
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
File: A008821941A61F29770FC73A584B71178BCAE916.mft (raw, json)
Hash identifier: f2+4XSwCcCobcU9ZhzjG3a4Nr1bXvM0bj6MJwgYRjxs=
Subject key identifier: EE:32:79:03:7C:1A:67:6E:CF:71:7D:CE:64:08:E9:98:04:96:7E:E5
Authority key identifier: A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16
Certificate issuer: /CN=A008821941A61F29770FC73A584B71178BCAE916
Certificate serial: 41099F2C4847B39B1FC0152BFC19ACE527089C8E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
Manifest number: 94
Signing time: Wed 19 Aug 2026 21:34:56 +0000
Manifest this update: Wed 19 Aug 2026 21:29:56 +0000
Manifest next update: Thu 20 Aug 2026 23:39:56 +0000
Files and hashes: 1: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: MEn9rSCA+X2qT8GUKSJ4R7eRC44YahAnX3SQmIywZAg=)
2: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: IsFb+2IB3+NAOmMQ4bANX3K12nM98beEkYNtdgmBcMk=)
3: A008821941A61F29770FC73A584B71178BCAE916.crl (hash: VxNt36ZkxEk6tjYLyox6eT8/YHY660AwzEO+LE4ttNM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl
rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 23:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:09:9f:2c:48:47:b3:9b:1f:c0:15:2b:fc:19:ac:e5:27:08:9c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A008821941A61F29770FC73A584B71178BCAE916
Validity
Not Before: Aug 19 21:29:56 2026 GMT
Not After : Aug 20 23:39:56 2026 GMT
Subject: CN=EE3279037C1A676ECF717DCE6408E99804967EE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:33:7f:ee:3a:eb:40:75:a3:60:10:c8:fd:
e6:b5:7f:ee:ef:cf:61:d2:d9:55:84:02:52:ff:a1:
26:73:2f:a0:73:3b:e2:cc:f2:c2:35:a6:59:63:60:
ef:8f:cd:fb:f0:84:24:e1:d6:18:35:fa:f5:85:88:
2b:68:89:a4:71:50:e5:60:25:f1:9b:46:d5:91:f3:
2c:64:3b:cf:68:7f:7c:17:a7:29:62:ef:38:a2:15:
e0:3d:d4:f7:f6:27:50:87:0f:5f:6f:3e:2e:51:04:
5f:f2:cd:80:5f:7c:be:d5:8d:56:ed:62:53:dc:63:
7c:96:b0:2a:8d:44:16:75:30:02:c5:a3:6a:05:dd:
dc:10:96:47:27:fe:31:31:45:73:89:91:66:e6:f8:
d5:5c:48:93:78:c0:ce:1d:d4:b9:11:4c:9a:d6:ad:
5d:f7:76:2d:38:f2:47:87:31:15:58:2b:14:61:ff:
01:dd:f2:63:41:f8:59:1f:fa:10:5e:b4:65:e6:58:
b9:9c:86:75:09:1e:dd:ba:45:04:cd:26:4b:31:9a:
ed:8d:94:ae:e5:ff:7a:04:a4:10:d3:b0:4c:55:69:
c7:d0:31:41:2b:25:f6:41:6c:d3:2a:a7:09:79:5c:
84:db:8d:60:95:1e:f0:08:0d:d6:c7:b3:cc:d1:b3:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:32:79:03:7C:1A:67:6E:CF:71:7D:CE:64:08:E9:98:04:96:7E:E5
X509v3 Authority Key Identifier:
keyid:A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f4:7a:a3:82:a1:e4:e4:59:a3:4d:32:ae:3b:c7:a8:65:f9:
