
$ rpki-client -vvf rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft
File: A7FB244B07B590E887183B90A5F474AF8A740E0D.mft (raw, json)
Hash identifier: Bzuh1cfotKevZfWYOr/8RTemz/4q/U6eBQ2SR9iN2sw=
Subject key identifier: A5:16:D9:E5:AF:87:F5:96:69:63:1D:98:A0:98:30:CD:9F:9F:5B:62
Authority key identifier: A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D
Certificate issuer: /CN=A7FB244B07B590E887183B90A5F474AF8A740E0D
Certificate serial: 2BC606F44AC3F3E61E8A778D00AEF3B1AE7CCB47
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 13:33:15 +0000
Manifest this update: Thu 18 Jun 2026 13:28:15 +0000
Manifest next update: Fri 19 Jun 2026 13:49:15 +0000
Files and hashes: 1: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: 1rPPrUPUYQqxaBIZqYAyAxfvcUpoRBq/uR7Dh5JxpYE=)
2: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: O4W7xGyLdg25nBLD06FHdWKOQMvZ4LJiQpV+BuyHkrg=)
3: A7FB244B07B590E887183B90A5F474AF8A740E0D.crl (hash: fPSTSC8UDuhhLJgUPQTdjV3/StsqaZWGcdg0+3W6P0w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl
rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c6:06:f4:4a:c3:f3:e6:1e:8a:77:8d:00:ae:f3:b1:ae:7c:cb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7FB244B07B590E887183B90A5F474AF8A740E0D
Validity
Not Before: Jun 18 13:28:15 2026 GMT
Not After : Jun 19 13:49:15 2026 GMT
Subject: CN=A516D9E5AF87F59669631D98A09830CD9F9F5B62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:ed:3d:25:38:32:8e:88:eb:f0:74:f9:eb:
ad:5d:6b:37:a7:19:22:32:28:45:9b:ae:22:6e:4e:
75:90:48:a9:69:22:74:5a:59:7d:66:1e:cd:fa:63:
9b:d9:42:9a:f5:a2:46:06:10:bd:74:74:8a:4b:bc:
35:30:68:a5:67:4f:76:d2:64:ff:22:de:8f:8e:45:
ce:87:6b:02:1f:9b:f1:de:3b:7e:f0:14:82:e2:bd:
c0:5d:e4:76:93:8d:fb:d2:5a:b7:d2:21:67:d1:85:
ac:42:59:73:e0:32:da:20:8e:df:44:fa:c4:69:97:
1d:c4:70:ac:98:52:69:01:f2:cc:e0:60:bc:92:c5:
43:78:7e:06:0a:bc:3a:82:ce:a8:e0:b7:f1:5f:aa:
81:8d:a5:f7:85:0c:f0:a5:dc:07:bb:38:8a:90:c0:
87:df:3d:8b:c4:86:e2:d7:86:64:f1:d7:7e:32:d0:
42:a3:f3:70:be:b9:75:c3:67:20:de:5e:6c:a6:08:
32:ff:ad:d2:04:ab:79:de:5c:73:05:97:19:69:c7:
9d:c3:ff:7c:ec:a7:2f:c0:46:c0:3e:f5:6f:c3:bc:
0d:8b:12:b7:10:f7:bc:d6:b9:b5:c0:cc:3d:91:81:
b9:cc:9e:48:86:ce:6c:d9:a8:6a:a6:9e:0f:ed:17:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:16:D9:E5:AF:87:F5:96:69:63:1D:98:A0:98:30:CD:9F:9F:5B:62
X509v3 Authority Key Identifier:
keyid:A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5b:62:98:b1:46:ce:ae:37:1a:30:46:f6:a9:b3:74:6a:ce:
0b:70:c0:d5:59:b6:32:dd:15:3c:03:87:5a:b0:e9:9d:42:a2:
a9:94:60:b4:56:58:43:da:d8:a3:a0:f4:b3:90:26:d6:9a:ab:
af:c9:ad:7d:24:0f:eb:64:5f:03:8d:be:24:4a:dd:43:20:c6:
8f:8f:5b:b0:b6:b5:4e:79:e6:2d:b7:30:01:85:26:12:d5:a5:
bf:c3:b2:00:66:73:c1:b6:08:c1:26:46:02:c8:c2:96:b0:79:
6b:6e:a5:a6:0e:69:bd:32:0e:4c:d7:89:bc:0c:d4:df:af:bc:
b3:dd:96:ac:56:19:14:b8:b8:c3:03:fc:ec:5a:ef:0f:b7:f0:
76:84:d9:46:73:b7:e8:4c:2c:09:a6:ac:8a:56:c4:ab:c0:c4:
45:77:98:28:ab:d5:05:26:63:27:f5:27:e8:49:18:2c:3d:74:
a6:c1:52:73:df:78:d1:b8:fd:ab:51:63:80:1a:eb:fb:a2:c7:
53:c6:ff:04:5f:f4:a5:4a:c2:69:3a:92:40:90:a1:41:68:fd:
c3:ac:4c:54:9b:3e:18:d7:af:4f:d9:a8:1c:9f:d5:e1:f4:0d:
d1:3f:f5:0b:58:f3:39:1c:76:27:52:f5:2f:08:b3:0a:8e:0a:
87:7d:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:14:07 2026 by rpki-client