
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft
File: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft (raw, json)
Hash identifier: XNbbDSddweAKr1PQ0Vm1DO8LJA/Syu2RVkK85k+Azh8=
Subject key identifier: 32:B5:07:B8:AB:14:71:B3:E5:9C:07:8F:AC:7D:D4:6C:55:29:57:36
Authority key identifier: A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB
Certificate issuer: /CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB
Certificate serial: 4F916BDB3E89E9DA2F7A4656E4513F142B6E6528
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft
Manifest number: 3A
Signing time: Sun 14 Jun 2026 01:50:06 +0000
Manifest this update: Sun 14 Jun 2026 01:45:06 +0000
Manifest next update: Mon 15 Jun 2026 04:22:06 +0000
Files and hashes: 1: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: J7QP2a/G6U6CecSpH3luJmb2dfsPBa3lWp+XbtAjzpA=)
2: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl (hash: g8LUbw7Ac0XMURAroQkIDnCp7ag1yTW/bvUW+JCoN0E=)
3: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: C/DT7XHL3SGEbqpViWF85bXoznD5c80gdYcaatqLy54=)
4: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: gUMtJPlmcfCKnK+8j2GeQFyhHBPFelpdjIC7KLgp3HM=)
5: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: DwAPimZJbs1WQtoDvmv2aTJgkFvbbEdXOIPeLqLhsYM=)
6: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: arp0yrywbkd7qbxITxZkrDIJBVD5KXTuWljeFd5i2Ew=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl
rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:91:6b:db:3e:89:e9:da:2f:7a:46:56:e4:51:3f:14:2b:6e:65:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB
Validity
Not Before: Jun 14 01:45:06 2026 GMT
Not After : Jun 15 04:22:06 2026 GMT
Subject: CN=32B507B8AB1471B3E59C078FAC7DD46C55295736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:9e:46:89:24:5d:de:3c:0b:63:2a:90:3b:
37:f4:8c:af:f9:22:35:20:3e:b7:ab:57:7b:c6:5e:
1e:37:95:3d:ba:75:43:ec:cd:a4:14:a0:26:33:3a:
e3:3f:da:e0:76:a5:57:25:87:cc:e0:ca:85:76:7c:
31:4f:f1:e9:3b:2a:fa:50:a3:85:b1:a6:c7:0d:b8:
f6:11:79:9d:c9:0e:4c:75:40:bb:94:d8:ca:30:62:
0d:ed:19:07:31:28:10:40:13:91:36:9a:68:be:1f:
3e:97:3a:7a:fc:83:48:d4:02:47:fc:fe:24:e6:f1:
bd:18:da:00:05:10:6c:82:49:a2:9e:57:21:7e:63:
6e:9c:7b:c9:fe:aa:7f:51:06:53:85:f4:31:b1:39:
4c:a7:0f:52:d5:99:8f:61:13:8c:93:19:1e:0a:8d:
f5:ab:46:fc:b4:90:0d:b9:10:01:24:70:89:51:e6:
45:6b:01:ea:c9:62:e8:23:04:73:e9:c0:86:55:0e:
8d:b6:13:5b:a9:33:04:cf:df:a3:eb:3e:01:26:33:
4c:24:71:0c:72:07:f1:57:3d:f0:8e:c8:9b:a2:1a:
cf:8e:c9:f3:82:8b:22:67:8f:e0:10:47:aa:ef:48:
13:4f:ad:4f:d2:79:de:2c:19:ce:28:40:ab:e4:24:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:07:B8:AB:14:71:B3:E5:9C:07:8F:AC:7D:D4:6C:55:29:57:36
X509v3 Authority Key Identifier:
keyid:A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ba:09:12:54:b7:d1:18:df:67:cc:c1:17:2d:78:54:04:8b:
0a:3f:54:0e:89:44:5f:4d:64:b3:08:2b:64:54:94:8d:64:f4:
8e:bd:5e:68:54:50:eb:e1:e8:0a:78:d9:e7:5c:3b:e8:6d:46:
cb:c6:32:0c:3c:31:3c:56:87:d7:4e:47:e2:b4:97:8d:04:55:
d8:98:8a:25:c4:c3:4f:da:35:b1:78:b6:fb:e4:98:3f:6d:17:
c9:66:57:f1:2c:17:d9:ac:7a:eb:32:62:10:84:cf:1b:ab:4e:
ea:d4:b0:71:e1:b1:1f:5d:e3:f9:4b:64:99:bd:6d:3d:86:29:
e1:0b:35:9a:d6:9f:db:26:c6:6a:6a:f3:18:ff:f4:82:9e:50:
4b:18:5c:a1:a1:fb:db:60:d8:9a:8b:2b:44:8a:4e:8f:81:75:
41:fb:b8:80:4e:44:cb:b8:c8:76:c1:57:ee:16:f0:f9:99:24:
7c:b5:d9:fe:6e:6e:c5:c4:c5:28:42:55:42:21:e8:dc:70:7d:
fc:5c:5c:3d:53:5c:15:9d:af:e3:73:51:5b:8e:01:f4:f4:c3:
42:aa:12:95:21:76:55:b2:16:48:37:f8:b2:a9:ff:6f:f9:2a:
5f:0c:b7:14:21:ab:f8:84:bf:c0:dd:38:a6:c0:4b:1d:05:d8:
12:81:42:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:32 2026 by rpki-client