
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
File: A008821941A61F29770FC73A584B71178BCAE916.mft (raw, json)
Hash identifier: WgN2E0k1xAH78m37fONmyDDGp1/DS6lCdaSyiMYk6ck=
Subject key identifier: 53:ED:3F:A6:DE:52:67:2A:60:D6:60:B3:12:32:76:B9:5C:D7:DE:2F
Authority key identifier: A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16
Certificate issuer: /CN=A008821941A61F29770FC73A584B71178BCAE916
Certificate serial: 5BEE3C276703E20892B9682AF587CF0D786D8893
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
Manifest number: 43
Signing time: Sat 20 Jun 2026 08:19:43 +0000
Manifest this update: Sat 20 Jun 2026 08:14:43 +0000
Manifest next update: Sun 21 Jun 2026 10:59:43 +0000
Files and hashes: 1: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: IsFb+2IB3+NAOmMQ4bANX3K12nM98beEkYNtdgmBcMk=)
2: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: MEn9rSCA+X2qT8GUKSJ4R7eRC44YahAnX3SQmIywZAg=)
3: A008821941A61F29770FC73A584B71178BCAE916.crl (hash: t+p4IvY5ZDAo1J+QuraOlwtj3M+OFCqMX0FSvMyvHYA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl
rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 10:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ee:3c:27:67:03:e2:08:92:b9:68:2a:f5:87:cf:0d:78:6d:88:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A008821941A61F29770FC73A584B71178BCAE916
Validity
Not Before: Jun 20 08:14:43 2026 GMT
Not After : Jun 21 10:59:43 2026 GMT
Subject: CN=53ED3FA6DE52672A60D660B3123276B95CD7DE2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:4b:ed:5e:c9:14:b4:16:97:61:7d:23:47:
1c:25:b1:de:4d:2c:76:61:ab:4b:a9:64:82:01:f1:
98:48:b1:f7:dd:17:50:e3:a7:99:46:81:3e:c5:6d:
d7:83:4f:1f:9b:19:3e:55:ee:29:3f:b9:53:25:e9:
88:e6:36:e7:07:f6:af:22:fc:ad:c9:10:89:43:75:
83:24:7f:dc:29:09:b1:ac:22:5a:6a:07:b6:30:e2:
3e:b0:39:e1:4e:24:d6:1c:9a:ca:1f:72:c4:00:be:
97:59:7d:f4:2a:b4:ed:87:7a:a5:ab:0a:73:c6:22:
da:3e:ea:94:c1:ea:85:46:f0:95:6e:c1:04:cb:aa:
39:05:9e:3f:c5:3c:a0:ab:33:0d:4b:b1:9b:5d:b0:
6b:20:49:d2:0e:97:51:c0:d7:16:8e:82:f6:10:de:
e2:11:1f:4b:91:9b:0f:7b:6d:fa:55:1f:09:4b:8b:
f9:65:0f:e2:4b:11:58:ed:ec:57:91:4d:1c:eb:2b:
56:44:b2:8f:34:05:ad:50:da:22:a4:1a:1d:30:91:
74:a5:e1:63:07:b3:62:f0:17:91:0a:b4:9c:26:3e:
f0:15:38:bd:ef:05:eb:ca:9a:44:ec:2b:da:45:b1:
96:f5:7d:bd:13:eb:5e:27:ab:b6:18:e4:17:c8:49:
c6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:3F:A6:DE:52:67:2A:60:D6:60:B3:12:32:76:B9:5C:D7:DE:2F
X509v3 Authority Key Identifier:
keyid:A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c2:82:a1:57:f5:40:39:ef:16:98:77:15:dd:7e:a1:87:58:
