
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
File: A008821941A61F29770FC73A584B71178BCAE916.mft (raw, json)
Hash identifier: AixkDRFx7fqwiS1Aqv1FuBrpyzv+PQK7UkqmiGdZtU8=
Subject key identifier: 5A:4B:30:DE:D6:93:40:52:0E:9A:54:6C:03:D6:6B:4F:1C:6E:CB:06
Authority key identifier: A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16
Certificate issuer: /CN=A008821941A61F29770FC73A584B71178BCAE916
Certificate serial: 52E506A00118E64D021CB9F1D0257AAE886EA5FF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 13:31:02 +0000
Manifest this update: Sat 13 Jun 2026 13:26:02 +0000
Manifest next update: Sun 14 Jun 2026 14:03:02 +0000
Files and hashes: 1: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: IsFb+2IB3+NAOmMQ4bANX3K12nM98beEkYNtdgmBcMk=)
2: A008821941A61F29770FC73A584B71178BCAE916.crl (hash: YvCY2MMUVtsN+aspYpLNd7EgPaI/GTTCKnRBZZhJcLc=)
3: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: MEn9rSCA+X2qT8GUKSJ4R7eRC44YahAnX3SQmIywZAg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl
rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e5:06:a0:01:18:e6:4d:02:1c:b9:f1:d0:25:7a:ae:88:6e:a5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A008821941A61F29770FC73A584B71178BCAE916
Validity
Not Before: Jun 13 13:26:02 2026 GMT
Not After : Jun 14 14:03:02 2026 GMT
Subject: CN=5A4B30DED69340520E9A546C03D66B4F1C6ECB06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:a7:98:38:3d:7d:15:bb:9a:82:68:24:e7:
12:2f:f3:e4:5d:0f:34:cf:ec:78:ce:c7:5b:fa:bd:
89:20:e5:28:47:98:21:36:b4:07:d2:92:60:14:c7:
59:3f:1b:65:22:cb:27:0d:16:db:4e:a9:87:54:e0:
f1:ae:bd:b4:81:73:c8:42:41:6c:fb:a7:59:e4:3d:
e2:6b:93:28:16:8c:08:84:ea:80:ec:cf:4c:08:9a:
c3:7e:8d:79:00:bd:0e:85:fd:95:a3:2d:b5:32:78:
4e:ba:59:eb:42:c7:70:c7:c5:9c:0c:f4:b0:6d:5e:
c0:7b:5f:08:75:cb:01:c6:c6:a3:9f:25:93:c1:b5:
80:b3:65:a2:0a:57:9f:84:ed:ad:2f:c8:fe:ab:9e:
02:be:9a:dc:97:3a:ed:f5:45:00:61:db:cf:20:6f:
80:41:46:e9:b8:93:04:e9:a1:a3:41:86:65:04:da:
af:4f:de:84:29:52:55:55:65:5f:c7:5c:d1:60:e4:
41:af:c5:c9:19:5e:61:64:69:63:45:42:2b:df:91:
89:9a:a8:d3:79:68:52:41:c5:42:05:ca:9c:8b:c9:
a0:52:47:d6:07:28:a6:c5:52:a2:29:3b:d6:15:e9:
50:1b:8a:19:cf:74:ec:67:cc:63:d1:a9:83:e3:e5:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4B:30:DE:D6:93:40:52:0E:9A:54:6C:03:D6:6B:4F:1C:6E:CB:06
X509v3 Authority Key Identifier:
keyid:A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:95:e3:84:94:54:1b:2a:ed:80:5e:6f:9c:44:04:7a:1d:2b:
f6:06:53:28:80:54:2d:1c:26:b0:8a:6b:52:59:0e:87:19:1c:
34:3d:59:cd:85:e2:2a:bf:d6:b6:1c:06:1c:e0:30:fa:30:44:
bb:42:39:86:83:ea:05:55:db:36:4c:0a:81:dc:25:10:af:a2:
a0:ad:9f:ec:69:29:86:8d:d1:e0:7d:59:b3:c7:92:5a:c1:6a:
c3:b7:16:57:94:c3:ab:c2:79:49:ea:cf:a6:26:87:c0:e9:93:
a9:ef:d4:d2:99:41:29:68:0d:1d:be:b9:fe:71:1a:62:a7:87:
78:b6:b3:40:c6:65:a1:b8:56:a0:ae:c8:25:79:16:2c:bd:5c:
89:cc:ab:68:d6:11:1a:81:d3:a5:e0:42:50:32:ed:ba:36:2d:
ad:4f:c6:a6:13:4a:73:7b:0d:de:c3:fc:67:ff:cf:65:20:60:
87:ef:13:af:ea:b4:e7:9c:24:3e:93:58:6e:a8:d0:b7:3a:b0:
bd:fa:b7:fd:d7:c6:e6:f4:18:8d:c5:52:3d:a3:af:31:c8:1f:
22:83:33:30:d2:6f:0c:fd:28:fe:aa:f2:95:08:b6:d4:c6:88:
9a:9d:f1:29:e2:c0:aa:73:e8:a0:5c:63:03:b3:35:2e:21:e2:
05:f5:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:54:46 2026 by rpki-client