
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft
File: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft (raw, json)
Hash identifier: ZbRlWudgQN4SiRtJec0MoKZqRUvvPPT9/hw/wVv4ziM=
Subject key identifier: 9F:D2:38:B8:EB:37:17:9A:87:0F:77:27:DC:EC:90:1B:B2:58:7E:CD
Authority key identifier: A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0
Certificate issuer: /CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0
Certificate serial: 1862AAE60EC27E099B51F8A12857F2502C3F408F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:30:43 +0000
Manifest this update: Wed 17 Jun 2026 02:25:43 +0000
Manifest next update: Thu 18 Jun 2026 03:13:43 +0000
Files and hashes: 1: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl (hash: pHbcECaAzowF4vYCjgfBFXAq912nqFON4FC3+1pVJog=)
2: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: hcBwS6YzikTq1s/P8jlWWii/vuvMdnJI6Od19w2iLTM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl
rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:62:aa:e6:0e:c2:7e:09:9b:51:f8:a1:28:57:f2:50:2c:3f:40:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0
Validity
Not Before: Jun 17 02:25:43 2026 GMT
Not After : Jun 18 03:13:43 2026 GMT
Subject: CN=9FD238B8EB37179A870F7727DCEC901BB2587ECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:3a:1b:de:e9:aa:cc:f3:26:b0:26:d5:d9:
00:c8:80:82:52:94:bd:50:5b:c7:a0:6d:11:bd:40:
b5:1c:56:b4:89:55:ae:c0:3d:b5:3d:5a:cc:ef:83:
79:c4:93:71:7e:f9:bb:7b:ca:4f:3b:6f:11:42:4a:
9c:d1:18:5d:55:ae:1b:b9:0f:07:2f:de:96:14:0d:
91:c2:0c:f7:7d:9a:56:3d:80:ae:38:50:bc:8e:e0:
3e:9d:29:4a:d7:37:f9:0a:2c:ff:b7:b8:0f:f5:4d:
f4:3c:e4:81:60:9c:ee:6d:9a:94:c4:88:c4:12:10:
cf:7e:70:f7:7f:9c:b3:4a:1b:9e:f8:f8:29:fa:ed:
f9:97:1a:74:b0:30:e3:17:1d:a3:e3:b7:65:70:d6:
da:85:a1:84:06:70:cd:9e:a8:a1:0b:48:9d:5d:89:
a3:cf:5c:9e:e0:06:90:85:54:6d:41:b4:09:89:3d:
a0:99:dc:73:a7:46:b1:61:83:97:85:20:f7:d0:51:
c6:0d:0f:8d:14:6c:e9:e9:57:30:88:d1:13:35:fb:
6c:3c:49:71:d5:33:e6:56:1f:6f:a3:bf:f2:14:76:
cc:82:a2:2b:28:fe:40:d4:ec:bf:67:f4:21:f1:50:
79:86:20:3b:39:7c:3f:71:64:9e:ba:79:d6:79:3a:
fd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D2:38:B8:EB:37:17:9A:87:0F:77:27:DC:EC:90:1B:B2:58:7E:CD
X509v3 Authority Key Identifier:
keyid:A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f0:7e:1b:a0:a4:d0:25:d6:a8:fd:79:cd:e0:85:80:04:64:
0c:46:ed:6b:f5:06:cb:87:52:78:fe:54:0c:80:11:a7:e9:c0:
bf:7a:f6:89:48:0a:6f:e8:f6:ad:e5:25:79:5a:9b:66:4a:94:
42:7c:ae:eb:a8:d2:68:61:a8:e6:4c:d7:d8:89:8a:11:c1:34:
ce:fe:70:df:70:70:84:94:5b:de:09:6b:10:2d:56:32:7f:dc:
cd:c1:13:38:9f:b5:05:51:4c:11:35:c0:5c:ac:66:2d:bf:7a:
ec:45:3f:5a:28:e3:59:eb:44:24:84:80:12:72:72:e0:32:4a:
2d:a1:ff:bb:d5:38:f1:e3:98:00:67:59:f6:ba:4b:ab:1e:2a:
00:43:82:f5:96:4a:f0:f2:51:59:09:a5:ef:83:bd:4e:54:d4:
fa:44:a5:51:55:30:2d:ea:75:47:33:c6:9b:52:b7:1c:3f:5b:
99:f9:24:a3:db:dd:46:44:89:2a:1c:57:0d:2e:8b:91:50:38:
eb:73:b7:70:cc:e5:1a:84:2a:4f:db:9d:d7:a5:64:2f:28:f7:
3f:58:93:09:fe:0b:76:c3:53:49:43:6e:42:80:42:67:c9:53:
99:f1:9b:5f:c4:9f:e7:94:f5:c5:c6:e3:ff:b5:a5:85:9b:a4:
a9:91:4f:47
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGGKq5g7CfgmbUfihKFfyUCw/QI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBG
MDhEMjNEMDAeFw0yNjA2MTcwMjI1NDNaFw0yNjA2MTgwMzEzNDNaMDMxMTAvBgNV
BAMTKDlGRDIzOEI4RUIzNzE3OUE4NzBGNzcyN0RDRUM5MDFCQjI1ODdFQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbvTob3umqzPMmsCbV2QDIgIJS
lL1QW8egbRG9QLUcVrSJVa7APbU9Wszvg3nEk3F++bt7yk87bxFCSpzRGF1Vrhu5
Dwcv3pYUDZHCDPd9mlY9gK44ULyO4D6dKUrXN/kKLP+3uA/1TfQ85IFgnO5tmpTE
iMQSEM9+cPd/nLNKG574+Cn67fmXGnSwMOMXHaPjt2Vw1tqFoYQGcM2eqKELSJ1d
iaPPXJ7gBpCFVG1BtAmJPaCZ3HOnRrFhg5eFIPfQUcYND40UbOnpVzCI0RM1+2w8
SXHVM+ZWH2+jv/IUdsyCoiso/kDU7L9n9CHxUHmGIDs5fD9xZJ66edZ5Ov0LAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUn9I4uOs3F5qHD3cn3OyQG7JYfs0wHwYDVR0j
BBgwFoAUqdWGqCyxZpAvHRssrl60IPCNI9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODE2NWU0ODEtNWE3OS00ODY4LWE0ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgy
Q0IxNjY5MDJGMUQxQjJDQUU1RUI0MjBGMDhEMjNEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BOUQ1ODZBODJDQjE2NjkwMkYxRDFCMkNBRTVFQjQyMEYwOEQy
M0QwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODE2NWU0ODEtNWE3OS00ODY4LWE0
ZTQtZmFjZmQ5MjJkODEzLzAvQTlENTg2QTgyQ0IxNjY5MDJGMUQxQjJDQUU1RUI0
MjBGMDhEMjNEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHHwfhugpNAl1qj9ec3ghYAEZAxG7Wv1BsuH
Unj+VAyAEafpwL969olICm/o9q3lJXlam2ZKlEJ8ruuo0mhhqOZM19iJihHBNM7+
cN9wcISUW94JaxAtVjJ/3M3BEziftQVRTBE1wFysZi2/euxFP1oo41nrRCSEgBJy
cuAySi2h/7vVOPHjmABnWfa6S6seKgBDgvWWSvDyUVkJpe+DvU5U1PpEpVFVMC3q
dUczxptStxw/W5n5JKPb3UZEiSocVw0ui5FQOOtzt3DM5RqEKk/bndelZC8o9z9Y
kwn+C3bDU0lDbkKAQmfJU5nxm1/En+eU9cXG4/+1pYWbpKmRT0c=
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:15:33 2026 by rpki-client