
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
File: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft (raw, json)
Hash identifier: DK5IZHnto2PpHu0OtVQ9+9m4eM7NlIjJs0QfjLaxUdA=
Subject key identifier: C7:45:9A:06:84:B4:4B:21:D8:ED:32:D0:87:16:29:73:DB:ED:54:48
Authority key identifier: A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB
Certificate issuer: /CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB
Certificate serial: 29301014A7079668799C03CC893A5C924A71FB06
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 15:38:08 +0000
Manifest this update: Tue 16 Jun 2026 15:33:08 +0000
Manifest next update: Wed 17 Jun 2026 17:29:08 +0000
Files and hashes: 1: 3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa (hash: 53bRIBjSwWo7fUHZf8q8wJM22KHC6YENy9XlgqItFdw=)
2: 3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa (hash: KJ4tcOWA2SH5n/Mp2J21qXYJWXIviat2U7Oo6EVnrbg=)
3: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl (hash: CV2sxSONbPwLR62OvIMpqupcXzUu3rhpuRFTAWCQCNU=)
4: 3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (hash: inh5OwQ0YrBgY5xCxaOxxgj16EXDsFBhdopHtNq3Eyc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl
rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:30:10:14:a7:07:96:68:79:9c:03:cc:89:3a:5c:92:4a:71:fb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB
Validity
Not Before: Jun 16 15:33:08 2026 GMT
Not After : Jun 17 17:29:08 2026 GMT
Subject: CN=C7459A0684B44B21D8ED32D087162973DBED5448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:5f:f3:5d:f5:88:d5:9f:5b:4e:f8:31:71:
20:82:5d:a3:da:ad:f2:03:a1:98:87:17:f5:24:54:
f4:5f:46:41:36:e5:44:87:90:75:dd:9e:b4:25:70:
5d:12:19:b2:9d:ac:a9:3f:17:ab:19:95:c5:74:c8:
e9:ad:9d:b8:c9:8e:21:e7:23:99:be:4c:d8:88:c6:
8a:ab:c2:d3:6f:a8:22:38:a0:38:fe:51:f5:f8:8c:
6b:c7:7a:93:90:ac:34:70:c3:07:c6:53:8d:e6:70:
30:be:dc:dd:30:ff:e2:dd:bb:aa:cd:3a:8c:f4:3e:
27:00:a6:b0:da:8d:b3:e6:a9:36:9a:23:06:26:4e:
19:7a:19:34:ea:51:d6:9c:a3:94:0e:b4:a9:f2:e6:
7d:0b:0d:65:11:20:a9:2d:c4:26:58:ec:8d:d1:fc:
d4:60:18:9a:14:3e:d8:73:1d:22:74:72:cb:f4:e7:
ac:7d:fb:ec:f6:26:7f:70:a4:de:ae:98:f1:6c:bb:
93:4f:2c:3c:8a:d6:47:47:c1:b0:c7:21:28:2b:00:
ed:44:a5:4c:d2:3e:5f:cf:b6:bd:2d:ca:e0:c7:d3:
92:2f:7b:5e:45:6f:f1:e7:43:59:5f:d1:18:74:05:
5e:b1:ed:30:e2:ca:d4:ba:f0:d7:06:f8:f5:c3:79:
0a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:45:9A:06:84:B4:4B:21:D8:ED:32:D0:87:16:29:73:DB:ED:54:48
X509v3 Authority Key Identifier:
keyid:A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:64:17:73:4b:df:d3:93:d0:de:66:ea:77:8a:a6:d6:62:a6:
e1:95:c1:63:aa:0f:af:6b:8e:e7:2f:bf:c3:c7:48:31:83:9e:
20:45:8e:d0:97:90:d8:6f:99:84:54:ef:92:32:57:aa:6d:95:
f4:ec:fb:43:aa:cb:59:37:d9:f0:50:9f:ca:5e:6e:70:6f:ba:
49:d3:d9:8f:9b:9d:90:07:16:9c:77:69:ef:2f:17:3d:af:13:
c5:6d:1e:67:1d:06:34:1d:7a:3b:8c:92:f4:ce:ee:04:fc:99:
19:8a:50:bb:4a:b4:29:c8:0e:77:6e:7d:96:e4:1a:1d:e1:be:
55:62:58:a3:d0:67:3d:c7:3a:10:57:cf:f0:33:77:86:7a:9a:
04:99:57:b1:40:20:28:dc:fd:1a:5d:fa:c1:f5:30:55:ee:25:
4b:4b:64:19:ce:e5:c1:85:5d:56:7a:3c:86:42:a0:4c:60:81:
e3:93:8f:b3:38:34:36:fc:94:3f:ca:95:c5:91:e3:d0:d2:d0:
0b:f7:0e:95:49:6a:da:e6:1a:08:c2:81:57:6e:b5:45:95:f1:
4a:9a:d8:86:42:b3:62:24:fb:34:ee:6f:22:dc:24:8a:3b:c4:
06:a1:c5:27:38:97:e8:3e:4a:7e:58:77:3c:2e:1e:cf:87:2b:
d4:a4:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:18 2026 by rpki-client