
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft
File: A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft (raw, json)
Hash identifier: rEpGQRIetenwG/eIYMTXEuAP1fY/TJKFENslp8l9CuQ=
Subject key identifier: 27:B5:C6:27:CE:39:66:C6:87:D4:F0:6C:03:A1:7C:81:60:0E:CD:76
Authority key identifier: A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A
Certificate issuer: /CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A
Certificate serial: 51940CE45002CE93652F41A1213DD680582798C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 11:51:12 +0000
Manifest this update: Tue 22 Sep 2026 11:46:12 +0000
Manifest next update: Wed 23 Sep 2026 15:21:12 +0000
Files and hashes: 1: A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl (hash: Go9hPSnKLnYn5DSB33418zhQBKgXi89iwMOUzVw88LE=)
2: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: eZlsFaLITxkPeJNSHzaVTJrd/LDOmMtodzgFU/hBW40=)
3: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: pKo3R747DDUIneHm99mAHqDIwYFklZR6NNCcsU54reo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl
rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:94:0c:e4:50:02:ce:93:65:2f:41:a1:21:3d:d6:80:58:27:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A
Validity
Not Before: Sep 22 11:46:12 2026 GMT
Not After : Sep 23 15:21:12 2026 GMT
Subject: CN=27B5C627CE3966C687D4F06C03A17C81600ECD76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:0d:e7:63:0b:23:93:6f:8a:31:62:f8:d0:
b8:33:69:87:69:96:5c:80:56:3d:fc:5f:bc:62:f1:
ac:6e:d2:ed:58:05:b8:7e:d7:a6:b5:b1:41:52:ff:
f3:8e:a7:52:37:eb:69:77:92:55:28:8d:81:57:0a:
e8:be:06:6d:fc:64:ee:6a:d0:f0:0d:31:23:eb:3f:
98:fc:91:2d:82:c9:0c:e2:36:00:6e:8c:bc:ec:5e:
29:43:77:c7:ef:e8:7c:b5:84:90:12:fe:38:3c:7c:
56:8a:aa:30:9b:03:9f:c4:e6:d9:7c:e2:9d:8b:2f:
f8:b4:9c:70:c6:00:42:cb:ab:fc:21:3a:ea:19:84:
1d:2b:f7:84:0f:c9:57:6c:f7:e0:2c:07:ee:d2:69:
0f:4e:14:41:6b:ef:7a:f9:f2:2e:fa:1c:78:97:e9:
41:71:6d:94:36:a6:22:ef:8f:91:95:b4:04:1e:dc:
56:0a:41:bf:67:a4:0b:fd:67:18:13:e7:88:c6:57:
c4:d3:30:73:2e:4f:d2:b5:df:8a:15:2d:22:74:75:
5e:fd:25:ad:86:1e:2f:09:75:3b:82:d3:20:88:62:
ed:3a:65:9c:6c:0f:33:ba:38:55:d3:64:fa:70:1f:
b8:37:0f:04:89:34:ce:b4:eb:d8:be:ce:bd:8c:1f:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B5:C6:27:CE:39:66:C6:87:D4:F0:6C:03:A1:7C:81:60:0E:CD:76
X509v3 Authority Key Identifier:
keyid:A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:95:07:a5:ed:f7:98:b3:77:2d:ee:13:69:4c:0a:e5:6f:82:
1b:41:96:12:77:7a:55:5a:1f:6d:4c:68:37:77:9e:3b:49:52:
5d:0b:81:a4:54:b9:40:34:49:5a:41:5a:e0:34:83:ff:07:95:
0a:5b:5d:5f:bd:88:eb:18:ad:9d:c6:aa:dd:f1:de:43:d1:b9:
29:83:5a:d7:6a:78:97:73:3d:93:7b:44:3d:04:07:3f:2c:93:
3f:c3:4d:33:ad:d4:97:8b:a6:97:49:20:ea:93:9d:8f:a5:5c:
7f:64:c3:a0:a8:96:28:1c:8b:a6:ca:c6:da:99:00:87:fc:a4:
e8:dd:a7:fb:02:91:17:bd:5c:88:14:0b:76:09:f4:a7:54:a8:
55:3a:10:ca:d4:89:80:53:d1:df:59:74:89:d2:8b:af:1d:65:
95:8c:90:06:aa:e1:37:a0:fe:9a:e5:8e:8c:ea:a5:f4:11:c8:
bc:85:d7:b2:12:91:ce:dd:dc:6c:39:40:99:87:f5:ad:86:24:
2a:cf:06:15:6e:33:78:b5:9f:6d:b2:9e:e8:47:98:74:d2:03:
7e:aa:bb:f6:ce:f5:f7:98:bd:42:9e:3e:1d:4b:ee:87:e6:89:
71:ac:0c:71:8a:44:20:40:c5:72:5b:0f:38:be:09:a6:e1:d5:
47:73:a7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:14:14 2026 by rpki-client