
$ rpki-client -vvf rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft
File: A41E81A674D539D19E0045B0769140AE1C59B2A6.mft (raw, json)
Hash identifier: nfskbN6581aaczQWG180K7FLgj7KgXJa8m/RSAApQ5c=
Subject key identifier: 23:10:22:6D:D7:8E:EC:51:FE:02:59:1E:67:29:AB:72:C4:23:C9:88
Authority key identifier: A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6
Certificate issuer: /CN=A41E81A674D539D19E0045B0769140AE1C59B2A6
Certificate serial: 79078A65FAD4124BF82869F73D596058B23C2C45
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft
Manifest number: 69
Signing time: Mon 20 Jul 2026 15:05:13 +0000
Manifest this update: Mon 20 Jul 2026 15:00:13 +0000
Manifest next update: Tue 21 Jul 2026 18:21:13 +0000
Files and hashes: 1: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: A+RPn25HxKi9IyMz0fxzOncy7UdZahFmQBMwYHaLTLU=)
2: A41E81A674D539D19E0045B0769140AE1C59B2A6.crl (hash: /hvhiWHA75j4V+NzBTqD5WxFij7FyQHqocbaOw5lpJE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.crl
rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 18:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:07:8a:65:fa:d4:12:4b:f8:28:69:f7:3d:59:60:58:b2:3c:2c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A41E81A674D539D19E0045B0769140AE1C59B2A6
Validity
Not Before: Jul 20 15:00:13 2026 GMT
Not After : Jul 21 18:21:13 2026 GMT
Subject: CN=2310226DD78EEC51FE02591E6729AB72C423C988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:ac:2b:e4:60:10:3c:5d:88:67:bd:41:98:
6f:29:1e:d8:40:38:3d:95:bd:a1:0a:29:12:c6:3f:
06:1f:9b:15:e4:a2:e9:09:d9:72:52:74:5a:11:64:
31:63:c3:e2:65:9f:d6:f6:5f:d0:04:f3:8d:22:8c:
78:c4:d5:fd:25:3f:09:a1:e0:fb:1b:48:28:53:af:
8c:5b:24:ca:b6:be:8b:19:1d:16:61:4f:50:e1:e3:
73:df:59:d1:84:a7:fc:a0:e2:87:d6:7a:f9:4c:5c:
dd:82:fd:89:ac:df:92:60:38:c3:b9:47:98:52:e1:
b8:b2:20:71:df:a0:d7:fc:c7:88:21:9b:1c:6f:20:
1c:f8:3d:de:5e:40:8c:d6:1c:51:aa:0c:42:fa:cb:
95:d9:0c:ff:83:98:23:2e:7d:4c:d2:62:96:72:05:
7c:ce:f6:57:c4:c1:97:9e:03:c1:97:7b:d0:21:4b:
e6:21:b6:4b:f2:02:08:2f:b9:dd:39:10:4a:12:82:
f3:56:82:47:af:df:b9:54:7c:fe:83:54:08:3a:c7:
8f:e2:9d:58:69:a4:a5:de:82:96:aa:0d:c2:5a:2a:
e5:24:be:b6:bf:71:26:6f:de:03:31:f0:54:ac:28:
84:0a:07:99:bd:5e:0b:65:bb:15:77:25:ba:a2:71:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:10:22:6D:D7:8E:EC:51:FE:02:59:1E:67:29:AB:72:C4:23:C9:88
X509v3 Authority Key Identifier:
keyid:A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1e:e4:fa:6d:81:f7:5b:da:71:71:7d:86:bd:0e:f2:85:8a:
ea:9d:63:31:0b:2f:f6:68:bb:17:69:61:4c:a6:c4:57:49:06:
3f:75:7d:a3:e1:1a:d0:9e:87:83:95:ea:66:ed:7f:85:c9:97:
94:c9:8f:fc:78:91:62:74:fb:62:9f:e4:e6:ad:31:65:53:22:
8b:d3:e2:68:1c:66:e8:0e:fc:b0:18:d1:d6:1d:ff:f6:a5:d2:
36:3e:b3:87:ef:be:eb:ad:a3:b3:01:c8:38:02:09:bc:85:f9:
05:a9:e9:34:cc:65:2a:75:e1:c1:18:53:55:05:0d:3c:2d:2b:
8b:fa:fd:71:1a:67:72:16:e6:09:18:60:f4:3d:fa:37:88:7c:
d3:1c:9b:1a:ed:e9:c6:52:8c:92:31:8e:f5:a7:b2:f5:ef:d1:
d8:db:13:01:42:a1:17:ed:e8:a2:63:a7:d3:3c:69:1f:25:cf:
1e:b4:b0:c6:0f:de:f6:ee:63:d8:e2:1b:9d:36:5c:bf:09:ed:
0a:ed:35:9a:72:e0:3f:ac:0d:a6:91:a4:d2:68:22:86:d5:3b:
ed:39:27:71:b9:52:03:cd:77:5e:42:6e:c3:de:ee:31:95:d6:
81:11:06:b1:84:aa:19:e3:14:8e:80:98:06:75:dd:b1:37:48:
bf:43:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:10:49 2026 by rpki-client