
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft
File: A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft (raw, json)
Hash identifier: XiONBiPnNCR3Aq8r0PW1HM7BgkJUzIhwKH8XZknnG/k=
Subject key identifier: 9E:66:07:F6:40:28:6C:FF:74:EC:9F:AE:4B:9E:46:E7:B5:8D:48:ED
Authority key identifier: A5:1F:08:82:DC:1B:DA:E2:BF:6D:C9:1D:3E:C6:EB:23:E5:69:AF:D6
Certificate issuer: /CN=A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6
Certificate serial: 4CA68172C12D0008C6C180E29D037BAA2E272D42
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft
Manifest number: A5
Signing time: Thu 03 Sep 2026 04:23:16 +0000
Manifest this update: Thu 03 Sep 2026 04:18:16 +0000
Manifest next update: Fri 04 Sep 2026 07:51:16 +0000
Files and hashes: 1: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: bcrYp2H/z0S0hWGYzTC5YNTUZlTQYIqRD2WSLvGlQYs=)
2: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: dyba1Oz6Wp8hX68WIp/FlT5kkFNyYyRCOC354wRZyeE=)
3: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: eVEWrgAX4ZnGtqRKMu7y1kldAhV5Bn5D8vbPp3E9838=)
4: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: Mtfzs1yZWVTcj+jwor1tUEKlyotPWoajpPtYoZFvsps=)
5: A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl (hash: ymfUYcScLIW/emJQ42T8LccjjrR+zeKWdxDiSatmdcA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl
rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 07:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a6:81:72:c1:2d:00:08:c6:c1:80:e2:9d:03:7b:aa:2e:27:2d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6
Validity
Not Before: Sep 3 04:18:16 2026 GMT
Not After : Sep 4 07:51:16 2026 GMT
Subject: CN=9E6607F640286CFF74EC9FAE4B9E46E7B58D48ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:0c:2e:76:47:a4:f6:9b:ad:ee:1e:ae:25:
fc:62:0b:73:2b:8d:c2:09:2b:2a:a4:23:e2:09:e8:
d3:58:6d:c8:01:e9:00:a5:0c:f6:7b:7b:bd:42:c4:
ef:03:8c:20:5e:02:d9:37:50:0c:16:17:35:a2:f4:
ad:df:b1:e9:62:8f:ea:d3:8c:99:87:01:5f:57:0b:
42:b6:72:b6:b5:02:7f:f0:b0:e3:0e:60:92:de:ba:
ce:47:55:3a:bd:76:e0:7b:35:d5:c6:e7:9d:b3:68:
1d:33:1b:23:6f:ea:07:4d:3a:a4:f6:ff:ae:a1:f2:
f2:a6:fc:43:16:0d:57:2e:c8:a4:8e:cf:89:10:3b:
14:a9:53:c9:b9:6d:d3:57:16:ad:ad:33:fb:cd:61:
ab:ce:61:55:0b:ba:32:c1:50:fd:0d:b4:f2:bd:35:
c2:5a:f4:ed:11:21:ad:94:e1:97:23:e6:05:b6:c7:
04:7b:a7:4e:87:95:3d:5c:35:2f:41:7b:1a:2d:83:
94:36:5c:c2:37:6d:40:ee:26:a5:e9:bc:34:9a:59:
24:69:24:fa:2b:a8:ca:93:0c:ce:ae:12:da:9c:6f:
00:91:7a:af:0c:37:46:67:69:b2:f1:35:d3:69:cb:
46:c4:c4:7c:49:7e:c6:a2:c0:02:08:66:4c:81:9c:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:66:07:F6:40:28:6C:FF:74:EC:9F:AE:4B:9E:46:E7:B5:8D:48:ED
X509v3 Authority Key Identifier:
keyid:A5:1F:08:82:DC:1B:DA:E2:BF:6D:C9:1D:3E:C6:EB:23:E5:69:AF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5b:ad:21:6f:87:40:2a:73:1d:8c:08:81:b0:ef:97:a8:2b:
da:6d:4a:cb:f4:48:b5:77:11:14:9c:1e:4d:2f:38:43:c0:39:
7d:6b:79:57:f4:5d:e3:3e:93:6d:60:b1:32:56:19:21:56:cb:
83:9a:b1:2a:a9:b0:15:d7:b2:c5:c8:ca:7d:19:43:8a:a1:d4:
1e:be:24:ea:a7:1b:5f:64:1e:00:18:fa:6f:1e:45:d0:a2:1b:
10:9b:f5:fe:bc:d5:28:c8:ca:44:2e:ee:6f:0d:07:84:c6:f4:
d8:7b:39:9b:e8:11:57:9c:6a:fe:9b:f2:ef:1a:03:b0:d5:f2:
f4:cf:3a:8c:ae:c0:85:f1:bf:40:55:b1:7a:82:21:63:0a:da:
e1:db:2f:99:eb:94:06:ab:e2:21:b0:ab:9e:19:f8:66:14:d2:
9b:ea:bc:9b:29:da:fc:d2:f5:77:1a:17:84:e0:10:5b:24:33:
de:3a:55:39:de:cb:da:9a:83:31:eb:92:26:c7:37:b0:da:94:
3b:db:7a:7c:c5:a4:b4:29:70:0e:6c:0f:40:73:63:da:06:1b:
b4:23:55:23:33:b8:2c:fb:07:62:83:5b:88:54:74:de:ca:8a:
c1:c1:69:e4:4d:41:28:4a:08:15:15:51:ff:f0:41:e4:e1:10:
0c:fe:67:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:36:19 2026 by rpki-client