
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft
File: A1E11F793F01828AF09B99BCD923D78E53C244F8.mft (raw, json)
Hash identifier: SsnQaeMnIA08xFnLjpIxW8USsoVbiXQfe2FIrENjbmo=
Subject key identifier: 81:A5:4A:45:08:1C:8B:13:B7:E9:F0:1D:7B:49:0A:E0:C0:DE:77:59
Authority key identifier: A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8
Certificate issuer: /CN=A1E11F793F01828AF09B99BCD923D78E53C244F8
Certificate serial: 24C9FF7286538B6B65C5A9523AF43B45E82BF3EF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 04:58:56 +0000
Manifest this update: Wed 17 Jun 2026 04:53:56 +0000
Manifest next update: Thu 18 Jun 2026 06:51:56 +0000
Files and hashes: 1: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: UROVvNQkBLkgNHOadPoNQ+qS5gW9uF+lG16ZZ4rQo7Y=)
2: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: aoz9FF3zaBxJcTS/CNaTKvg2hS72RZ/WIHtE0qTjGI0=)
3: A1E11F793F01828AF09B99BCD923D78E53C244F8.crl (hash: 96m4Ln9W2elTWpjh2CiBeCDcpz+dg8OoJF5comz07To=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl
rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c9:ff:72:86:53:8b:6b:65:c5:a9:52:3a:f4:3b:45:e8:2b:f3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1E11F793F01828AF09B99BCD923D78E53C244F8
Validity
Not Before: Jun 17 04:53:56 2026 GMT
Not After : Jun 18 06:51:56 2026 GMT
Subject: CN=81A54A45081C8B13B7E9F01D7B490AE0C0DE7759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:84:a2:e3:52:b6:40:20:15:58:d0:fb:8c:
28:c9:f4:9d:9e:ad:03:ea:c8:e8:cb:ca:7c:2a:07:
28:7e:80:52:02:bb:51:18:6b:df:ee:6d:cd:62:ab:
28:94:4f:db:f8:68:57:36:72:00:3d:cd:ee:84:90:
5b:bc:34:cf:9e:34:2e:b4:cb:e9:08:65:37:82:1a:
d9:3c:71:d7:81:d2:f8:cb:dd:44:8b:c4:11:ce:e8:
5c:04:41:6f:1e:24:c6:e6:60:83:c7:aa:46:0a:7d:
ec:2c:67:d4:3d:9b:3b:75:34:f1:b4:f2:0e:1e:25:
ec:97:d1:5d:73:61:dd:d3:e9:e4:a4:47:32:98:c5:
95:0d:5e:17:8e:d2:aa:f8:e2:7c:8a:38:0b:ab:c8:
50:11:45:c3:cc:6f:99:63:de:ed:04:7e:a0:75:2b:
17:3f:73:0f:ca:b1:b5:84:42:1f:24:87:4d:ca:44:
6e:be:b6:1f:1d:0a:f8:2e:38:2c:1a:61:85:cf:ca:
51:a0:bb:25:92:c0:3f:b4:75:31:ee:4e:a4:90:bc:
98:0f:0b:11:b3:cc:90:d6:1b:fc:40:6f:36:e3:40:
7e:e7:3a:8d:7b:45:8f:24:df:9e:8a:80:fe:7d:46:
57:ff:e9:f5:ec:bb:9f:2b:f0:45:2e:55:d7:5d:59:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A5:4A:45:08:1C:8B:13:B7:E9:F0:1D:7B:49:0A:E0:C0:DE:77:59
X509v3 Authority Key Identifier:
keyid:A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cd:85:44:d9:ee:8f:bf:4b:74:9f:71:ee:3f:82:66:82:ac:
82:24:3e:58:91:0f:71:79:f7:c0:21:f4:49:00:eb:e2:d0:0a:
73:09:94:87:21:db:a4:4f:aa:d6:9c:4d:17:e1:eb:4d:c5:ed:
d9:64:ed:e6:9f:48:07:74:38:12:17:d2:e2:e5:7f:db:55:9c:
10:b2:1a:b9:1c:1e:a6:c6:1e:34:eb:bc:62:a6:c2:84:02:75:
0a:b8:a0:6b:b9:3b:bf:9b:23:47:c9:4d:cd:12:af:31:81:25:
e4:7e:8c:52:a2:1f:eb:97:97:39:24:e8:0a:e1:dc:2e:a3:b3:
30:61:59:c4:8a:3f:26:89:5e:8b:f4:59:1b:5e:f2:73:9f:22:
90:7a:dc:75:62:cf:dd:65:d5:59:6e:47:44:d5:8a:00:6d:4f:
52:4a:76:fc:d5:df:a7:df:36:50:ea:4f:51:a3:75:c9:7e:0f:
64:50:d0:23:86:3e:b5:df:9b:fc:69:cf:cd:33:93:0e:f2:98:
75:38:11:1c:25:99:bf:00:64:6f:49:49:85:a4:b6:02:24:f6:
10:74:d1:7d:9d:99:41:95:c5:43:4e:bb:dc:12:dd:6a:a5:f7:
2c:d4:ae:15:6b:86:11:7f:82:1f:1d:27:9a:1d:ef:ec:5e:56:
31:be:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:38:49 2026 by rpki-client