44:63:55:c6:7e:6a:93:4d:b9:b7:3b:c2:0a:29:e7:d1:3c:ed:
7a:6b:9b:b2:db:94:cb:8c:25:10:7e:1d:bf:87:7b:07:71:f8:
96:d1:30:38:9b:5e:a8:bd:34:a0:6f:56:6d:b4:7f:b9:64:47:
3c:82:2b:5c:6a:2c:d7:a2:11:60:03:39:d6:80:0e:ff:b4:20:
8c:14:d3:32:7e:bc:76:01:ab:d8:38:b9:7e:8b:7c:c5:1c:d6:
d4:ab:a2:68:42:46:63:70:c6:41:26:2d:7f:33:b2:61:c4:a5:
97:92:51:ea:52:54:81:55:d2:60:a9:57:7d:fe:ec:42:e7:bc:
ed:3d:9f:ac:12:7c:57:75:87:ab:9a:87:a8:73:03:1f:42:fb:
ab:81:17:33:89:4c:e8:12:cf:48:d3:40:3a:80:b6:0c:c2:71:
a5:47:8d:84:9c:fd:0b:e6:b1:fb:87:fb:e4:29:35:35:b9:d1:
be:df:d7:f8:84:60:b6:b2:73:84:20:0e:dc:cf:e5:98:ee:69:
a0:bc:6c:34:79:e9:d3:b2:3c:87:8d:df:4b:a9:94:59:45:1c:
44:db:b2:31:1b:1d:8e:37:1f:cf:fb:8a:98:db:77:f6:8e:a8:
6f:75:d5:4b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUW+48J2cD4giSuWgq9YfPDXhtiJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4
QkNBRTkxNjAeFw0yNjA2MjAwODE0NDNaFw0yNjA2MjExMDU5NDNaMDMxMTAvBgNV
BAMTKDUzRUQzRkE2REU1MjY3MkE2MEQ2NjBCMzEyMzI3NkI5NUNEN0RFMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVkvtXskUtBaXYX0jRxwlsd5N
LHZhq0upZIIB8ZhIsffdF1Djp5lGgT7FbdeDTx+bGT5V7ik/uVMl6YjmNucH9q8i
/K3JEIlDdYMkf9wpCbGsIlpqB7Yw4j6wOeFOJNYcmsofcsQAvpdZffQqtO2HeqWr
CnPGIto+6pTB6oVG8JVuwQTLqjkFnj/FPKCrMw1LsZtdsGsgSdIOl1HA1xaOgvYQ
3uIRH0uRmw97bfpVHwlLi/llD+JLEVjt7FeRTRzrK1ZEso80Ba1Q2iKkGh0wkXSl
4WMHs2LwF5EKtJwmPvAVOL3vBevKmkTsK9pFsZb1fb0T614nq7YY5BfIScaNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUU+0/pt5SZypg1mCzEjJ2uVzX3i8wHwYDVR0j
BBgwFoAUoAiCGUGmHyl3D8c6WEtxF4vK6RYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmFhZDZhM2YtNmNhMC00NjY5LTk4ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0
MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4QkNBRTkxNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMDA4ODIxOTQxQTYxRjI5NzcwRkM3M0E1ODRCNzExNzhCQ0FF
OTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFhZDZhM2YtNmNhMC00NjY5LTk4
ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0Qjcx
MTc4QkNBRTkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGrCgqFX9UA57xaYdxXdfqGHWERjVcZ+apNN
ubc7wgop59E87Xprm7LblMuMJRB+Hb+Hewdx+JbRMDibXqi9NKBvVm20f7lkRzyC
K1xqLNeiEWADOdaADv+0IIwU0zJ+vHYBq9g4uX6LfMUc1tSromhCRmNwxkEmLX8z
smHEpZeSUepSVIFV0mCpV33+7ELnvO09n6wSfFd1h6uah6hzAx9C+6uBFzOJTOgS
z0jTQDqAtgzCcaVHjYSc/QvmsfuH++QpNTW50b7f1/iEYLayc4QgDtzP5ZjuaaC8
bDR56dOyPIeN30uplFlFHETbsjEbHY43H8/7ipjbd/aOqG911Us=
-----END CERTIFICATE-----
Generated at Sat Jun 20 11:43:03 2026 by rpki-client