2f:29:81:9b:2a:9b:0a:50:23:48:8d:5d:b0:9f:49:20:0c:ef:
e1:27:75:c3:64:42:ca:a0:76:f9:c3:e7:72:29:bc:33:59:79:
61:0e:17:46:f0:82:9b:dc:50:00:9a:5c:8c:c2:15:61:0c:3d:
d8:39:4c:1f:cf:dd:64:dc:7d:cd:f5:6a:da:a7:1d:cf:45:87:
9b:48:cb:18:aa:96:3e:f4:25:bd:39:c4:ca:3d:c0:47:82:12:
c7:e4:e5:48:70:ac:85:67:34:ef:50:70:b3:a7:fe:b4:90:b2:
47:54:e5:84:1c:ff:ab:63:f6:bb:e1:02:97:66:4a:8d:68:bf:
77:f0:b4:26:29:63:38:20:a5:a7:c0:c8:42:ea:3d:d6:ba:bc:
f1:82:d5:94:6b:bc:a8:d2:39:55:53:79:b9:e1:a0:95:35:6f:
54:a0:be:1c:a3:e6:e1:39:03:db:fa:32:c6:bb:4e:27:bd:ae:
e2:79:2b:ea:22:61:ce:1e:fc:67:29:80:65:29:fe:80:ba:1c:
c9:80:33:05:3d:0e:3e:e3:dc:b8:22:53:4d:8c:f9:e6:e8:56:
03:37:a6:07:4a:38:83:f8:63:74:ae:6e:7a:b1:95:39:11:e9:
55:92:5f:26
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQQmfLEhHs5sfwBUr/Bms5ScInI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4
QkNBRTkxNjAeFw0yNjA4MTkyMTI5NTZaFw0yNjA4MjAyMzM5NTZaMDMxMTAvBgNV
BAMTKEVFMzI3OTAzN0MxQTY3NkVDRjcxN0RDRTY0MDhFOTk4MDQ5NjdFRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrIzN/7jrrQHWjYBDI/ea1f+7v
z2HS2VWEAlL/oSZzL6BzO+LM8sI1plljYO+PzfvwhCTh1hg1+vWFiCtoiaRxUOVg
JfGbRtWR8yxkO89of3wXpyli7ziiFeA91Pf2J1CHD19vPi5RBF/yzYBffL7VjVbt
YlPcY3yWsCqNRBZ1MALFo2oF3dwQlkcn/jExRXOJkWbm+NVcSJN4wM4d1LkRTJrW
rV33di048keHMRVYKxRh/wHd8mNB+Fkf+hBetGXmWLmchnUJHt26RQTNJksxmu2N
lK7l/3oEpBDTsExVacfQMUErJfZBbNMqpwl5XITbjWCVHvAIDdbHs8zRsxE1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7jJ5A3waZ27PcX3OZAjpmASWfuUwHwYDVR0j
BBgwFoAUoAiCGUGmHyl3D8c6WEtxF4vK6RYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmFhZDZhM2YtNmNhMC00NjY5LTk4ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0
MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4QkNBRTkxNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMDA4ODIxOTQxQTYxRjI5NzcwRkM3M0E1ODRCNzExNzhCQ0FF
OTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFhZDZhM2YtNmNhMC00NjY5LTk4
ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0Qjcx
MTc4QkNBRTkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADn0eqOCoeTkWaNNMq47x6hl+S8pgZsqmwpQ
I0iNXbCfSSAM7+EndcNkQsqgdvnD53IpvDNZeWEOF0bwgpvcUACaXIzCFWEMPdg5
TB/P3WTcfc31atqnHc9Fh5tIyxiqlj70Jb05xMo9wEeCEsfk5UhwrIVnNO9QcLOn
/rSQskdU5YQc/6tj9rvhApdmSo1ov3fwtCYpYzggpafAyELqPda6vPGC1ZRrvKjS
OVVTebnhoJU1b1Sgvhyj5uE5A9v6Msa7Tie9ruJ5K+oiYc4e/GcpgGUp/oC6HMmA
MwU9Dj7j3LgiU02M+eboVgM3pgdKOIP4Y3SubnqxlTkR6VWSXyY=
-----END CERTIFICATE-----
Generated at Thu Aug 20 10:25:28 2026 by rpki-client