
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft
File: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft (raw, json)
Hash identifier: jUqCT86ifo6LdliqyEn6HIqSJvppJC4viX+BB1EbBtk=
Subject key identifier: 34:93:5D:D3:C6:A2:7C:1F:51:1D:BA:69:E0:42:6F:5E:17:DE:10:2C
Authority key identifier: A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2
Certificate issuer: /CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2
Certificate serial: 4AEE63EF47CCFF9779C271DB89BA571D3CBD4DF3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft
Manifest number: BA
Signing time: Fri 18 Sep 2026 09:35:08 +0000
Manifest this update: Fri 18 Sep 2026 09:30:08 +0000
Manifest next update: Sat 19 Sep 2026 13:22:08 +0000
Files and hashes: 1: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl (hash: GXjegmRIsDQedaTBeJvUN4X3L1ow9JAG5z8uNxLUFxk=)
2: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: C+h1+9cN0GpUOXDh90MHekCqY6uk6Swn27VB4kNaByQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl
rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Sep 2026 07:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ee:63:ef:47:cc:ff:97:79:c2:71:db:89:ba:57:1d:3c:bd:4d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2
Validity
Not Before: Sep 18 09:30:08 2026 GMT
Not After : Sep 19 13:22:08 2026 GMT
Subject: CN=34935DD3C6A27C1F511DBA69E0426F5E17DE102C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:c2:91:51:3f:83:c7:db:64:53:5a:4f:fe:
d9:8f:5b:83:fa:c9:d1:5c:eb:3e:bc:4e:fe:be:25:
2d:7a:d4:12:ef:93:ba:ba:15:d6:db:32:77:5b:41:
f3:2d:7b:4c:de:65:d4:36:45:9b:8f:41:43:dc:a8:
91:c7:44:ce:6d:f2:19:b7:1b:cb:40:72:53:74:50:
29:3e:aa:7d:a3:53:08:f6:51:a9:5c:17:f9:b3:37:
53:be:ed:45:27:17:94:e8:12:de:c8:67:78:e7:7f:
fa:34:b0:6d:7d:bc:a5:e4:6a:08:d2:9e:1d:1f:f9:
fc:44:4a:21:b5:8e:d4:70:3d:e7:ea:03:ce:57:ba:
ad:a2:3b:9e:b0:25:c9:2e:7f:63:28:61:c6:cd:cb:
d2:70:2c:97:df:97:92:fb:66:9a:2c:42:e4:7e:4c:
41:89:a3:f8:06:c9:ae:9a:64:84:47:a8:85:92:a4:
34:d2:f9:b8:f3:ab:b9:66:38:0e:a7:09:44:68:48:
7e:23:bd:49:30:7d:d1:f6:25:5b:4f:a1:3d:e9:64:
4c:ec:92:9c:5c:86:dc:1e:28:c3:f9:27:1c:3e:fe:
80:f7:60:b2:02:e7:de:26:55:28:a8:3c:ff:3a:d6:
9d:3a:de:cf:c0:31:9a:27:4b:ff:cb:25:da:91:03:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:93:5D:D3:C6:A2:7C:1F:51:1D:BA:69:E0:42:6F:5E:17:DE:10:2C
X509v3 Authority Key Identifier:
keyid:A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:76:96:29:8b:11:80:78:11:49:16:2e:63:3c:ef:aa:89:74:
83:b2:cd:f4:39:f2:6c:30:f2:37:23:09:10:14:da:dd:7a:e6:
b0:5c:0e:05:af:98:99:4f:9f:ee:60:ff:46:4b:15:79:86:e4:
5a:97:a5:94:6a:bc:3c:8e:37:ea:a9:8e:2c:b4:a9:cb:3b:4c:
25:d9:e3:a9:3b:22:0c:06:ce:24:92:ae:bf:a4:7e:25:0b:c7:
c9:1e:44:e8:26:45:01:58:a9:25:ec:9a:24:e6:78:63:d1:67:
8b:82:b8:18:9c:21:18:0f:f8:98:8c:76:f8:dc:f8:50:bb:5b:
7a:ea:13:7d:c9:6e:08:24:ff:ee:cc:8f:e1:b8:a2:39:03:bc:
77:7f:4f:d8:d7:80:2f:f6:58:51:dd:66:e9:07:66:cd:47:07:
89:b0:be:ef:0e:f9:d2:4b:b3:12:fe:9b:b8:c0:e0:5f:e1:cc:
7c:8e:e3:d3:e9:f1:ac:20:89:58:35:9f:66:aa:83:84:e0:9f:
47:27:89:d7:02:1b:12:ad:04:a2:8a:74:fd:6b:1b:6b:25:17:
98:21:c6:1e:fb:ad:62:6d:54:0d:2d:a6:32:d7:39:b0:dd:4d:
8c:76:b3:98:e9:0a:73:47:83:20:ab:f9:67:8b:da:af:7c:8b:
da:44:27:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:09:14 2026 by rpki-client