
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft
File: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft (raw, json)
Hash identifier: XLIicEr0nB0wrveT+Uq/foPSRtMX6a16epf+8jbyCFU=
Subject key identifier: 61:33:29:8C:6E:65:68:41:EA:D8:FC:E1:7E:08:5D:EB:97:EE:83:AB
Authority key identifier: A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0
Certificate issuer: /CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0
Certificate serial: 37252832E95C8D642EDEB6711644859B26148052
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 01:42:54 +0000
Manifest this update: Tue 21 Jul 2026 01:37:54 +0000
Manifest next update: Wed 22 Jul 2026 02:15:54 +0000
Files and hashes: 1: A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl (hash: uhQqLvQNd2ABnVv6UrkJ8wyMXQpipw1UfhkDJJTXqAk=)
2: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: hcBwS6YzikTq1s/P8jlWWii/vuvMdnJI6Od19w2iLTM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl
rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:25:28:32:e9:5c:8d:64:2e:de:b6:71:16:44:85:9b:26:14:80:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D586A82CB166902F1D1B2CAE5EB420F08D23D0
Validity
Not Before: Jul 21 01:37:54 2026 GMT
Not After : Jul 22 02:15:54 2026 GMT
Subject: CN=6133298C6E656841EAD8FCE17E085DEB97EE83AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:d2:85:17:48:9e:0a:a0:00:fe:3f:d1:61:
e5:37:9c:5f:b4:05:28:0c:51:5e:fa:3c:85:cd:0e:
df:db:2a:97:cf:09:82:9e:94:f3:81:e5:d6:86:4f:
9d:92:01:b9:f0:51:9d:75:cd:fa:d0:6c:fe:4c:43:
74:84:7f:c5:01:f0:05:ee:ac:c9:26:7f:e9:66:19:
18:90:5f:c3:85:e1:6f:1f:9e:74:7d:67:b0:9f:e6:
ea:61:2d:dd:67:0a:14:25:5f:be:5d:64:ac:37:ee:
c9:1d:ff:2e:ee:47:32:32:59:43:46:3f:7c:7f:bb:
bb:55:6b:7d:ca:68:c5:dd:db:8f:88:32:41:f5:05:
2e:7f:1e:de:5d:d3:f3:9a:ad:99:0d:d1:cc:4d:04:
a3:e3:a6:85:02:97:0f:70:a6:83:e6:bb:d0:2a:e8:
6c:57:21:69:fe:d7:8d:21:4f:38:a3:5a:15:8b:fd:
6a:72:c3:3b:c2:f8:53:51:f3:db:fe:ec:26:6f:a6:
36:88:b4:2e:62:d9:35:8b:e6:59:16:86:3d:51:03:
65:85:f3:93:07:32:e7:f7:1f:6b:e8:33:ea:e5:09:
fa:8d:3f:b2:7f:89:5a:80:c9:b8:7e:4c:49:d8:69:
f8:98:62:08:96:13:4a:bf:30:7e:7b:34:dd:a4:d1:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:33:29:8C:6E:65:68:41:EA:D8:FC:E1:7E:08:5D:EB:97:EE:83:AB
X509v3 Authority Key Identifier:
keyid:A9:D5:86:A8:2C:B1:66:90:2F:1D:1B:2C:AE:5E:B4:20:F0:8D:23:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/A9D586A82CB166902F1D1B2CAE5EB420F08D23D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:cc:df:37:32:70:6b:3e:90:3c:34:87:ce:d9:28:a9:9e:e5:
36:23:20:c5:07:29:91:9d:79:4f:d0:cf:22:79:f9:a4:a2:a6:
05:93:f5:3f:f6:16:e4:25:31:5d:1d:a3:ee:f2:3b:d7:62:dc:
a0:52:08:17:77:c6:31:17:d7:57:32:f6:20:ea:dc:ff:07:0a:
c4:95:aa:a5:73:b3:86:32:27:86:22:00:bf:e8:aa:da:48:86:
34:66:a6:54:78:9c:7b:a7:cf:6f:3a:55:06:c8:53:5d:17:d9:
48:ae:6b:4f:fd:f0:91:ef:1e:97:6b:06:a1:d2:4f:56:5c:ca:
bf:d3:67:60:7a:12:06:5e:f7:51:63:19:77:dd:9e:71:41:2c:
79:c3:bd:d5:7b:94:90:66:c2:02:0b:de:07:56:1c:4c:db:9b:
d3:e9:b1:f0:af:1e:71:c6:6e:25:74:47:f2:c9:af:b6:8f:88:
aa:a4:24:29:0f:d4:b8:a9:82:b6:86:1d:84:6e:57:3e:54:c8:
a7:c3:5b:3e:da:0d:92:10:48:e2:a3:a6:75:22:f7:23:bb:09:
42:00:db:1a:dd:70:d8:e1:7a:33:18:92:57:d0:db:86:9e:c9:
8e:11:d6:43:92:fd:37:5d:cf:7c:f1:69:67:47:d0:0b:a2:15:
5f:84:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:17:45 2026 by rpki-client