
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
File: A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft (raw, json)
Hash identifier: uXiJKteLQtzicP5nDc6O8q9OWt8EHKy3BdDMA1oIH1U=
Subject key identifier: C2:0C:BD:9C:27:86:71:19:81:C6:D8:27:78:34:F5:AC:78:CB:DE:3C
Authority key identifier: A4:3C:61:0C:15:26:2A:F1:F9:93:3E:16:0A:30:AE:3D:98:59:DD:A3
Certificate issuer: /CN=A43C610C15262AF1F9933E160A30AE3D9859DDA3
Certificate serial: 6A9C6FBF1BEA8ACBB9B4007FBEC36336DE258C70
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 13:41:50 +0000
Manifest this update: Tue 02 Jun 2026 13:36:50 +0000
Manifest next update: Wed 03 Jun 2026 15:17:50 +0000
Files and hashes: 1: A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl (hash: q608r9z5jbgOobi25yPCSkZm3MrtanRe2rw5AXAa7iU=)
2: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: YWJzGjODoThVoKPyccsDqAnY6JX/6P8ILYIH216SRNI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl
rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:9c:6f:bf:1b:ea:8a:cb:b9:b4:00:7f:be:c3:63:36:de:25:8c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A43C610C15262AF1F9933E160A30AE3D9859DDA3
Validity
Not Before: Jun 2 13:36:50 2026 GMT
Not After : Jun 3 15:17:50 2026 GMT
Subject: CN=C20CBD9C2786711981C6D8277834F5AC78CBDE3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:b8:2d:9a:fb:29:3c:4e:7c:4c:e2:77:c8:
36:2e:d0:80:75:a5:54:42:26:e7:85:29:85:8b:53:
f2:d3:6a:30:13:ec:14:a5:bb:e9:6f:8b:04:68:c1:
87:46:ab:27:ec:e8:41:7a:2d:d1:71:4b:52:47:55:
51:89:c7:96:4b:39:bc:dd:c9:5d:2a:50:1d:d7:6a:
99:56:70:3a:bc:5a:48:60:55:c8:cc:e3:15:24:5a:
77:cd:00:25:d5:b5:16:bd:04:48:fb:a0:92:f8:f4:
ef:9e:d6:dd:b0:a7:ba:32:6c:bc:d4:51:dc:98:73:
73:bf:f4:e5:59:06:4e:c0:3b:bc:c9:37:55:bd:ba:
ef:c7:d4:57:aa:4e:4a:95:1d:4e:cd:0b:34:52:b9:
79:d5:df:f9:49:01:b3:53:be:dd:c2:0a:25:48:a6:
1f:02:aa:c4:aa:3c:54:e6:38:f3:1c:71:1b:61:41:
ee:9c:78:a1:d7:a5:17:af:f4:5b:19:a3:3a:78:2f:
2f:0d:b0:b7:dd:cd:b2:8a:11:0f:d3:ac:4f:b3:a4:
35:b8:69:08:67:d7:18:d8:82:9d:60:e1:3c:3d:15:
8a:0d:85:a1:85:54:ad:f2:f5:ec:a8:fc:17:0e:9b:
c0:bd:eb:39:7f:b1:d7:01:77:e2:42:e7:cf:58:b3:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0C:BD:9C:27:86:71:19:81:C6:D8:27:78:34:F5:AC:78:CB:DE:3C
X509v3 Authority Key Identifier:
keyid:A4:3C:61:0C:15:26:2A:F1:F9:93:3E:16:0A:30:AE:3D:98:59:DD:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1a:d1:20:de:0c:33:ac:52:f3:13:f4:5a:f0:90:fa:52:21:
