
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
File: A241AC704BB26D3BB01102643E819AF4873EBFF4.mft (raw, json)
Hash identifier: vCf3H4ujVvxjKs6YeOk+Ba11VEZQduaXt6knDAoQYX0=
Subject key identifier: F0:B7:45:1F:9B:C3:D1:DC:1F:97:82:99:BA:03:8A:D0:46:0F:04:3F
Authority key identifier: A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4
Certificate issuer: /CN=A241AC704BB26D3BB01102643E819AF4873EBFF4
Certificate serial: 400B07E933C9FA1E3DA818FA4F850A6DB32D1AEE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
Manifest number: 39
Signing time: Sun 14 Jun 2026 00:43:44 +0000
Manifest this update: Sun 14 Jun 2026 00:38:44 +0000
Manifest next update: Mon 15 Jun 2026 00:52:44 +0000
Files and hashes: 1: A241AC704BB26D3BB01102643E819AF4873EBFF4.crl (hash: bnX4JGpi1+cepZgC7gdsbZiZjunSJtWe09qpnf3iB8s=)
2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: A0dq7gCpUZizRlTZxmyyhDpzPzM9JT/yiUa6QfFC4Os=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl
rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 00:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:0b:07:e9:33:c9:fa:1e:3d:a8:18:fa:4f:85:0a:6d:b3:2d:1a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A241AC704BB26D3BB01102643E819AF4873EBFF4
Validity
Not Before: Jun 14 00:38:44 2026 GMT
Not After : Jun 15 00:52:44 2026 GMT
Subject: CN=F0B7451F9BC3D1DC1F978299BA038AD0460F043F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:cd:a9:e9:79:38:76:6d:a0:bb:be:25:fe:
41:22:cb:02:1a:c5:9b:89:5e:44:24:60:d4:1e:5d:
d6:a8:27:32:69:6a:d0:3f:a8:6f:59:9b:4a:05:94:
d2:b8:6b:31:0c:64:d8:ca:42:55:ed:ea:a9:64:25:
1a:6c:90:b0:73:dd:d8:c4:24:17:34:52:f3:9d:8d:
8a:ac:f7:e7:e9:a2:f1:70:c2:04:9e:c3:ff:5c:eb:
10:e0:61:87:1b:09:b4:f8:4c:ca:55:db:fb:bb:ad:
bc:86:b1:f2:48:46:3d:58:fa:3c:61:4c:c9:76:bc:
0f:27:d6:69:c4:cf:27:26:d4:02:55:40:ba:63:54:
75:4e:c8:32:0c:8b:db:3c:35:0d:cc:0d:db:ed:fc:
2d:d2:ac:e1:d6:a6:2b:5c:3e:3f:d4:0c:72:07:12:
15:39:2a:b0:48:d9:11:2d:08:33:8b:ba:ca:cf:08:
ce:98:3e:b4:38:df:a3:62:b4:86:d3:44:c1:63:24:
e3:34:5c:59:e2:cc:64:bb:eb:c7:0b:ed:5f:e4:05:
c6:05:84:16:bb:89:10:d4:dd:59:10:3a:0c:92:5f:
3a:09:60:e8:59:3e:b3:b7:56:1f:ed:8b:a1:c5:d3:
9d:48:8f:45:f7:6f:4f:39:3d:6a:b1:62:ef:97:6f:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B7:45:1F:9B:C3:D1:DC:1F:97:82:99:BA:03:8A:D0:46:0F:04:3F
X509v3 Authority Key Identifier:
keyid:A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:10:ed:63:ae:63:25:f2:54:c0:80:eb:ca:a4:ad:87:cc:f3:
0d:9b:7a:fa:25:05:f9:93:14:b9:0c:b3:18:a2:2e:95:6a:3b:
27:8e:3f:e1:e6:2b:a1:dd:94:d1:e2:11:e9:5d:82:88:54:4d:
20:33:2f:2e:c1:a5:57:80:63:d8:73:6d:cd:cc:24:23:f9:b2:
4e:0c:b6:e8:d6:f5:2f:15:3f:13:80:eb:a4:9b:e6:19:d0:ed:
f4:5a:89:db:05:79:17:db:04:b0:71:36:db:07:9d:f0:ba:0e:
af:9a:44:be:55:bc:2c:c4:10:36:3c:78:0e:fa:5b:87:29:fe:
cd:d5:82:4e:b4:0e:28:af:34:38:6c:dd:1f:43:62:d7:a0:9e:
ca:7b:59:f4:5e:46:52:5c:a0:dd:9c:54:a0:c0:a1:1b:c7:03:
8b:0d:d6:80:c0:00:dd:d7:d0:d7:b5:cd:81:28:5d:a2:87:c6:
6f:84:aa:3f:db:22:f7:54:a5:d8:84:97:ea:d6:11:2e:15:a0:
e2:d9:fa:72:2c:49:72:96:9b:79:5e:d1:59:dd:62:78:38:0f:
6e:a3:d1:69:34:2e:a1:ce:df:32:21:10:63:14:e7:e4:32:81:
2f:b7:98:4e:4b:35:28:89:a9:32:57:64:cd:ae:e4:77:a8:6e:
d9:af:1b:48
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQAsH6TPJ+h49qBj6T4UKbbMtGu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI0MUFDNzA0QkIyNkQzQkIwMTEwMjY0M0U4MTlBRjQ4
NzNFQkZGNDAeFw0yNjA2MTQwMDM4NDRaFw0yNjA2MTUwMDUyNDRaMDMxMTAvBgNV
BAMTKEYwQjc0NTFGOUJDM0QxREMxRjk3ODI5OUJBMDM4QUQwNDYwRjA0M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMUM2p6Xk4dm2gu74l/kEiywIa
xZuJXkQkYNQeXdaoJzJpatA/qG9Zm0oFlNK4azEMZNjKQlXt6qlkJRpskLBz3djE
JBc0UvOdjYqs9+fpovFwwgSew/9c6xDgYYcbCbT4TMpV2/u7rbyGsfJIRj1Y+jxh
TMl2vA8n1mnEzycm1AJVQLpjVHVOyDIMi9s8NQ3MDdvt/C3SrOHWpitcPj/UDHIH
EhU5KrBI2REtCDOLusrPCM6YPrQ436NitIbTRMFjJOM0XFnizGS768cL7V/kBcYF
hBa7iRDU3VkQOgySXzoJYOhZPrO3Vh/ti6HF051Ij0X3b085PWqxYu+XbxBlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8LdFH5vD0dwfl4KZugOK0EYPBD8wHwYDVR0j
BBgwFoAUokGscEuybTuwEQJkPoGa9Ic+v/QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWRhNGVmNzEtZjBlMC00MjUyLTgxNjAtNTA1MzIxZmE1MDg5LzAvQTI0MUFDNzA0
QkIyNkQzQkIwMTEwMjY0M0U4MTlBRjQ4NzNFQkZGNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMjQxQUM3MDRCQjI2RDNCQjAxMTAyNjQzRTgxOUFGNDg3M0VC
RkY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx
NjAtNTA1MzIxZmE1MDg5LzAvQTI0MUFDNzA0QkIyNkQzQkIwMTEwMjY0M0U4MTlB
RjQ4NzNFQkZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAL0Q7WOuYyXyVMCA68qkrYfM8w2bevolBfmT
FLkMsxiiLpVqOyeOP+HmK6HdlNHiEeldgohUTSAzLy7BpVeAY9hzbc3MJCP5sk4M
tujW9S8VPxOA66Sb5hnQ7fRaidsFeRfbBLBxNtsHnfC6Dq+aRL5VvCzEEDY8eA76
W4cp/s3Vgk60DiivNDhs3R9DYtegnsp7WfReRlJcoN2cVKDAoRvHA4sN1oDAAN3X
0Ne1zYEoXaKHxm+Eqj/bIvdUpdiEl+rWES4VoOLZ+nIsSXKWm3le0VndYng4D26j
0Wk0LqHO3zIhEGMU5+QygS+3mE5LNSiJqTJXZM2u5HeobtmvG0g=
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:11:21 2026 by rpki-client