
$ rpki-client -vvf rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
File: A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft (raw, json)
Hash identifier: 3aaPeBYK6fxHOBBTVSGN9aCWJ13qEo6XUk7kSCqQayo=
Subject key identifier: 04:3E:79:7D:34:E4:40:7C:10:85:4B:4C:AB:18:51:F7:AB:4D:78:56
Authority key identifier: A2:CA:26:36:D9:0E:CE:E0:30:80:29:4F:58:D8:AB:8A:1B:34:99:96
Certificate issuer: /CN=A2CA2636D90ECEE03080294F58D8AB8A1B349996
Certificate serial: 74BA673E7577AC652CE621CF694186E2DD94200F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
Manifest number: 11
Signing time: Thu 14 May 2026 04:36:13 +0000
Manifest this update: Thu 14 May 2026 04:31:13 +0000
Manifest next update: Fri 15 May 2026 07:14:13 +0000
Files and hashes: 1: 3135372e32302e3233362e302f32342d3234203d3e203538333639.roa (hash: BrEAiFV+dHptCn088oRLw0yFHBOD29YxvGJgz6+xTEs=)
2: A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl (hash: pycKKXcv1yEI4D0HhGz99NZLSM/IQwJfHs5EROvqS8E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl
rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 15 May 2026 04:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ba:67:3e:75:77:ac:65:2c:e6:21:cf:69:41:86:e2:dd:94:20:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2CA2636D90ECEE03080294F58D8AB8A1B349996
Validity
Not Before: May 14 04:31:13 2026 GMT
Not After : May 15 07:14:13 2026 GMT
Subject: CN=043E797D34E4407C10854B4CAB1851F7AB4D7856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:06:7e:ce:17:5a:a4:53:3e:bc:a4:3f:05:
fa:3d:0e:1a:cb:b8:10:91:86:b9:f6:2e:d5:29:c4:
4c:e9:e1:92:dc:40:b9:a7:1e:04:da:a8:25:ff:de:
1a:c1:37:ec:f0:96:da:c7:69:a9:4e:1b:76:c7:6b:
0d:09:55:a5:d1:f2:8f:4b:d6:38:8c:af:77:ec:c7:
0e:fe:e7:0b:44:64:ae:e1:68:f6:f1:ab:d0:9e:5d:
63:24:03:d9:7d:f6:74:87:6f:ea:18:b6:52:54:ba:
e4:16:bf:2a:4a:b5:23:aa:73:3c:01:59:35:83:c7:
d3:0d:e9:9c:e1:b4:e6:ff:70:da:00:42:99:c5:a0:
9a:b8:dd:3d:3f:84:b6:5f:c7:19:85:cc:86:51:14:
b4:b2:c5:03:31:4a:72:b9:34:ea:69:c2:a3:d9:12:
00:02:ee:76:b8:5b:e4:8d:e1:c6:41:44:62:3f:2e:
6e:42:32:1d:51:49:8b:70:2e:e8:85:43:04:48:19:
6f:f4:93:ba:f6:6c:7e:5e:69:1e:81:92:d7:74:ef:
75:90:1f:a4:e9:8b:8d:8e:8b:a3:c0:28:ce:a0:cf:
e2:da:27:1e:2f:80:94:d1:24:85:48:90:e2:17:aa:
8c:23:33:6b:80:82:46:6a:48:85:3f:55:4a:98:82:
91:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3E:79:7D:34:E4:40:7C:10:85:4B:4C:AB:18:51:F7:AB:4D:78:56
X509v3 Authority Key Identifier:
keyid:A2:CA:26:36:D9:0E:CE:E0:30:80:29:4F:58:D8:AB:8A:1B:34:99:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0d:ee:75:f3:d8:e4:b5:33:e6:c5:f6:aa:1c:cf:85:5a:ad:
10:24:81:3f:f0:6f:1c:ec:7f:79:9a:8b:dc:8d:10:c6:50:15:
da:a1:42:f7:f9:3c:fb:1c:36:c5:7c:3a:77:01:69:51:e1:04:
a1:50:42:40:c9:56:1d:c8:df:fb:7d:96:b9:31:f3:90:2d:fb:
cb:5c:5a:e5:d4:07:6b:ae:a2:27:7d:aa:92:ca:5e:d9:37:14:
b6:f1:06:61:b7:ce:85:d8:8f:d0:fc:f1:86:af:61:a3:6b:f5:
e1:f6:97:87:b7:4c:af:76:3b:a8:7e:45:c1:95:ea:b9:10:f9:
15:3b:af:66:71:68:6d:4c:88:82:d6:15:e1:2d:92:e6:f1:59:
d1:e3:40:3e:7a:0f:28:86:62:f3:ec:41:81:99:5b:f8:cc:ef:
cf:37:b2:2e:ad:6e:61:b1:67:03:18:b6:f1:b2:b0:ae:e6:64:
43:c7:4c:62:45:3a:45:c9:cb:1d:7a:43:4b:eb:b7:09:8e:50:
64:f4:b8:57:00:4a:00:bd:72:67:6c:be:0a:9f:05:4b:b3:5c:
a1:6c:d2:e1:08:71:fd:66:7c:11:3b:dd:f2:b2:22:01:fa:42:
c9:dd:26:23:a3:36:9f:2c:21:b6:89:13:2a:a6:c5:4e:57:8b:
d8:38:b7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 09:09:46 2026 by rpki-client