
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
File: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft (raw, json)
Hash identifier: 1+aDaDv/tWq3mdn0p6V6RN7Zrha+JmL/fzljVLPpM48=
Subject key identifier: 20:66:A6:BD:EA:A2:48:7B:CE:D3:C4:3E:DA:32:D0:C6:45:96:9E:A9
Authority key identifier: A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C
Certificate issuer: /CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C
Certificate serial: 28DCCF6E7C2F2FD3AB3BCE54C79B26939177674F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 21:14:53 +0000
Manifest this update: Tue 16 Jun 2026 21:09:53 +0000
Manifest next update: Wed 17 Jun 2026 23:32:53 +0000
Files and hashes: 1: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: Xz4v16/PuWF3xc6NRQS+cFH5cfyFs8wYPFxR2GtXMDw=)
2: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: oVthfsHvJfZFfAfPgVnP6RK4i2YXuHXT4TJi3carfJc=)
3: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl (hash: YKrcr7g36asdH47GYAFiWkwSh6l2HRgn8mXuL48vXkg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl
rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 23:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:dc:cf:6e:7c:2f:2f:d3:ab:3b:ce:54:c7:9b:26:93:91:77:67:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C
Validity
Not Before: Jun 16 21:09:53 2026 GMT
Not After : Jun 17 23:32:53 2026 GMT
Subject: CN=2066A6BDEAA2487BCED3C43EDA32D0C645969EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:85:1d:2e:db:27:9e:08:4c:d9:b7:6b:da:
9b:31:4d:f2:86:6a:48:f2:58:3b:65:bb:49:f2:c3:
9f:5c:c7:d2:ab:a7:96:c7:31:ba:9a:e6:a7:05:3f:
54:4c:86:5a:d1:b2:6a:68:87:86:7c:1b:77:0d:cc:
a9:82:e7:0e:5e:47:73:ad:a1:46:e3:20:ee:1b:06:
0b:c1:77:dd:b1:73:a6:15:d8:3b:57:a4:bb:eb:f7:
f8:bf:67:cf:2d:52:a9:64:96:68:07:3c:19:a7:cd:
2e:bb:3e:ac:13:fc:f0:99:23:38:43:3a:e1:50:8e:
91:89:f1:54:8c:f1:bf:5e:ca:48:e6:9f:67:36:47:
26:15:6b:fb:46:4a:a0:3c:22:aa:e3:cc:5e:be:d2:
90:12:1c:49:4f:0c:be:80:80:c1:82:1b:d7:37:c4:
2c:f3:36:b6:a1:91:4a:e3:43:c5:0b:8c:1b:e8:93:
60:89:6b:2c:c7:79:f2:48:6c:b4:38:fe:bd:45:12:
7c:98:0b:84:61:a0:2e:5f:9c:c4:f3:6b:58:e2:72:
77:40:55:26:69:24:0e:97:d6:fa:b8:41:ae:64:e9:
e3:51:a7:d3:27:37:0f:83:33:34:27:5b:d3:29:88:
31:4f:95:38:44:42:85:1d:7c:fe:43:21:d0:a0:d7:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:A6:BD:EA:A2:48:7B:CE:D3:C4:3E:DA:32:D0:C6:45:96:9E:A9
X509v3 Authority Key Identifier:
keyid:A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:98:b6:70:f3:06:e0:e9:d3:7a:7c:d1:24:8e:59:e9:fd:1c:
c9:14:ce:33:51:ce:5f:3b:bc:b0:ba:33:a7:db:4a:74:62:81:
fe:1e:5e:47:2d:97:18:95:39:a7:1d:98:e1:41:e6:0f:e8:30:
72:a8:c7:04:be:f3:4d:81:c7:f2:b0:4b:38:76:ec:96:80:c9:
7a:df:13:fd:4f:33:68:a5:43:5e:f5:02:93:a1:9a:98:5e:c1:
54:b8:aa:1f:a3:e8:46:9a:78:87:82:a0:3c:f5:fa:a7:49:4d:
82:a5:c8:ef:f6:ef:ce:28:8f:26:ce:fc:5d:f1:e6:4b:21:ba:
6c:2d:d5:6f:19:db:a9:d3:dd:24:ea:43:ef:a9:80:9e:c0:85:
19:69:77:20:d3:5c:90:af:e0:3a:62:ae:39:8d:76:e0:7c:a3:
d9:65:c4:42:ea:c6:47:5c:79:7b:38:ca:94:32:c7:c7:19:5b:
3f:2f:51:90:6b:3e:05:aa:ad:da:3c:46:c4:bd:d1:34:c5:17:
4b:b9:8a:1e:cc:1b:9a:b2:16:3f:6f:a4:4e:92:c3:f1:61:5d:
8c:85:be:bf:ad:4d:9c:ec:e2:e5:fb:fe:fe:5d:62:18:b6:3f:
a8:b6:da:44:07:28:6b:a5:fe:b2:4e:33:ff:32:7f:10:5b:0f:
dc:f3:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:30 2026 by rpki-client