
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
File: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft (raw, json)
Hash identifier: s76k3zXHxDK55QCJX2eAqZTx9JNSOOujSCsFtBi3AhY=
Subject key identifier: 60:A3:4C:62:D4:36:BF:CF:2F:1E:63:5A:BD:5A:B2:F3:D8:64:3B:F2
Authority key identifier: A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C
Certificate issuer: /CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C
Certificate serial: 5728592360A249466B556FE321ADA9903FDA3E02
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
Manifest number: 42
Signing time: Fri 19 Jun 2026 21:11:28 +0000
Manifest this update: Fri 19 Jun 2026 21:06:28 +0000
Manifest next update: Sun 21 Jun 2026 00:04:28 +0000
Files and hashes: 1: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: oVthfsHvJfZFfAfPgVnP6RK4i2YXuHXT4TJi3carfJc=)
2: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl (hash: 5gYALJC94ifqCqtVkaco73/WC96befIR/QDJ7BDW97I=)
3: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: Xz4v16/PuWF3xc6NRQS+cFH5cfyFs8wYPFxR2GtXMDw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl
rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:28:59:23:60:a2:49:46:6b:55:6f:e3:21:ad:a9:90:3f:da:3e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C
Validity
Not Before: Jun 19 21:06:28 2026 GMT
Not After : Jun 21 00:04:28 2026 GMT
Subject: CN=60A34C62D436BFCF2F1E635ABD5AB2F3D8643BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:23:45:2f:d8:fd:cf:3e:44:76:9e:14:34:60:
2b:f2:89:ee:d2:ab:d3:6e:b2:43:4f:6e:4e:77:e9:
9c:19:43:29:ed:ec:da:12:ca:ca:92:c8:3a:a3:3a:
23:83:4f:6a:f6:c8:fb:4d:32:92:85:07:d8:d2:54:
e0:21:f6:37:9e:fd:1a:c0:24:40:fe:57:fa:75:0c:
d0:cf:98:95:d9:b0:e0:1d:f0:e7:d9:f9:00:55:bf:
08:f2:cd:6d:f6:ef:27:25:a3:5b:81:bc:e3:16:36:
17:b8:6e:65:9d:9e:d3:d8:78:3c:cd:50:19:3d:80:
56:9b:f8:6c:14:47:1a:89:23:d1:be:43:5e:f3:73:
fc:ed:05:d7:54:2e:92:ee:12:1a:e1:75:20:43:cf:
ba:9a:7e:3c:bb:6d:81:89:a8:01:a4:80:cc:65:1e:
c7:e6:f9:03:30:3e:b4:59:0f:5e:00:42:e7:0c:9e:
8f:88:58:72:13:b2:6e:f0:4b:04:2d:65:36:c2:f7:
11:f8:06:c9:5e:95:ab:a7:6f:f7:03:f9:07:a5:c0:
0f:52:b4:04:08:86:cc:70:34:b8:02:1d:a0:3d:81:
a4:41:46:fe:1f:13:e5:6d:78:33:d9:08:07:ef:c9:
c4:a9:51:52:19:48:a1:8f:cc:34:0d:95:d3:5d:8b:
5b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A3:4C:62:D4:36:BF:CF:2F:1E:63:5A:BD:5A:B2:F3:D8:64:3B:F2
X509v3 Authority Key Identifier:
keyid:A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c5:f7:83:55:25:a8:64:40:78:ac:7e:f6:ab:12:09:45:df:
99:68:c4:b0:78:f6:40:2e:cf:20:00:09:da:77:59:19:4d:f7:
cf:39:53:39:04:6b:f1:8c:df:ce:bd:ca:6d:14:d4:77:88:fd:
b1:a1:4b:3c:5b:76:3b:85:93:bc:84:f0:c7:fa:fe:44:c9:c3:
c4:fa:54:1c:0f:ad:3a:f2:61:55:c8:a4:b3:59:0c:02:de:ec:
69:7c:1c:c1:da:30:17:db:5d:a4:ac:72:3c:a9:0a:3d:e7:9d:
b1:10:1c:27:d3:5d:3a:b0:51:f2:ab:8d:ea:1e:c4:14:1d:6b:
11:22:35:f3:75:2e:98:cf:00:48:1f:46:3d:74:09:b9:df:b9:
37:dc:1b:2a:08:b0:aa:e3:b9:8a:c3:7e:96:17:1b:b2:55:ba:
27:61:d0:df:96:c6:bf:fe:01:83:86:48:6d:ac:cb:5a:9d:09:
2c:44:c1:f6:0c:fb:fe:be:00:40:73:e9:3c:eb:c0:36:94:2a:
3c:b5:81:e4:c4:82:57:02:44:aa:d4:ca:db:27:97:75:6a:c1:
6f:41:5c:6c:5a:1a:01:3f:6b:33:48:7e:5b:46:c2:51:24:f3:
81:14:14:ea:05:48:bd:61:dc:66:21:88:14:a8:d7:7b:fc:20:
a3:75:85:55
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVyhZI2CiSUZrVW/jIa2pkD/aPgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRBNUE1QzI2MDM5QUNGMjE2REYzRTVCMjg0MzQ1Njkz
RUU4RjM0QzAeFw0yNjA2MTkyMTA2MjhaFw0yNjA2MjEwMDA0MjhaMDMxMTAvBgNV
BAMTKDYwQTM0QzYyRDQzNkJGQ0YyRjFFNjM1QUJENUFCMkYzRDg2NDNCRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiI0Uv2P3PPkR2nhQ0YCvyie7S
q9NuskNPbk536ZwZQynt7NoSysqSyDqjOiODT2r2yPtNMpKFB9jSVOAh9jee/RrA
JED+V/p1DNDPmJXZsOAd8OfZ+QBVvwjyzW327yclo1uBvOMWNhe4bmWdntPYeDzN
UBk9gFab+GwURxqJI9G+Q17zc/ztBddULpLuEhrhdSBDz7qafjy7bYGJqAGkgMxl
Hsfm+QMwPrRZD14AQucMno+IWHITsm7wSwQtZTbC9xH4Bslelaunb/cD+QelwA9S
tAQIhsxwNLgCHaA9gaRBRv4fE+VteDPZCAfvycSpUVIZSKGPzDQNldNdi1vhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYKNMYtQ2v88vHmNavVqy89hkO/IwHwYDVR0j
BBgwFoAUpKWlwmA5rPIW3z5bKENFaT7o80wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWQyZmE1MWUtM2ZkNC00NTIwLWIzNzUtMDllZWY1ZTBlNTEwLzAvQTRBNUE1QzI2
MDM5QUNGMjE2REYzRTVCMjg0MzQ1NjkzRUU4RjM0Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNEE1QTVDMjYwMzlBQ0YyMTZERjNFNUIyODQzNDU2OTNFRThG
MzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz
NzUtMDllZWY1ZTBlNTEwLzAvQTRBNUE1QzI2MDM5QUNGMjE2REYzRTVCMjg0MzQ1
NjkzRUU4RjM0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABrF94NVJahkQHisfvarEglF35loxLB49kAu
zyAACdp3WRlN9885UzkEa/GM3869ym0U1HeI/bGhSzxbdjuFk7yE8Mf6/kTJw8T6
VBwPrTryYVXIpLNZDALe7Gl8HMHaMBfbXaSscjypCj3nnbEQHCfTXTqwUfKrjeoe
xBQdaxEiNfN1LpjPAEgfRj10CbnfuTfcGyoIsKrjuYrDfpYXG7JVuidh0N+Wxr/+
AYOGSG2sy1qdCSxEwfYM+/6+AEBz6TzrwDaUKjy1geTEglcCRKrUytsnl3VqwW9B
XGxaGgE/azNIfltGwlEk84EUFOoFSL1h3GYhiBSo13v8IKN1hVU=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:17:17 2026 by rpki-client