
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
File: A795AFC3ACE68FD4EB18D45F48148F669260F261.mft (raw, json)
Hash identifier: MC9UG0l8PLjHYutuau2Yj1bt+WFOeKUOzHMJ6vGuzls=
Subject key identifier: 99:DF:5F:4B:99:B1:C0:5F:CC:D2:EA:B4:6F:23:66:E6:71:AB:63:D5
Authority key identifier: A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61
Certificate issuer: /CN=A795AFC3ACE68FD4EB18D45F48148F669260F261
Certificate serial: 11EC96250F270D87D14826E8E3D7B8F15C24AB6C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 03:42:16 +0000
Manifest this update: Wed 17 Jun 2026 03:37:16 +0000
Manifest next update: Thu 18 Jun 2026 07:18:16 +0000
Files and hashes: 1: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: pmHLxMdkC8jCCynXCQwBWuDUZCyBP7BmUKKeGNQ6X6A=)
2: A795AFC3ACE68FD4EB18D45F48148F669260F261.crl (hash: bbvoykWlkBoWZWfpcFFk325mdwo+L8PwbSzHCzDtYFw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl
rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ec:96:25:0f:27:0d:87:d1:48:26:e8:e3:d7:b8:f1:5c:24:ab:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A795AFC3ACE68FD4EB18D45F48148F669260F261
Validity
Not Before: Jun 17 03:37:16 2026 GMT
Not After : Jun 18 07:18:16 2026 GMT
Subject: CN=99DF5F4B99B1C05FCCD2EAB46F2366E671AB63D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:31:f3:1b:c4:53:80:7a:2c:c5:a8:c0:28:53:
0f:f8:b8:11:8e:87:ae:81:4a:67:4f:a6:7a:d8:de:
c6:c3:ff:34:f0:59:74:86:a3:b6:d0:3d:ca:9c:1a:
b0:e9:26:bc:07:65:87:d1:38:b5:10:a3:e8:be:f2:
d8:d2:2d:8a:d8:dc:de:1a:d5:5f:38:e9:9a:13:33:
06:d9:43:01:6c:66:58:15:90:25:48:8c:99:22:be:
31:8e:c4:02:87:31:19:71:45:d9:24:27:12:70:a0:
bf:75:ee:44:12:94:65:7c:86:80:ff:ba:fa:01:c1:
8a:dc:1a:3b:a3:73:af:f7:5c:ed:e6:9e:42:d3:a4:
ca:33:8b:1d:d8:b7:92:c7:8c:6f:1f:f6:16:13:5e:
35:25:38:75:77:af:09:4d:70:41:36:35:05:c9:d8:
e7:50:4d:96:88:69:f5:e8:98:3f:bf:eb:64:5d:da:
c5:09:7e:bf:31:97:20:50:35:0a:74:fa:d0:22:26:
b5:75:2d:1d:d4:88:88:39:ae:6e:e7:4b:39:dd:65:
6d:41:2e:00:fb:3c:e6:8c:f5:56:0e:71:94:54:86:
fa:da:d7:47:9d:bd:53:a4:c9:f9:a1:fb:50:39:c1:
8b:41:04:49:81:de:fa:2b:f7:ae:ea:7a:25:22:fb:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DF:5F:4B:99:B1:C0:5F:CC:D2:EA:B4:6F:23:66:E6:71:AB:63:D5
X509v3 Authority Key Identifier:
keyid:A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:10:87:0b:29:dd:3e:3c:9a:7a:97:eb:83:ce:b2:f2:ad:81:
48:20:ac:aa:81:7e:0a:1a:a4:6c:43:da:c5:07:71:54:96:b2:
dd:e1:65:d2:55:d2:c6:f2:48:95:a5:59:39:47:97:22:42:1f:
5d:26:8b:e1:18:85:66:b5:dc:64:08:c0:cf:c8:d1:70:c6:60:
c6:a7:17:58:ac:35:52:f9:f2:6b:b8:eb:e3:a5:e3:26:c6:20:
37:4a:fe:95:fb:72:fd:b8:6b:a8:68:a2:23:d5:18:95:48:6f:
9a:8f:b1:0d:09:e8:b6:0e:fb:35:8f:c6:dd:2e:1d:a5:09:31:
90:fe:ed:df:67:f5:b6:21:7f:9b:d2:2f:75:da:fc:a6:ee:60:
86:03:6a:9a:02:de:96:ac:79:49:56:9e:41:79:12:51:c1:21:
19:7a:e1:14:f5:b6:4c:ad:01:2c:78:ee:a6:47:bf:7c:50:d3:
b6:33:d7:19:8b:75:9d:c0:1f:7a:37:8a:88:e4:20:d7:a2:7c:
da:1e:40:ab:6a:cf:7b:6e:38:b0:4e:69:b3:bc:74:38:39:f4:
83:f4:48:89:c5:e9:84:60:d4:63:49:92:01:35:da:37:b4:fa:
53:6f:e7:0d:b9:4b:33:13:92:04:a5:82:51:44:a5:4b:a5:30:
d8:8a:ae:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:15 2026 by rpki-client