
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft
File: A655C14C173A3BE852B5A2C52C501937C4340242.mft (raw, json)
Hash identifier: y0fp2dFiR6aZlCmzDU3sszWBx99u2rmMyBPD6i8peKA=
Subject key identifier: AA:1E:B1:A4:54:2F:6D:22:50:24:1F:D5:67:E5:90:8D:17:FA:20:B7
Authority key identifier: A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42
Certificate issuer: /CN=A655C14C173A3BE852B5A2C52C501937C4340242
Certificate serial: 14FAA01E099EAB3448657DC5F5A3B26DBDB13406
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft
Manifest number: F7
Signing time: Tue 03 Nov 2026 12:44:03 +0000
Manifest this update: Tue 03 Nov 2026 12:39:03 +0000
Manifest next update: Wed 04 Nov 2026 15:47:03 +0000
Files and hashes: 1: A655C14C173A3BE852B5A2C52C501937C4340242.crl (hash: ldRWgNyWi72vgh8NEmltUmYJVcZ1s49w8+O+4kALeKM=)
2: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: qkm6D0klaQyvN59pQnarOTQhutzEDT+u+1JdsHBl/VQ=)
3: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: VTw+tu3SsLrqMi7jJgKUunIG386oKhLKeizx0PYXC2g=)
4: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: St+whbiWn8DuDZzEPL2qqiXyvmUfCd91hjaKC3vJifA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl
rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 15:47:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:fa:a0:1e:09:9e:ab:34:48:65:7d:c5:f5:a3:b2:6d:bd:b1:34:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A655C14C173A3BE852B5A2C52C501937C4340242
Validity
Not Before: Nov 3 12:39:03 2026 GMT
Not After : Nov 4 15:47:03 2026 GMT
Subject: CN=AA1EB1A4542F6D2250241FD567E5908D17FA20B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:08:c0:ef:bc:88:41:2c:b7:49:f3:f1:53:
b5:34:8a:24:52:6b:00:d5:b5:b2:1b:39:3e:48:88:
ad:10:05:73:73:46:78:49:3e:cb:71:e6:52:0b:a0:
74:e4:fa:7f:02:9d:f3:66:04:82:01:bb:14:51:80:
ef:59:22:2b:17:e7:d7:20:7a:72:b8:24:4c:68:65:
02:f9:f3:f3:db:83:2a:57:40:38:67:9d:39:4c:89:
0f:b1:62:11:31:13:e9:2e:e7:29:d6:e6:1b:aa:41:
e5:74:79:d3:72:06:76:bb:8b:97:14:e7:c2:82:a8:
60:d5:d8:f2:10:8e:bb:28:02:6f:c0:23:db:6c:49:
39:df:e9:3a:68:17:bc:b1:38:57:fc:5f:3a:63:e4:
1f:c1:05:3f:b4:c2:07:c2:41:d3:4d:64:ac:eb:58:
c3:cd:80:16:4a:53:35:99:6e:e9:ef:e3:c0:dd:9c:
63:95:c5:6f:25:af:ef:f4:cd:5d:ca:04:38:ec:d4:
1a:60:dc:e5:c9:83:b8:63:46:f8:d1:5c:da:4f:f0:
47:29:79:17:53:be:21:15:55:4b:ea:e2:9e:7e:b4:
a2:02:0c:26:07:c0:17:da:2d:37:dc:50:95:a7:f0:
a2:01:69:42:ec:d1:36:74:b0:f4:b5:f7:2e:d5:3b:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1E:B1:A4:54:2F:6D:22:50:24:1F:D5:67:E5:90:8D:17:FA:20:B7
X509v3 Authority Key Identifier:
keyid:A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:47:34:08:44:95:0c:48:81:a6:b8:76:38:ff:36:a8:eb:9e:
c5:46:59:e7:7b:10:0e:0f:b6:49:f1:2e:97:78:51:8d:2f:82:
a5:3e:1e:fe:ba:86:05:a5:9e:40:54:ef:b6:b9:cc:8d:95:1c:
c5:f5:58:da:56:b2:4b:46:aa:e6:61:d4:dd:a0:8f:5f:6b:6c:
30:1a:d8:94:3a:8e:97:62:2a:13:5d:e5:46:ae:ab:66:8d:32:
a5:08:4c:8a:a4:4d:f9:05:ca:4a:5a:55:f1:de:e6:ed:b6:58:
9e:83:0c:90:66:42:14:af:d3:8f:7b:7b:f5:17:04:17:6b:83:
43:d3:fc:76:fb:c2:8c:36:52:45:6b:25:b1:86:fa:9e:7f:52:
b9:e9:83:17:34:3c:23:4c:47:3b:71:69:ba:cc:78:21:ed:f9:
73:98:d0:88:69:73:27:a9:9b:81:e2:c1:d2:32:72:07:0f:72:
c8:b1:f6:c9:79:89:7a:c3:da:00:5e:31:9b:ea:8c:bb:35:13:
d8:4b:5d:55:e1:ef:d0:05:ab:ac:6d:f7:54:81:62:eb:b3:3b:
be:79:c2:bc:99:fe:b1:15:86:b9:49:1f:67:1a:82:fd:63:1c:
64:4c:72:2e:f0:52:fa:54:84:05:ff:e6:e2:69:e7:92:e7:87:
15:7e:66:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 06:30:32 2026 by rpki-client