
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.mft
File: A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.mft (raw, json)
Hash identifier: ItAnL6cJSEv0WSdM9ARgfgyBwhZShkHhKemOdWZzV8E=
Subject key identifier: 61:62:08:64:A5:1B:20:2B:A2:F8:97:B5:AE:A9:27:C0:5F:C2:A2:7E
Authority key identifier: A9:3A:AC:5D:E4:DD:EA:2E:93:99:70:AF:8D:C0:73:19:AC:92:62:F3
Certificate issuer: /CN=A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3
Certificate serial: 2FD32127BB588AC54DAD48CCBC6A2C2B924E6A28
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 05:02:45 +0000
Manifest this update: Tue 22 Sep 2026 04:57:45 +0000
Manifest next update: Wed 23 Sep 2026 07:31:45 +0000
Files and hashes: 1: 3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa (hash: YMzKMalLITBN/HdAfxplrJvi84NP08zyNa/XHShLcW8=)
2: A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.crl (hash: N6PX4ojxmWt/iR9y8iIVfmdwRmPwFzRG7UTj+C9Yn8g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.crl
rsync://rpki-rsync.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 03:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d3:21:27:bb:58:8a:c5:4d:ad:48:cc:bc:6a:2c:2b:92:4e:6a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3
Validity
Not Before: Sep 22 04:57:45 2026 GMT
Not After : Sep 23 07:31:45 2026 GMT
Subject: CN=61620864A51B202BA2F897B5AEA927C05FC2A27E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:18:4d:2c:7c:a9:af:9a:42:9a:1d:4c:f7:
d4:f2:66:dd:5c:ad:44:bd:34:ac:95:17:0e:63:59:
2d:42:1f:60:be:5f:e6:ed:1b:e8:cf:26:d1:5e:b1:
76:20:6d:a6:1c:c0:dc:b9:83:b5:ad:02:81:3f:ed:
a1:71:e6:7a:f4:15:9f:be:8a:88:c4:d1:73:9b:73:
32:83:f7:f1:8b:5e:ee:21:12:be:c9:5b:3d:e6:58:
88:4c:a8:22:74:f9:48:ea:b9:8f:4d:95:7b:b3:7b:
70:ef:9d:ff:92:ca:03:5e:56:6f:60:fe:1a:a1:4d:
60:2f:1a:f9:d6:78:82:1d:89:fa:47:d4:4b:44:02:
aa:0b:d5:b4:19:09:04:c0:58:78:78:89:49:6d:27:
59:76:79:f0:85:a3:9d:2e:60:1b:ed:f3:60:0f:23:
49:5a:db:ee:f3:a2:f7:16:f0:ad:d1:1f:dc:f1:e5:
18:54:f1:c2:ae:a2:b2:03:e8:f6:0e:63:26:be:db:
df:d9:84:3e:11:78:7e:d2:59:bb:3f:fb:30:d4:35:
b9:a0:9c:61:2f:1a:96:dd:e5:71:dc:3f:3c:77:3f:
fc:77:b4:3f:21:6d:ec:2a:d9:c9:bf:11:93:c8:0f:
14:60:3f:c0:52:20:92:a2:01:2f:b3:07:61:0d:28:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:62:08:64:A5:1B:20:2B:A2:F8:97:B5:AE:A9:27:C0:5F:C2:A2:7E
X509v3 Authority Key Identifier:
keyid:A9:3A:AC:5D:E4:DD:EA:2E:93:99:70:AF:8D:C0:73:19:AC:92:62:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f5:2b:60:7f:62:10:fe:90:ec:ea:9a:64:1c:db:30:7d:9a:
79:65:20:95:9a:52:ff:b0:00:41:47:91:5d:90:1a:a7:82:45:
34:00:0e:6d:81:dc:c8:1e:34:61:e3:1b:9c:85:bc:4f:37:18:
1d:83:64:6f:6f:59:b4:96:f1:ea:da:2a:e4:4b:f9:fd:76:4b:
e4:52:8d:37:25:b4:50:15:a1:c8:74:87:5a:94:72:e2:cc:9b:
31:a3:ea:e5:88:f8:c2:ed:4a:fc:e4:28:86:4c:35:7d:72:9a:
20:96:a1:b3:65:dc:8c:98:b6:29:bc:b3:b9:f8:2b:bb:d4:cb:
b5:af:f2:37:67:f5:68:32:c1:b7:83:59:b8:d8:79:94:dd:6b:
16:1d:d5:03:36:5c:bc:60:ed:f0:ee:b0:87:f6:e5:4c:df:d2:
a4:3f:8e:b3:42:5d:62:4c:72:19:5d:d5:88:96:69:1b:23:e3:
87:d8:0b:08:ee:93:55:94:2a:3a:54:36:12:8c:e9:d6:f5:0f:
65:7a:56:40:20:27:9b:f1:3b:de:c6:9b:f1:bd:e7:a0:b2:30:
cf:39:9b:a8:f6:7f:90:bf:92:ec:65:90:76:0b:04:ea:80:5a:
74:5e:71:2e:2c:fb:9b:1b:1e:18:ee:7d:8a:9e:14:a6:65:b6:
7e:60:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:55:38 2026 by rpki-client