
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
File: A5251C27E1AF09AE2F28618250807EA4D573694B.mft (raw, json)
Hash identifier: IazrAKFvMjaiThwTmUiI5enSa8yVAqDSUoQ6LSnqIAs=
Subject key identifier: 42:10:E1:14:60:89:C2:3B:C4:9B:82:D2:BD:67:C1:C9:E3:D9:87:A1
Authority key identifier: A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B
Certificate issuer: /CN=A5251C27E1AF09AE2F28618250807EA4D573694B
Certificate serial: 11318A0DA69451E6DFE383F69F32A12BC416448E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
Manifest number: F6
Signing time: Mon 02 Nov 2026 04:53:38 +0000
Manifest this update: Mon 02 Nov 2026 04:48:38 +0000
Manifest next update: Tue 03 Nov 2026 08:45:38 +0000
Files and hashes: 1: A5251C27E1AF09AE2F28618250807EA4D573694B.crl (hash: sMuIB5UJPRTpISsy0Zp6jrfFAb5KB4TkDoxrZKZ6ajc=)
2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: 8PPdaCX6mIjApYArjunSo3wNOsnTma7JcAZ0c6t+SzU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl
rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:31:8a:0d:a6:94:51:e6:df:e3:83:f6:9f:32:a1:2b:c4:16:44:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5251C27E1AF09AE2F28618250807EA4D573694B
Validity
Not Before: Nov 2 04:48:38 2026 GMT
Not After : Nov 3 08:45:38 2026 GMT
Subject: CN=4210E1146089C23BC49B82D2BD67C1C9E3D987A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:03:c4:d0:9f:ed:05:02:03:87:d4:cf:16:
fd:42:b2:64:9f:46:4c:71:81:f7:b9:95:c2:f9:a4:
f9:b8:4a:82:99:85:d0:43:f0:d6:de:85:85:f5:06:
1e:bb:c6:e6:13:3e:c8:4c:0d:af:fc:03:bf:1c:55:
37:d4:b7:2e:fa:46:93:0d:25:83:28:ac:09:ab:46:
f4:64:67:2b:5c:b7:c9:74:37:7b:ea:c5:87:c2:3d:
20:16:5d:3e:c0:c0:36:4a:4c:e3:15:8a:5a:7e:99:
2f:20:85:54:8c:bb:be:2c:5a:a0:2e:9d:ca:46:0b:
4b:b9:65:22:8f:cb:63:b0:57:d7:75:95:e7:c8:4f:
75:3a:9b:92:bd:08:a4:47:e7:38:60:98:a4:ea:e1:
29:93:95:63:83:40:41:37:aa:86:c7:13:eb:80:c5:
2f:ed:d4:93:1b:ad:82:6b:14:40:76:6b:6f:07:82:
e8:ab:dc:39:0c:ef:e1:a8:ff:56:64:4a:7d:a4:2c:
e7:fe:9d:f6:93:6e:59:3b:0b:4c:00:9f:3e:fd:bc:
d9:d8:68:c7:ca:96:4c:e3:28:d6:f3:da:bf:dc:17:
2a:9f:2a:74:fa:d4:72:58:49:6c:b6:0f:34:3b:cc:
ff:2b:8a:0a:e1:a3:40:99:cc:af:2c:8a:11:15:36:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:10:E1:14:60:89:C2:3B:C4:9B:82:D2:BD:67:C1:C9:E3:D9:87:A1
X509v3 Authority Key Identifier:
keyid:A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:28:ab:52:2c:6d:1f:ab:1a:a4:d7:41:97:d3:5d:1a:ac:f0:
23:6e:9f:5a:c6:d7:62:18:b4:87:69:5b:98:81:73:86:f2:ae:
27:36:38:22:27:3e:58:7a:1f:d5:51:9a:79:3d:80:ac:42:04:
86:8e:e1:c9:59:fd:ce:a5:04:de:c7:0b:4e:82:5c:24:8d:49:
ba:cf:ae:32:a7:4a:cc:3b:0a:6f:5a:47:06:f5:07:c1:ff:04:
43:7f:ca:9b:93:d2:8e:2d:ec:7b:5a:bc:8b:dc:aa:c6:1d:4c:
77:fd:c0:7f:ae:28:a5:d3:e0:c8:94:4b:2c:c2:d3:d6:99:2e:
c2:11:82:f1:1f:92:4d:71:81:07:a9:39:2f:18:af:df:b7:96:
32:05:23:2c:a6:e7:d9:bf:6f:1a:ee:7f:c0:2a:d0:ac:a5:65:
a5:cb:19:29:c1:1a:c7:0a:31:8f:42:63:cd:de:e8:21:39:fa:
de:bb:b8:6b:47:e8:ae:a7:b8:1c:04:22:9e:25:b4:b8:a8:41:
8a:b8:47:69:30:da:2b:e7:f8:64:fa:ce:1a:71:e0:33:30:ab:
e2:b7:6f:fc:eb:61:af:b1:e6:7f:56:64:d3:de:4e:59:90:23:
b0:f1:b8:59:9c:9d:a7:a6:75:05:e6:09:37:ef:e5:3b:1d:a3:
5a:ae:b3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 15:09:20 2026 by rpki-client