
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft
File: A1E11F793F01828AF09B99BCD923D78E53C244F8.mft (raw, json)
Hash identifier: 44IQAi1JAWQZbAM0ko8tNSMyy6NZIaWTKZehmXMiXwo=
Subject key identifier: 8B:EC:BC:95:0D:5B:D5:32:49:51:A4:A9:07:A3:CB:55:BA:50:6F:A5
Authority key identifier: A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8
Certificate issuer: /CN=A1E11F793F01828AF09B99BCD923D78E53C244F8
Certificate serial: 130045220C65B3686D47365AF140C835EE791D71
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft
Manifest number: 41
Signing time: Thu 18 Jun 2026 15:35:40 +0000
Manifest this update: Thu 18 Jun 2026 15:30:40 +0000
Manifest next update: Fri 19 Jun 2026 16:39:40 +0000
Files and hashes: 1: A1E11F793F01828AF09B99BCD923D78E53C244F8.crl (hash: /9GkCXjZZLQjQfOLwHi9tPSXNv1QAMbIDjmadIcah+w=)
2: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: UROVvNQkBLkgNHOadPoNQ+qS5gW9uF+lG16ZZ4rQo7Y=)
3: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: aoz9FF3zaBxJcTS/CNaTKvg2hS72RZ/WIHtE0qTjGI0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl
rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 12:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:00:45:22:0c:65:b3:68:6d:47:36:5a:f1:40:c8:35:ee:79:1d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1E11F793F01828AF09B99BCD923D78E53C244F8
Validity
Not Before: Jun 18 15:30:40 2026 GMT
Not After : Jun 19 16:39:40 2026 GMT
Subject: CN=8BECBC950D5BD5324951A4A907A3CB55BA506FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:3b:0d:6a:24:e9:e1:3b:50:5c:54:29:a9:
a8:ae:77:19:91:55:0f:61:e9:8f:c6:e1:dd:64:7d:
9c:a1:b9:50:72:60:fb:f9:c7:80:40:3a:23:30:ac:
60:09:97:5e:c9:e9:f7:a7:ab:b0:52:30:f7:be:af:
95:e7:03:c5:59:90:a8:03:5d:28:6b:3c:3c:75:2f:
1b:ed:78:ea:84:45:97:81:f9:e5:89:7d:e5:73:43:
7d:6a:86:4f:02:ee:50:33:1f:93:da:9e:93:7d:4e:
42:ae:51:9c:1b:0f:04:67:01:8c:f9:29:d0:f5:b5:
7a:80:b8:7b:bd:55:fb:0f:4b:2e:b6:ac:82:76:00:
7b:98:ae:f5:a7:df:fa:1f:2e:08:30:58:33:ff:b2:
f3:b3:f6:a9:80:42:88:fb:d8:50:f2:32:55:4b:23:
2a:a2:90:d3:4d:1f:ee:f8:ce:a9:b7:c7:1b:a3:f8:
6a:2f:b6:40:ca:41:d3:d0:9a:9b:4b:01:99:05:81:
09:ba:41:a9:0c:15:23:f4:23:37:21:bb:75:1f:1e:
2f:97:d6:76:20:a7:1c:a4:01:48:ab:0e:20:64:b0:
9a:bb:24:af:17:12:db:38:7c:cf:27:51:1c:92:4b:
6c:8a:de:8b:8e:43:a7:1b:ee:56:11:ea:aa:8c:eb:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EC:BC:95:0D:5B:D5:32:49:51:A4:A9:07:A3:CB:55:BA:50:6F:A5
X509v3 Authority Key Identifier:
keyid:A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b7:e2:99:9f:b0:e8:52:67:d7:0f:1b:72:1d:d5:0c:f6:f0:
be:fb:6a:2f:8a:ed:1d:8c:02:a8:aa:ae:54:3f:3e:c2:e6:23:
5a:3c:8d:14:03:8e:f1:4a:d1:83:81:3d:d7:9b:60:98:f5:dc:
79:65:78:e8:58:21:13:1c:be:fc:bd:8e:29:61:4b:16:ab:3a:
96:75:0c:43:9a:ec:9b:ca:2d:2e:67:8e:38:1d:de:5d:84:7e:
47:65:d0:92:5d:52:aa:2a:92:32:92:2c:b2:b0:fc:ee:39:71:
94:a5:8a:2e:66:ed:37:3e:e6:d0:5b:92:a2:0c:3e:44:43:2b:
6a:b1:c8:61:9e:8a:90:d8:f3:3a:95:e2:75:8f:aa:53:aa:2c:
1a:0d:c8:1d:2c:3e:f7:2d:d2:05:64:9c:d8:b3:e4:29:ef:b0:
60:85:e9:c7:bc:45:58:f8:24:e9:77:3f:18:62:2b:2c:90:a1:
24:1b:b7:bf:4d:09:36:5d:f9:b7:11:1a:3a:94:ff:5d:2b:57:
59:12:c2:87:66:63:b6:a1:7c:16:07:64:6a:28:34:59:15:ac:
4f:18:86:d1:7b:f8:06:0b:41:ad:67:f6:6a:98:81:f4:25:f4:
e4:eb:07:e8:5b:25:98:f9:0e:6e:8d:85:02:b5:2f:15:f6:3d:
61:05:e0:ff
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEwBFIgxls2htRzZa8UDINe55HXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1
M0MyNDRGODAeFw0yNjA2MTgxNTMwNDBaFw0yNjA2MTkxNjM5NDBaMDMxMTAvBgNV
BAMTKDhCRUNCQzk1MEQ1QkQ1MzI0OTUxQTRBOTA3QTNDQjU1QkE1MDZGQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj1jsNaiTp4TtQXFQpqaiudxmR
VQ9h6Y/G4d1kfZyhuVByYPv5x4BAOiMwrGAJl17J6fenq7BSMPe+r5XnA8VZkKgD
XShrPDx1LxvteOqERZeB+eWJfeVzQ31qhk8C7lAzH5PanpN9TkKuUZwbDwRnAYz5
KdD1tXqAuHu9VfsPSy62rIJ2AHuYrvWn3/ofLggwWDP/svOz9qmAQoj72FDyMlVL
IyqikNNNH+74zqm3xxuj+GovtkDKQdPQmptLAZkFgQm6QakMFSP0Izchu3UfHi+X
1nYgpxykAUirDiBksJq7JK8XEts4fM8nURySS2yK3ouOQ6cb7lYR6qqM6x55AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUi+y8lQ1b1TJJUaSpB6PLVbpQb6UwHwYDVR0j
BBgwFoAUoeEfeT8Bgorwm5m82SPXjlPCRPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2YwYmExZTctZDE0Mi00N2NkLThkOGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkz
RjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1M0MyNDRGOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMUUxMUY3OTNGMDE4MjhBRjA5Qjk5QkNEOTIzRDc4RTUzQzI0
NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk
OGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3
OEU1M0MyNDRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACC34pmfsOhSZ9cPG3Id1Qz28L77ai+K7R2M
AqiqrlQ/PsLmI1o8jRQDjvFK0YOBPdebYJj13HlleOhYIRMcvvy9jilhSxarOpZ1
DEOa7JvKLS5njjgd3l2Efkdl0JJdUqoqkjKSLLKw/O45cZSlii5m7Tc+5tBbkqIM
PkRDK2qxyGGeipDY8zqV4nWPqlOqLBoNyB0sPvct0gVknNiz5CnvsGCF6ce8RVj4
JOl3PxhiKyyQoSQbt79NCTZd+bcRGjqU/10rV1kSwodmY7ahfBYHZGooNFkVrE8Y
htF7+AYLQa1n9mqYgfQl9OTrB+hbJZj5Dm6NhQK1LxX2PWEF4P8=
-----END CERTIFICATE-----
Generated at Thu Jun 18 19:04:05 2026 by rpki-client