f8:7e:03:e2:e0:32:af:81:ac:fd:4d:dc:1d:90:6a:7f:74:2b:
cf:76:c6:a6:06:e2:5f:54:52:39:77:bd:32:16:40:20:73:0f:
ab:ef:0a:db:2b:ef:8b:8e:c3:fa:12:28:c0:6e:c7:06:9a:ac:
e9:e2:68:8a:5e:7f:8e:ba:48:55:fb:6c:ae:d1:5e:90:cb:14:
35:35:c5:60:c5:16:c2:67:c8:d0:30:0f:87:94:f6:c9:6c:30:
a1:63:72:3f:b4:9d:4c:c8:77:b1:52:4b:4a:e5:ad:4b:86:25:
5f:79:a5:7b:77:e5:29:5c:bf:ac:48:9c:11:ca:dc:74:e7:49:
0e:12:f8:68:53:bc:42:6f:36:10:9f:fe:4d:f3:b0:4f:fe:8d:
57:e6:64:36:ba:af:f7:30:c7:64:cf:ab:88:f5:e1:13:3f:c2:
a2:83:d4:28:da:53:40:cd:1a:fb:dd:93:fa:6f:d9:9f:22:d4:
51:55:8f:97:a4:17:26:43:61:1b:6f:2f:75:e6:36:0c:46:c6:
25:d5:4b:c1:b8:7d:0b:2a:89:61:d7:98:9c:2a:fa:e8:61:e8:
7d:5d:92:04:97:76:3a:18:14:04:67:3d:52:ae:2f:ea:7f:10:
96:05:73:85
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUapxvvxvqisu5tAB/vsNjNt4ljHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQzQzYxMEMxNTI2MkFGMUY5OTMzRTE2MEEzMEFFM0Q5
ODU5RERBMzAeFw0yNjA2MDIxMzM2NTBaFw0yNjA2MDMxNTE3NTBaMDMxMTAvBgNV
BAMTKEMyMENCRDlDMjc4NjcxMTk4MUM2RDgyNzc4MzRGNUFDNzhDQkRFM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwergtmvspPE58TOJ3yDYu0IB1
pVRCJueFKYWLU/LTajAT7BSlu+lviwRowYdGqyfs6EF6LdFxS1JHVVGJx5ZLObzd
yV0qUB3XaplWcDq8WkhgVcjM4xUkWnfNACXVtRa9BEj7oJL49O+e1t2wp7oybLzU
UdyYc3O/9OVZBk7AO7zJN1W9uu/H1FeqTkqVHU7NCzRSuXnV3/lJAbNTvt3CCiVI
ph8CqsSqPFTmOPMccRthQe6ceKHXpRev9FsZozp4Ly8NsLfdzbKKEQ/TrE+zpDW4
aQhn1xjYgp1g4Tw9FYoNhaGFVK3y9eyo/BcOm8C96zl/sdcBd+JC589Ys9atAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwgy9nCeGcRmBxtgneDT1rHjL3jwwHwYDVR0j
BBgwFoAUpDxhDBUmKvH5kz4WCjCuPZhZ3aMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGFiY2U3MWUtNGVlNC00NTkwLTk0ZmItMzdmZmQ5ZjBkNmI3LzAvQTQzQzYxMEMx
NTI2MkFGMUY5OTMzRTE2MEEzMEFFM0Q5ODU5RERBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNDNDNjEwQzE1MjYyQUYxRjk5MzNFMTYwQTMwQUUzRDk4NTlE
REEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFiY2U3MWUtNGVlNC00NTkwLTk0
ZmItMzdmZmQ5ZjBkNmI3LzAvQTQzQzYxMEMxNTI2MkFGMUY5OTMzRTE2MEEzMEFF
M0Q5ODU5RERBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHMa0SDeDDOsUvMT9FrwkPpSIfh+A+LgMq+B
rP1N3B2Qan90K892xqYG4l9UUjl3vTIWQCBzD6vvCtsr74uOw/oSKMBuxwaarOni
aIpef466SFX7bK7RXpDLFDU1xWDFFsJnyNAwD4eU9slsMKFjcj+0nUzId7FSS0rl
rUuGJV95pXt35Slcv6xInBHK3HTnSQ4S+GhTvEJvNhCf/k3zsE/+jVfmZDa6r/cw
x2TPq4j14RM/wqKD1CjaU0DNGvvdk/pv2Z8i1FFVj5ekFyZDYRtvL3XmNgxGxiXV
S8G4fQsqiWHXmJwq+uhh6H1dkgSXdjoYFARnPVKuL+p/EJYFc4U=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:46:41 2026 by rpki-client