
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
File: A241AC704BB26D3BB01102643E819AF4873EBFF4.mft (raw, json)
Hash identifier: InAiOzr9aqoC9cxOL4HXHAGekXvwDVTvUTGXFUjbKIY=
Subject key identifier: 56:C0:FB:51:A5:9D:FE:7B:02:5E:A7:04:43:B5:21:BB:06:5C:EA:FE
Authority key identifier: A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4
Certificate issuer: /CN=A241AC704BB26D3BB01102643E819AF4873EBFF4
Certificate serial: 6F085BC94F2024EF07540A082F047351B4031C29
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
Manifest number: DA
Signing time: Tue 13 Oct 2026 14:39:08 +0000
Manifest this update: Tue 13 Oct 2026 14:34:08 +0000
Manifest next update: Wed 14 Oct 2026 14:56:08 +0000
Files and hashes: 1: A241AC704BB26D3BB01102643E819AF4873EBFF4.crl (hash: htJnUwPzs9eeOSHFLoAmKIvujDVwxLWPqpSrI44Gw/0=)
2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: A0dq7gCpUZizRlTZxmyyhDpzPzM9JT/yiUa6QfFC4Os=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl
rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 14:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:08:5b:c9:4f:20:24:ef:07:54:0a:08:2f:04:73:51:b4:03:1c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A241AC704BB26D3BB01102643E819AF4873EBFF4
Validity
Not Before: Oct 13 14:34:08 2026 GMT
Not After : Oct 14 14:56:08 2026 GMT
Subject: CN=56C0FB51A59DFE7B025EA70443B521BB065CEAFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:69:01:cc:98:0f:ba:30:88:8b:6f:3f:c4:
48:be:73:ce:30:0c:1b:81:a2:3a:83:9e:c2:90:64:
e3:cd:85:2d:0f:70:ac:e8:01:b3:24:c9:7a:47:2c:
cf:b3:8c:07:82:f2:76:f5:89:87:44:b5:39:fb:f3:
cd:9d:6a:45:94:8c:67:77:6d:ad:5d:9a:f4:4d:b9:
bb:54:f5:c3:3c:e0:23:74:7e:f8:7f:31:27:e8:21:
70:bd:aa:42:22:f4:7a:e8:34:c5:35:69:d9:23:0d:
68:e1:5a:6e:c8:dc:67:f2:1e:43:d3:29:b1:ce:f3:
e5:71:1a:f4:42:fe:15:31:39:96:03:cd:5c:bf:b4:
a7:bc:be:01:d1:5e:ef:99:c1:b3:d7:09:c2:3a:57:
fc:7d:45:31:fc:7d:cd:4c:fe:d3:5f:0b:e8:cc:38:
dd:6e:bc:b3:2e:aa:58:10:23:61:0b:c7:11:48:14:
33:2b:54:b4:26:64:bb:c8:53:d3:d3:2f:12:59:1a:
2d:a3:0d:53:1a:b9:12:ae:12:02:3d:32:08:7d:92:
2e:14:01:17:eb:4d:26:38:56:ad:0f:ad:18:4a:71:
95:4e:bd:99:4d:41:47:fa:d9:75:d6:ef:82:80:60:
a7:a7:60:d3:85:66:e7:8c:20:86:27:3a:02:6a:dc:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C0:FB:51:A5:9D:FE:7B:02:5E:A7:04:43:B5:21:BB:06:5C:EA:FE
X509v3 Authority Key Identifier:
keyid:A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:53:49:61:38:bd:14:67:dc:2d:c4:45:19:53:cd:e2:90:1f:
52:10:b2:d1:ef:c5:33:a4:4d:51:68:d6:ae:a1:22:ba:52:40:
eb:cf:5d:59:e1:88:e4:ac:21:24:ab:f4:cb:38:d8:db:05:9a:
24:22:df:2e:33:fa:8f:c2:5d:17:01:f7:8d:6e:8b:49:d6:76:
a3:36:c1:33:7b:b7:74:f6:24:8f:5f:95:af:b1:4f:54:9a:31:
05:0a:a1:a5:c2:9f:2b:2d:04:ed:34:a1:66:8f:15:f4:fc:3b:
aa:21:3c:6c:c7:22:6d:95:57:9a:28:3b:e1:bc:86:78:cd:10:
d4:a7:3e:73:59:be:04:a6:9d:81:21:f5:40:d3:38:cb:19:bb:
a0:da:bc:29:b9:b4:eb:1e:91:0c:52:89:96:70:26:2f:e9:a2:
a0:0f:b4:79:83:b7:56:47:79:c5:80:c4:43:ce:2e:c7:2f:a3:
fb:81:c9:3e:bf:e9:1e:00:e0:0e:a0:77:55:35:97:6e:fe:1e:
5c:06:6a:4b:d2:d3:39:a2:74:dc:84:7f:26:d4:00:be:6a:08:
e3:96:a2:3c:11:2f:ec:1b:20:06:03:20:f2:87:2f:62:9c:73:
7f:3f:39:10:e9:54:07:61:e2:b3:59:1d:16:5a:b5:66:1c:76:
d4:fe:35:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:18:53 2026 by rpki-client