
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft
File: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft (raw, json)
Hash identifier: HLuPd1HIjTOoMkw6bh4+ckQgyHRq6s17HjjpHQEMR3Y=
Subject key identifier: E9:13:00:DB:B5:28:16:65:E1:ED:7C:50:B1:32:AE:AC:BB:83:B1:1D
Authority key identifier: A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A
Certificate issuer: /CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A
Certificate serial: 43B888A56D388ABEA37658ECA20AA099BF9160AA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 21:35:19 +0000
Manifest this update: Tue 16 Jun 2026 21:30:19 +0000
Manifest next update: Wed 17 Jun 2026 22:04:19 +0000
Files and hashes: 1: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: UXHn8bg4Zb9U+P+TCueeNhsm/n24BjvW6TOuDV9tWgQ=)
2: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl (hash: DG76r43RECam9gnwz2FiXS6fuRyTYniHy7roqz68f8Q=)
3: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 0vj1+ur+imczmOrtruw1pJmka20ZQffLE5EcHd3zqlo=)
4: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: g3SYguF2gjNopDU5fkgr7wfvMxsOOXZGBV4A3PJx+Es=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl
rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 22:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b8:88:a5:6d:38:8a:be:a3:76:58:ec:a2:0a:a0:99:bf:91:60:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A
Validity
Not Before: Jun 16 21:30:19 2026 GMT
Not After : Jun 17 22:04:19 2026 GMT
Subject: CN=E91300DBB5281665E1ED7C50B132AEACBB83B11D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:91:76:db:80:c7:38:8c:d8:21:04:32:47:
6c:5a:aa:21:08:66:e9:88:a6:40:fe:d1:b1:14:a0:
17:4e:60:74:e1:25:f5:c7:c3:a8:6d:f3:0d:06:a1:
a4:80:08:72:39:de:a3:4d:3b:8e:fe:18:29:f4:7a:
aa:97:b6:e0:2b:2e:41:fe:e5:16:13:05:b4:3d:72:
a7:66:9d:1d:16:40:35:5a:d5:2f:9f:95:dc:19:d0:
91:44:6f:1f:0c:81:df:a2:bb:51:31:9e:c0:ac:a8:
d0:7f:69:72:c5:89:2d:e8:03:c8:81:7f:b5:c8:c3:
c1:d3:a7:e4:f6:13:77:ae:58:b6:3e:c2:bd:82:62:
fe:f0:95:73:74:c9:ac:55:d4:74:27:1a:70:8b:79:
8c:db:92:69:e8:59:3a:97:84:b2:b2:be:90:be:3a:
d0:f6:ab:91:9d:53:f3:78:2f:17:58:ac:7e:54:9a:
77:70:9a:93:be:e5:c3:bf:fc:ee:5b:d1:62:82:a3:
6d:85:2d:e0:8f:b2:6f:3f:85:3f:12:df:34:cb:cc:
bb:de:e0:9e:be:0f:f1:eb:10:ad:58:29:d8:0b:b8:
2b:50:14:13:1a:02:7b:a4:39:28:bf:e6:25:88:be:
55:9e:f2:be:21:95:69:6e:e1:50:e0:af:eb:26:18:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:13:00:DB:B5:28:16:65:E1:ED:7C:50:B1:32:AE:AC:BB:83:B1:1D
X509v3 Authority Key Identifier:
keyid:A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b1:1d:ac:1e:22:0a:c0:e7:b3:9d:90:b7:9d:c0:e2:51:cd:
60:40:30:55:8a:30:a0:f6:a6:1a:20:23:b6:d6:15:76:c3:c9:
de:fd:9a:9c:8b:fa:9c:93:2c:0e:b8:11:bb:3c:67:e0:95:64:
df:02:4e:34:39:17:58:7e:9a:e2:69:5b:4b:42:1d:b6:96:34:
ab:86:46:60:9d:ff:24:b8:6a:86:04:04:cb:8a:1e:d6:49:16:
c3:18:42:58:9f:5e:16:00:9f:6f:4f:54:0c:38:e4:24:c4:0a:
19:f6:3e:c0:88:26:88:99:6b:39:3e:cf:08:a9:07:23:05:4c:
ca:45:df:71:fd:29:b0:92:6c:3e:2e:b7:d0:17:17:ba:5c:d0:
bb:98:a0:b5:74:5f:aa:3f:ad:49:ef:71:13:8a:d9:7e:d5:16:
a6:3d:4d:1c:fd:6b:8a:ec:c7:0d:f6:34:d6:71:4b:8a:c5:dd:
a4:89:46:dc:84:18:c5:16:2f:25:40:82:7c:5e:ab:1b:cf:98:
03:f9:6f:55:69:18:fe:cd:17:b9:c3:ff:02:d5:76:34:7e:64:
24:f6:7d:4e:85:16:12:bb:16:82:51:6b:81:3c:06:ae:54:b6:
e7:7f:d7:27:4a:d5:4a:91:e0:54:0d:3a:72:c4:77:05:9c:35:
af:cb:95:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:17 2026 by rpki-client