33:21 2026 GMT
Subject: CN=B002B9E6B4B7691E1507AA82309E20D26A3CA8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:52:fd:07:01:32:8b:ea:19:68:fc:21:57:
18:b5:37:22:1d:85:a7:d7:15:f6:17:88:8f:f3:40:
71:4e:9f:2d:c4:4f:c8:35:09:49:15:65:ef:ca:98:
e2:45:69:46:ad:75:d6:d1:76:33:64:3c:a0:b6:8a:
ab:77:b9:fe:7e:6d:bf:f8:03:2f:40:d0:42:83:05:
4b:31:e0:3d:c2:26:66:24:63:ed:1b:b0:bb:8e:ff:
b2:d6:d6:e1:8b:dd:c2:3b:bb:1c:9d:3b:67:9f:ce:
ff:b0:d0:d0:b2:ff:e1:d4:3b:66:9b:d3:ae:17:80:
fd:d6:95:70:ed:02:b8:16:7a:95:98:c3:1d:ba:bd:
53:1e:1b:dc:7a:50:9c:b2:52:53:db:bf:05:67:a8:
1e:9b:fb:53:21:c8:e0:c5:67:ee:3a:1e:02:60:63:
2d:68:ab:d4:58:64:7f:d3:cf:4e:6f:eb:26:75:61:
dc:91:fd:83:66:f4:e4:43:c8:ee:70:bb:88:50:27:
17:87:9f:e1:e6:fc:00:73:4e:c3:f6:2b:04:23:9e:
c1:eb:1a:b6:5b:d3:50:d8:06:d9:c8:2f:d8:7b:b3:
1b:13:ee:35:e3:59:e6:eb:af:78:f1:60:07:48:9f:
b6:d5:02:2b:00:d2:ac:11:00:87:bd:17:4f:8c:76:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:02:B9:E6:B4:B7:69:1E:15:07:AA:82:30:9E:20:D2:6A:3C:A8:D7
X509v3 Authority Key Identifier:
keyid:A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:ca:ea:88:8c:00:69:ae:81:73:b4:73:53:b6:0a:1b:1d:
3e:d6:65:04:62:25:e9:79:8d:9a:05:bd:3b:fd:4f:1a:ad:38:
0e:12:1f:41:a3:d0:51:ee:4e:7d:93:db:92:60:32:5a:46:bc:
8a:2c:2e:0a:a9:db:61:4d:a5:a8:5a:9c:40:94:a5:03:50:96:
f5:ef:b0:ca:7a:02:70:64:48:96:ec:b4:7f:d7:ae:17:4a:55:
52:b8:e8:f5:fd:21:0b:96:7e:2d:14:c3:71:cc:95:ea:b1:a5:
69:21:f8:ba:79:05:7b:d9:b7:85:64:6c:12:21:1c:cb:16:bc:
59:16:52:0a:31:d1:28:3a:e7:3e:d3:89:63:d8:d3:08:63:c1:
09:79:ab:19:ef:48:fa:b0:f6:12:a7:0d:f4:cd:c9:db:d5:7b:
22:f3:95:12:43:b9:0b:48:0b:8d:66:44:08:56:45:3c:e3:15:
07:12:e2:fa:5d:3b:aa:ef:e1:ce:40:78:ab:08:e1:27:d4:b9:
92:a4:7e:da:33:ec:46:93:3d:1e:0a:8b:62:9d:0d:04:8b:aa:
69:d0:ab:fb:76:d9:60:57:05:27:4e:06:22:02:0e:65:27:ea:
9e:5b:13:2f:3e:ec:3c:53:83:d6:d4:75:20:aa:e9:7e:db:98:
ea:94:3b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:46 2026 by rpki-client