
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
File: A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft (raw, json)
Hash identifier: OJNXtgLlf00hyR3DpB7ib74grUIy++J7ZGqzwMjoJIE=
Subject key identifier: 92:A4:C2:BD:48:94:3D:C1:24:F0:9B:73:07:D8:91:CF:41:E7:D4:C5
Authority key identifier: A4:3C:61:0C:15:26:2A:F1:F9:93:3E:16:0A:30:AE:3D:98:59:DD:A3
Certificate issuer: /CN=A43C610C15262AF1F9933E160A30AE3D9859DDA3
Certificate serial: 2AECCED1AC1998F3BCAFA48E846490FB3A18F263
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 00:03:05 +0000
Manifest this update: Tue 16 Jun 2026 23:58:05 +0000
Manifest next update: Thu 18 Jun 2026 03:53:05 +0000
Files and hashes: 1: A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl (hash: 4Rz25Ow+K86XFNl08KZovElU3KORp52ugyez7+9ACCk=)
2: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: YWJzGjODoThVoKPyccsDqAnY6JX/6P8ILYIH216SRNI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl
rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ec:ce:d1:ac:19:98:f3:bc:af:a4:8e:84:64:90:fb:3a:18:f2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A43C610C15262AF1F9933E160A30AE3D9859DDA3
Validity
Not Before: Jun 16 23:58:05 2026 GMT
Not After : Jun 18 03:53:05 2026 GMT
Subject: CN=92A4C2BD48943DC124F09B7307D891CF41E7D4C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:ab:94:1f:e3:74:7f:52:6f:48:c9:b8:1d:
3c:15:af:d9:6b:a8:5b:3c:41:23:d2:ba:d4:8f:0d:
89:6d:4c:f1:ca:d1:91:61:0c:fd:52:13:9c:32:13:
4a:3c:74:9e:c2:1f:73:2b:3e:0e:8a:9d:39:63:07:
9d:d6:5d:a7:50:d5:42:8a:14:3e:9d:2a:43:da:70:
ff:4e:34:cf:11:1b:0c:85:f0:fb:46:81:f2:ed:03:
11:ad:23:af:d0:ba:8b:e2:4b:35:e4:b3:f9:77:24:
45:5b:0a:47:ae:2f:5e:67:ce:e0:72:ac:22:d6:73:
86:38:46:44:a8:04:38:7d:d9:7a:e6:68:09:ca:2f:
80:fc:88:06:fb:ba:63:53:d6:f6:70:e8:b6:0d:b1:
fb:a5:c6:41:96:c9:90:de:93:a5:44:77:53:70:27:
6b:12:f7:ed:e5:83:84:58:34:10:fe:84:6e:e0:32:
1c:26:29:b7:13:54:4b:b1:d6:59:09:fc:13:14:15:
f4:77:c6:9a:05:ba:43:21:55:7d:0a:a4:78:30:cc:
71:be:2b:e5:3e:3b:5d:2f:b5:f1:62:92:cb:7e:10:
cd:1b:67:52:72:4a:9a:f5:a9:6b:17:ce:c2:97:22:
9e:51:12:cf:79:cc:0b:11:3a:a7:fb:fa:07:f8:7f:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A4:C2:BD:48:94:3D:C1:24:F0:9B:73:07:D8:91:CF:41:E7:D4:C5
X509v3 Authority Key Identifier:
keyid:A4:3C:61:0C:15:26:2A:F1:F9:93:3E:16:0A:30:AE:3D:98:59:DD:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:55:48:84:1a:de:6b:93:8a:d1:1d:26:b4:b1:1e:25:fa:df:
44:2f:df:3c:94:1c:b4:68:f4:e9:14:d1:ea:d8:10:2d:90:96:
1f:23:08:c2:48:93:a8:4c:4a:28:0e:32:e8:ce:91:7e:f0:48:
ff:ee:34:ab:b1:fe:96:7c:e2:ef:1a:4c:17:df:8b:00:3f:f7:
62:d6:f3:3c:06:78:d7:4d:5f:b6:7b:00:2a:73:7b:2c:4a:db:
c0:88:81:71:66:10:b7:1f:dd:32:8e:58:1b:3c:68:e6:7f:5f:
24:b2:d5:5c:b6:73:05:ab:b4:ca:93:6c:4b:2c:4d:88:97:71:
d8:53:c5:f6:75:8b:74:01:3c:33:e5:97:e5:5a:77:95:a2:94:
38:31:51:99:9a:2e:02:13:93:9f:88:59:c5:c4:d3:88:5a:95:
ea:81:fe:51:4f:b4:87:32:ea:e8:88:9e:6c:b3:c0:12:f0:02:
ab:82:2f:db:67:49:76:34:76:a2:d7:1f:d5:07:89:50:3a:21:
76:e5:b5:ad:6a:a8:bf:24:bc:d2:43:8c:fd:d8:b1:ee:84:2a:
40:ee:30:64:21:61:c3:4b:e2:cf:fa:3a:4f:05:99:6d:4b:09:
69:df:cf:e3:8e:92:9d:7b:ae:fc:a9:c4:09:8c:a4:73:d9:1b:
b6:39:27:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:15:13 2026 by rpki-client