
$ rpki-client -vvf rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft
File: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft (raw, json)
Hash identifier: r3+R6As5iwYAEOXYY5FAnjXCRD0DAP0o8ejMCVZMsrI=
Subject key identifier: D9:16:00:9B:BB:21:AF:9A:5E:CB:3A:7D:1D:E5:0D:D4:B1:CA:B9:E4
Authority key identifier: A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F
Certificate issuer: /CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F
Certificate serial: 6EC81578BB74EDA539773F6526D1BB2DEDFAF080
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 19:17:23 +0000
Manifest this update: Tue 16 Jun 2026 19:12:23 +0000
Manifest next update: Wed 17 Jun 2026 20:26:23 +0000
Files and hashes: 1: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: mTSHlFZAxZWWAKZzsiMuSqeFq/VKg23JR+BpuxRfCT8=)
2: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: Il2995+O34HRt5QUYak7wmOSE/xt1UwsadzXH7aEOYo=)
3: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: lknjz+xGrn74yDQTZoQhv/KjNKL2zVYWd4Swco59gWA=)
4: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl (hash: /N1PNqbFaDndTZmW6p+Oiy6ta8jD1Xgu+mLDUMWklZI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl
rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c8:15:78:bb:74:ed:a5:39:77:3f:65:26:d1:bb:2d:ed:fa:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F
Validity
Not Before: Jun 16 19:12:23 2026 GMT
Not After : Jun 17 20:26:23 2026 GMT
Subject: CN=D916009BBB21AF9A5ECB3A7D1DE50DD4B1CAB9E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a7:45:c2:d2:51:25:f8:e5:62:be:24:e5:7c:
91:c7:4c:5b:a8:72:a9:7e:95:40:a7:16:18:9b:68:
ab:33:c7:51:a1:fb:0d:0d:60:78:92:0b:b1:80:d9:
8d:91:bf:2d:3c:50:90:85:ec:4d:3a:0d:90:4a:f8:
0d:05:a4:b3:d8:8a:08:30:3b:9e:2e:d8:89:4b:2e:
9f:4e:b8:d4:6e:b2:61:52:aa:9d:36:d9:2a:96:22:
5c:62:fa:bd:74:1d:7b:7e:70:18:23:97:5f:5f:1d:
59:3d:a1:79:5e:49:4b:65:ac:d7:11:18:8c:0a:31:
a0:cf:6d:21:22:e6:ec:8a:20:4c:f0:21:c4:bb:bb:
57:2c:25:78:a6:b0:de:6a:b2:ea:9b:33:91:b5:59:
d9:11:8a:0f:f6:9f:e0:07:57:79:79:c1:6d:ee:ac:
dd:2f:f8:64:b2:1b:20:c4:88:20:40:92:f5:cc:a5:
9a:9b:db:dd:61:6e:86:f2:c6:f1:af:a8:eb:fa:6c:
19:61:96:bf:e5:b3:62:f0:c0:b4:a0:a3:a6:57:2a:
08:65:d2:9b:b0:5b:8e:fc:27:f6:a8:60:07:82:10:
60:18:6d:78:ca:95:c3:ec:35:d2:9c:98:16:0b:68:
d6:c9:08:c1:16:0b:c4:1a:da:3b:ff:d2:13:b8:82:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:16:00:9B:BB:21:AF:9A:5E:CB:3A:7D:1D:E5:0D:D4:B1:CA:B9:E4
X509v3 Authority Key Identifier:
keyid:A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8e:d9:28:36:a6:7d:5a:cf:eb:06:21:ec:79:df:d2:8c:b5:
5d:f8:82:42:dc:4b:76:0c:0d:6a:3a:24:af:cc:b3:b8:b8:95:
1f:e8:2f:0d:2b:8d:ce:57:e0:78:02:36:59:71:b6:fb:7a:70:
af:c4:26:88:9c:6d:1d:5d:1f:31:04:d8:6c:e7:70:73:cc:a0:
51:7f:a9:c7:19:97:9e:c9:a4:e8:33:12:d6:db:45:39:9d:e7:
4c:45:35:0b:c3:b5:73:d9:44:d5:13:69:eb:77:14:69:87:54:
1a:93:e5:11:79:e4:31:25:9c:48:ae:c3:f3:3c:34:51:7d:77:
0d:84:4b:fb:23:74:2e:22:ca:1c:b8:68:38:e3:8c:78:1d:8a:
48:dc:ba:09:db:bd:8c:ae:ec:d9:9f:df:90:e7:e3:48:7d:66:
2a:e5:ca:d4:d7:c9:7e:67:d9:16:9c:62:e7:16:f1:ae:f2:7e:
cc:4d:71:ba:2c:3f:7a:aa:e0:15:58:20:51:c8:b9:71:e8:00:
6c:a5:0c:48:12:32:c3:6d:aa:8b:17:16:95:d7:8f:66:a7:f3:
ca:45:b8:be:bd:23:91:51:9a:b5:72:78:29:73:83:ae:5e:10:
46:c3:ad:40:b9:6f:f4:b4:e6:a0:ff:f7:47:52:42:71:2f:ce:
0b:a3:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:46:50 2026 by rpki-client