
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
File: A008821941A61F29770FC73A584B71178BCAE916.mft (raw, json)
Hash identifier: 6sutxcnN2ItaSGFqDe3ahHszQLkiOIk5g3ZdEfsoJOc=
Subject key identifier: 51:C7:F3:FE:4D:E5:13:F1:B8:FF:EA:B4:BE:F4:A6:4A:32:9A:AC:57
Authority key identifier: A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16
Certificate issuer: /CN=A008821941A61F29770FC73A584B71178BCAE916
Certificate serial: 674833FF8F89B900EFD666AFE42430ADAEA16912
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 03:20:48 +0000
Manifest this update: Tue 22 Sep 2026 03:15:48 +0000
Manifest next update: Wed 23 Sep 2026 03:58:48 +0000
Files and hashes: 1: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: MEn9rSCA+X2qT8GUKSJ4R7eRC44YahAnX3SQmIywZAg=)
2: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: IsFb+2IB3+NAOmMQ4bANX3K12nM98beEkYNtdgmBcMk=)
3: A008821941A61F29770FC73A584B71178BCAE916.crl (hash: HgAPVwZlKcFqdLQxeKBBXkTiHFvB0hYMM3ecZqquDZI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl
rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 03:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:48:33:ff:8f:89:b9:00:ef:d6:66:af:e4:24:30:ad:ae:a1:69:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A008821941A61F29770FC73A584B71178BCAE916
Validity
Not Before: Sep 22 03:15:48 2026 GMT
Not After : Sep 23 03:58:48 2026 GMT
Subject: CN=51C7F3FE4DE513F1B8FFEAB4BEF4A64A329AAC57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:74:74:c8:ba:09:a1:18:5c:7c:39:33:1b:0d:
cd:42:e4:ce:96:e1:da:07:d4:7b:5e:89:9b:bd:d1:
dc:14:22:f5:66:87:dc:bd:cb:d8:5a:07:f8:78:15:
51:82:f3:08:da:4d:ba:c4:b1:9e:06:17:21:38:33:
d0:69:6b:ff:1a:d6:ef:11:a0:7f:f6:6a:09:cb:08:
22:50:4c:8d:c8:ac:fb:98:09:cc:18:26:dd:b5:7c:
b5:88:f1:b9:2f:60:7b:ca:91:7e:7c:03:43:21:23:
07:e5:91:c8:6c:69:6b:ad:3d:bc:44:b2:ff:5b:f9:
f9:8e:7f:07:d1:ae:b1:ad:df:10:7c:f7:5c:f6:a3:
69:a9:d4:6d:ee:7d:3c:3b:28:58:9f:2e:70:a0:11:
ca:c8:f8:5e:4b:df:01:40:90:53:8f:30:44:b4:0d:
37:c5:fb:4a:83:e7:48:da:40:2f:3f:cc:38:9e:2c:
15:1d:e9:df:82:5a:9b:00:fe:74:71:52:c1:4e:1f:
e9:bb:d9:74:d4:bb:44:b5:52:da:55:ee:d8:c5:02:
2c:6d:cd:62:a2:df:ed:43:4b:81:6f:0a:f8:72:1f:
5c:d1:1b:34:08:c0:e6:b0:d8:00:b3:da:de:41:2e:
bf:0f:09:c1:e3:81:56:c8:f7:ee:0f:23:3d:4c:05:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:F3:FE:4D:E5:13:F1:B8:FF:EA:B4:BE:F4:A6:4A:32:9A:AC:57
X509v3 Authority Key Identifier:
keyid:A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e0:aa:1c:b0:60:56:c3:dd:cd:e9:6b:93:e2:5c:88:bb:ac:
91:3d:3a:6e:1d:b8:c9:46:a1:4c:8f:ba:24:9b:c3:7a:28:fe:
74:e6:85:fc:ca:4c:b3:ae:60:c4:b2:8f:8a:4b:a2:85:3e:70:
63:22:d8:3a:2e:c8:7f:65:aa:62:c3:49:12:a9:a9:2d:ec:90:
da:6c:41:83:ba:ba:86:23:61:f6:2e:67:26:b4:b8:0f:69:07:
d8:22:89:6c:f1:c8:c6:d8:d2:af:b8:7b:b0:84:2d:05:2f:b7:
64:46:9e:2d:c2:54:d0:ab:f6:e2:4f:d9:39:9a:a2:26:58:0a:
f3:38:1c:c0:3e:6c:fa:f3:df:2a:2d:02:c1:bd:ba:d7:a8:21:
84:8b:5a:76:f1:9f:1b:92:b6:60:47:b1:ab:ba:eb:2e:a6:01:
a6:02:d0:19:61:53:c6:74:f4:6c:83:c8:b6:5a:8f:b4:fb:df:
ba:40:d6:13:af:f3:0f:50:b0:ad:af:61:10:72:1c:40:84:ff:
1f:4a:2b:e3:0d:cf:d8:b4:a5:a5:34:52:a1:3f:1c:c7:a2:c5:
2b:cd:38:9e:a1:03:c5:f3:7b:fb:26:9c:5b:1f:6f:85:88:9d:
8c:e4:eb:3f:75:bf:44:ad:38:65:98:35:c5:25:10:77:ef:67:
81:4b:28:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:12:21 2026 by rpki-client