
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft
File: A337D214F1B15825AC6178574C28712521D64B38.mft (raw, json)
Hash identifier: PSMyWOr5eWQRFVKcbYwXZKpLhszq4uncj0hXhovfSVA=
Subject key identifier: C5:AF:24:08:04:B6:4D:67:CA:EE:49:80:F9:07:E4:4B:16:BC:5C:B0
Authority key identifier: A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38
Certificate issuer: /CN=A337D214F1B15825AC6178574C28712521D64B38
Certificate serial: 327FD912B7B10A87BFF05B826BE75F0777FEEC2D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft
Manifest number: BA
Signing time: Thu 17 Sep 2026 06:06:05 +0000
Manifest this update: Thu 17 Sep 2026 06:01:05 +0000
Manifest next update: Fri 18 Sep 2026 06:08:05 +0000
Files and hashes: 1: A337D214F1B15825AC6178574C28712521D64B38.crl (hash: YhokX0kpziO9vejb4x3u3l4WwK7YAM0h3YI4Mr9X0ds=)
2: 3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa (hash: eSjZGWM1OyV1yhzjQEoayB2vN+fO3mEGbT4lUzAsfwU=)
3: 3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa (hash: 6ANd8eDpGDry4TmWd8klyvoxo3+q5EgqhgVj7CcAyKQ=)
4: 3130332e32302e3130392e302f32342d3234203d3e20313430343233.roa (hash: m7moeEEKoa7tBNsWW1/WiFxPUHqVNruJHZKBpwqbqkc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl
rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 06:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7f:d9:12:b7:b1:0a:87:bf:f0:5b:82:6b:e7:5f:07:77:fe:ec:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A337D214F1B15825AC6178574C28712521D64B38
Validity
Not Before: Sep 17 06:01:05 2026 GMT
Not After : Sep 18 06:08:05 2026 GMT
Subject: CN=C5AF240804B64D67CAEE4980F907E44B16BC5CB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:56:f5:b9:ed:71:88:37:c6:84:c2:e4:6f:
6f:6e:34:bf:64:3a:2c:6e:e8:06:a1:fd:92:fe:67:
b4:6f:0b:56:fa:c0:52:5a:9e:51:2d:ff:b9:9f:64:
79:e4:09:01:3c:83:ba:41:5a:e4:3b:6a:33:a8:04:
e3:be:23:c6:44:6c:0a:eb:62:07:06:3c:fd:9e:2d:
79:a2:ad:e7:07:63:6b:3c:af:4c:c6:b7:71:db:6f:
3f:d7:61:88:50:ec:dd:55:82:18:96:61:b5:f8:bd:
db:92:8c:5c:a2:e7:83:a5:af:72:e6:da:bb:d4:e9:
0f:56:ad:71:40:f7:bd:35:50:19:dc:d7:85:25:74:
5e:82:c4:aa:13:52:c7:ac:ce:14:f9:4a:e4:25:0e:
d6:c2:d8:77:2f:3f:12:93:0c:b9:3e:f4:e4:4d:fe:
d0:e3:2e:74:a2:f4:75:ba:2c:2b:ee:69:51:1d:2e:
ce:7d:d5:26:57:25:1b:27:6a:b9:44:34:bb:f4:83:
66:ca:c0:a4:b8:98:13:34:97:3a:14:6d:81:0b:6d:
ee:5c:59:aa:00:a8:57:9a:96:4a:f6:84:ad:71:53:
14:ff:f1:d4:3c:86:c6:c2:42:dd:3d:d9:cd:d8:23:
ec:54:cb:a8:e7:12:e3:cd:7b:dc:02:24:72:2f:f5:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AF:24:08:04:B6:4D:67:CA:EE:49:80:F9:07:E4:4B:16:BC:5C:B0
X509v3 Authority Key Identifier:
keyid:A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:84:92:af:60:60:99:a4:9b:de:21:60:60:45:18:c0:20:dc:
c4:c7:f4:1b:d5:c4:2d:f0:7a:db:32:e3:02:44:4c:8c:02:b8:
72:ea:b3:85:7e:87:cc:aa:c5:cf:63:58:f1:a4:69:6b:cd:9c:
0f:54:ab:14:0c:5c:35:0e:56:37:eb:d5:c6:b3:0c:4c:c2:c6:
26:e6:e7:9f:43:a2:c4:e1:be:46:d2:55:93:a4:5c:09:81:16:
d5:c0:e9:7d:45:c2:b4:09:c0:e7:0c:00:ad:4d:56:21:bd:e3:
0b:32:f3:6c:7c:98:f9:9f:a4:df:72:d6:27:81:c0:b4:ac:ba:
12:7e:04:a7:88:2b:a8:26:78:35:7f:2e:b7:80:54:2b:5f:cd:
88:e5:c0:78:a5:21:14:37:ad:62:61:8c:92:09:1c:d3:9f:0b:
bc:9b:b3:96:15:b7:5e:ff:ed:ae:14:83:1b:7c:09:cc:6e:08:
65:c0:0f:a4:14:49:40:fc:76:ae:8b:f6:2b:0b:3b:b5:e4:16:
81:bf:f9:67:58:d4:85:20:ff:47:a8:32:09:f8:27:5c:3e:b2:
d2:ec:41:52:32:f8:76:b5:bb:99:7d:45:c5:1d:a9:68:46:e3:
9b:f7:24:ed:12:a2:99:07:30:ca:b4:44:be:1e:c5:81:82:62:
d6:ae:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:57:19 2026 by rpki-client