
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft
File: A20182F9E8910D783A73A086F2AE72D89BE78C37.mft (raw, json)
Hash identifier: UPFqnFyTI1jsFea/Xqs7TbsJOooq1rmnh1GpNU64hwo=
Subject key identifier: 99:EB:96:04:36:B0:54:E1:27:0B:B0:FF:CA:1A:EF:A0:F2:D4:69:2A
Authority key identifier: A2:01:82:F9:E8:91:0D:78:3A:73:A0:86:F2:AE:72:D8:9B:E7:8C:37
Certificate issuer: /CN=A20182F9E8910D783A73A086F2AE72D89BE78C37
Certificate serial: 7D7A7BA70E197E35C44AF8B4532A9727BE666503
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A20182F9E8910D783A73A086F2AE72D89BE78C37.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft
Manifest number: F1
Signing time: Wed 28 Oct 2026 21:16:32 +0000
Manifest this update: Wed 28 Oct 2026 21:11:32 +0000
Manifest next update: Fri 30 Oct 2026 00:00:32 +0000
Files and hashes: 1: A20182F9E8910D783A73A086F2AE72D89BE78C37.crl (hash: r67Y/oeF04bI1a+rXgcE9MMhf+LgD5MFW8vN0NG0zQU=)
2: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: LhYIbVJJA5dJnxEypyUmNgz7cp+p/g+/mtBrk7YH2hI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.crl
rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A20182F9E8910D783A73A086F2AE72D89BE78C37.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:7a:7b:a7:0e:19:7e:35:c4:4a:f8:b4:53:2a:97:27:be:66:65:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A20182F9E8910D783A73A086F2AE72D89BE78C37
Validity
Not Before: Oct 28 21:11:32 2026 GMT
Not After : Oct 30 00:00:32 2026 GMT
Subject: CN=99EB960436B054E1270BB0FFCA1AEFA0F2D4692A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d9:08:3b:28:84:da:3e:aa:ae:88:8c:38:4a:
ba:98:5d:15:c7:f9:b2:68:26:4c:10:17:f3:dd:e7:
43:9b:61:cb:62:dc:26:3c:b8:a0:ed:34:83:1e:20:
ce:5d:90:5b:6a:52:eb:5c:81:1e:e0:87:36:58:53:
b4:3e:89:1b:56:e9:fe:d3:97:63:01:4c:65:a8:91:
6e:b3:aa:f1:50:de:55:5d:f0:85:0a:97:ce:a2:03:
56:7f:9a:7f:cf:34:c0:26:6b:05:7e:b1:ed:a0:78:
cf:cd:93:6d:54:42:2e:fa:e2:e4:a5:57:fe:a3:40:
a7:f3:00:c6:54:b1:6e:25:ec:40:49:9d:bf:a0:48:
d2:a1:e8:06:ab:cb:0a:b9:7d:49:97:7a:ba:19:e9:
6e:e7:68:fd:dd:99:78:66:8f:c5:e4:0f:2a:13:07:
1c:63:bf:97:80:6c:05:79:83:40:eb:30:94:6f:ef:
0b:68:b7:69:5e:64:06:06:f2:25:35:d4:d0:93:71:
1a:f9:d1:e1:02:a3:b1:de:d4:76:cc:03:5a:1e:51:
cd:34:f6:5a:1d:ff:aa:34:01:12:73:4b:50:a0:eb:
93:ba:d5:dd:6e:dd:89:2d:e2:b5:5c:a6:d5:d4:ee:
a7:10:18:06:14:45:7f:82:7a:89:6d:5d:6c:c4:a1:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EB:96:04:36:B0:54:E1:27:0B:B0:FF:CA:1A:EF:A0:F2:D4:69:2A
X509v3 Authority Key Identifier:
keyid:A2:01:82:F9:E8:91:0D:78:3A:73:A0:86:F2:AE:72:D8:9B:E7:8C:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A20182F9E8910D783A73A086F2AE72D89BE78C37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d2:31:ad:df:ed:cd:3c:a9:3c:d8:8c:67:98:e8:f4:6c:23:
24:04:a5:4b:50:9b:bf:d9:ac:1b:1a:fa:72:e3:86:2b:0c:45:
21:c5:e3:7c:3c:d8:14:99:ae:70:5e:f2:c5:3c:14:1a:5e:87:
b1:3f:0e:1b:bd:28:b8:96:20:ca:35:41:00:c6:d7:e7:cc:62:
c8:ff:b0:be:e0:2d:75:e5:dd:fb:2d:0e:24:f4:2c:73:9e:54:
48:18:e7:3d:f3:27:40:f1:26:a0:3d:c9:2d:1c:70:2f:2a:ad:
fb:10:f0:a9:0e:36:b3:a2:f3:e4:7e:7d:df:5a:d9:12:2d:8d:
8c:f8:dc:e3:e4:e3:65:61:68:75:e7:26:ac:d1:99:ba:ce:0c:
50:18:ba:96:00:0a:49:9e:bc:ea:9d:62:14:4c:e3:d4:04:ef:
66:7c:e5:b0:b9:f1:e1:24:65:9f:b4:35:f8:a8:a8:57:55:87:
f7:a7:e7:fb:20:33:30:e0:39:78:be:1f:fd:58:2b:4e:e8:26:
95:89:9b:7b:68:3f:99:53:30:5d:8a:bb:56:35:ab:4d:7d:c8:
79:bd:e5:84:71:3c:f8:36:4e:19:b1:d1:6e:36:67:99:8e:28:
48:f3:0f:13:4e:a3:a6:7c:c0:1c:d7:68:c4:05:ef:c7:92:4b:
73:d5:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:48:21 2026 by rpki-client