
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft
File: A41E81A674D539D19E0045B0769140AE1C59B2A6.mft (raw, json)
Hash identifier: DilU7kcEXzNCPuvCalRAoMoNrR05DLYskd4VnbfpGUU=
Subject key identifier: E4:26:0E:94:F4:F9:4A:32:18:81:5C:8F:BE:C2:C9:38:F8:05:E8:E1
Authority key identifier: A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6
Certificate issuer: /CN=A41E81A674D539D19E0045B0769140AE1C59B2A6
Certificate serial: 0630C05E3621CFBEC9757B8ADDAEA7008D9A91FD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 03:38:01 +0000
Manifest this update: Thu 17 Sep 2026 03:33:01 +0000
Manifest next update: Fri 18 Sep 2026 04:38:01 +0000
Files and hashes: 1: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: A+RPn25HxKi9IyMz0fxzOncy7UdZahFmQBMwYHaLTLU=)
2: A41E81A674D539D19E0045B0769140AE1C59B2A6.crl (hash: dfNs4iJ5+aHOuNn24rA/5Uz2Y6CLijj+nqFrtFy9sn8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.crl
rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:30:c0:5e:36:21:cf:be:c9:75:7b:8a:dd:ae:a7:00:8d:9a:91:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A41E81A674D539D19E0045B0769140AE1C59B2A6
Validity
Not Before: Sep 17 03:33:01 2026 GMT
Not After : Sep 18 04:38:01 2026 GMT
Subject: CN=E4260E94F4F94A3218815C8FBEC2C938F805E8E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:b0:42:77:86:ff:54:90:ae:9a:7a:29:8b:
fb:16:de:bd:35:92:f5:4f:c1:24:5a:61:1c:e3:86:
5e:7d:8f:ba:e8:ec:60:31:6e:79:95:23:76:50:69:
77:6f:94:42:47:e8:a4:a6:d9:21:a3:14:d1:44:6d:
b8:d7:64:8a:98:2b:da:7b:bd:93:bb:f4:00:32:67:
c6:13:bc:ad:c1:79:31:2b:34:52:b7:20:dc:d6:32:
b3:41:e7:26:73:de:b0:33:c8:b3:56:8d:6b:c1:fa:
41:c4:65:88:5e:db:44:f9:c3:0a:8c:df:b7:27:15:
0f:17:15:f3:3d:b9:6b:1a:be:97:34:33:29:e1:63:
39:fe:01:f9:6c:31:0b:d3:69:bf:a0:f1:b8:b3:be:
94:ad:e4:91:72:23:2e:aa:f6:e0:0a:40:f7:39:33:
b4:18:dd:9c:0e:2d:5e:4b:cf:94:7b:71:5d:53:a2:
aa:e5:7d:08:d5:af:67:38:fc:74:36:e6:f7:54:8e:
f1:33:08:9b:d1:c2:f3:4e:5c:cf:1f:e3:47:d3:6a:
27:7f:2a:88:17:05:7f:0d:0f:65:a9:59:70:e1:87:
ba:85:5b:47:bc:66:df:1f:a0:8e:3e:58:52:5e:5b:
a0:99:c3:b6:7c:57:88:b0:df:d7:49:3d:96:32:96:
23:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:26:0E:94:F4:F9:4A:32:18:81:5C:8F:BE:C2:C9:38:F8:05:E8:E1
X509v3 Authority Key Identifier:
keyid:A4:1E:81:A6:74:D5:39:D1:9E:00:45:B0:76:91:40:AE:1C:59:B2:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41E81A674D539D19E0045B0769140AE1C59B2A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/A41E81A674D539D19E0045B0769140AE1C59B2A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0f:f0:4e:17:22:4a:f2:95:71:29:10:4b:f9:20:11:ec:e5:
d8:ff:4d:41:a6:68:38:39:d7:da:30:d3:23:9e:c6:6d:76:41:
aa:3c:70:69:d5:d7:0c:a7:68:2e:57:4e:6d:c8:22:cd:48:e3:
d5:cb:00:77:c2:7b:3e:83:ce:68:ae:61:3f:4c:12:56:c4:05:
ed:dd:d4:3b:82:e0:43:e4:54:74:ff:72:ac:5e:e9:81:2d:4a:
79:01:2e:38:ae:a7:27:82:5a:73:42:9e:6f:6a:5f:00:cc:01:
eb:06:21:26:f9:8b:27:ac:5e:42:31:d2:24:d8:a7:72:c5:93:
bb:b8:4f:31:fb:f7:43:2d:8d:d9:34:5b:ce:d4:e5:91:a9:43:
d9:88:76:49:0d:61:5b:af:12:a9:a8:aa:06:1d:42:f8:76:6e:
ed:76:ef:5c:2d:4c:00:6f:e1:05:55:b4:a8:29:99:ad:ca:d2:
58:36:80:b3:34:02:27:c5:a7:b9:7b:cd:56:fb:55:13:d7:3e:
5f:21:3e:47:2c:9e:b0:99:22:88:d6:d0:03:b0:83:9e:fb:43:
4f:ec:cc:28:e9:09:5b:f1:b6:75:c9:9a:90:04:d2:96:e0:bf:
30:13:5e:b9:29:a8:fe:da:8f:1f:db:9d:5f:e4:99:ca:60:55:
6f:73:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:23:00 2026 by rpki-client