
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
File: ADF61245661464C6C8800AFF335206958F2DA807.mft (raw, json)
Hash identifier: Vd64gfhiFEeOl157BWrDzHKEtnje7PCMgrRYZfqwZQo=
Subject key identifier: E2:01:D6:51:16:B4:C9:48:52:29:79:7E:99:4E:B1:F6:F9:6C:A0:EC
Authority key identifier: AD:F6:12:45:66:14:64:C6:C8:80:0A:FF:33:52:06:95:8F:2D:A8:07
Certificate issuer: /CN=ADF61245661464C6C8800AFF335206958F2DA807
Certificate serial: 547941D49E3A5E843F02210FEBCB1ABED03FA068
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF61245661464C6C8800AFF335206958F2DA807.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
Manifest number: BE
Signing time: Sun 20 Sep 2026 22:19:27 +0000
Manifest this update: Sun 20 Sep 2026 22:14:27 +0000
Manifest next update: Mon 21 Sep 2026 22:58:27 +0000
Files and hashes: 1: 3130332e38392e3234322e302f32342d3234203d3e20313530393133.roa (hash: owSfTkypHLSK5DikAhWXjes3F0fNiVqc3tZbIOFlw4s=)
2: ADF61245661464C6C8800AFF335206958F2DA807.crl (hash: 2mf+arjQp35Gkx8Y/+XvJh4+XwNaQ5Hf5FkvxG2CaPM=)
3: 3130332e38392e3234332e302f32342d3234203d3e20313530393133.roa (hash: mnmK9VjAzZX2nXMP/Hz0WV6eU5IRZ0uI7bQgiKIuUvQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.crl
rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF61245661464C6C8800AFF335206958F2DA807.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 22:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:79:41:d4:9e:3a:5e:84:3f:02:21:0f:eb:cb:1a:be:d0:3f:a0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADF61245661464C6C8800AFF335206958F2DA807
Validity
Not Before: Sep 20 22:14:27 2026 GMT
Not After : Sep 21 22:58:27 2026 GMT
Subject: CN=E201D65116B4C9485229797E994EB1F6F96CA0EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:f5:ac:73:56:59:a9:03:73:7b:89:8b:f9:
c5:9b:f2:25:6d:ab:0c:f1:dc:2c:ca:2e:c6:6a:62:
8e:4e:fc:56:28:24:e2:2c:9c:98:5c:de:6c:65:91:
76:fd:15:76:31:0d:30:64:2f:67:3a:f6:78:a6:b1:
b1:34:e0:ef:9b:a4:e0:39:87:95:43:37:71:ee:77:
4b:ef:fb:91:b7:36:35:94:cd:60:5a:15:67:00:3b:
b8:35:16:7b:af:a3:30:99:d2:4a:f2:20:aa:cf:3c:
bf:6b:57:93:20:6e:72:66:38:19:01:d6:ec:18:cf:
0c:86:6e:47:28:98:4f:69:37:8f:da:6e:f5:3a:29:
ad:7f:34:eb:e5:0f:27:0a:2f:33:db:3e:2f:d1:e7:
b2:86:b5:d3:93:38:47:89:76:91:3d:79:3d:6c:f5:
9d:39:37:70:3a:87:9f:e8:92:0e:8d:da:12:64:12:
fa:ce:23:af:fd:64:a1:f5:1f:d3:d2:a4:81:9e:ec:
2f:34:cd:e5:4a:56:1c:e9:ca:69:32:2f:95:e9:b1:
60:58:65:09:8e:c8:15:35:b4:ba:d7:cd:25:64:85:
d7:3c:f5:dc:8c:6c:16:69:76:be:a4:97:e7:9b:30:
10:78:e3:30:7a:3b:0d:84:3d:6b:e6:27:9e:bd:40:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:01:D6:51:16:B4:C9:48:52:29:79:7E:99:4E:B1:F6:F9:6C:A0:EC
X509v3 Authority Key Identifier:
keyid:AD:F6:12:45:66:14:64:C6:C8:80:0A:FF:33:52:06:95:8F:2D:A8:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF61245661464C6C8800AFF335206958F2DA807.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bc:9e:ef:17:0a:0d:42:60:6f:9c:f3:1b:00:f5:8f:0c:a5:
d1:4a:53:78:25:0b:d8:45:a9:4c:b2:5f:f9:ee:16:f3:07:03:
7b:95:7a:34:d8:b0:d0:c4:56:19:cd:1e:3a:76:91:b9:1b:3e:
ea:29:9d:25:f9:12:e8:74:d3:87:97:1e:88:bc:12:5c:a2:66:
14:90:2a:94:6d:34:12:33:bd:8e:16:1b:24:93:4c:88:c5:e0:
78:a7:ec:e3:b0:d7:0b:5c:bb:20:a7:9c:28:9d:7e:dc:e8:90:
29:dc:90:a3:04:9b:90:6a:0c:da:83:80:c0:e8:64:2e:22:72:
f5:c7:ce:f0:d8:f2:e4:da:cb:c9:aa:3f:7d:5f:e9:65:53:85:
a8:25:75:a9:19:ef:0d:00:26:79:56:23:a7:6d:41:c2:78:f8:
5c:02:8a:69:b3:88:42:74:02:38:74:06:25:34:b8:e4:b7:8e:
98:fb:33:64:8d:f0:26:0a:f5:b3:52:a6:d2:e7:b5:30:72:67:
1f:86:58:00:a7:77:22:70:05:93:68:47:cc:a4:a0:04:5b:39:
3d:9c:a8:f1:15:3f:1a:98:53:ff:45:69:ec:19:a2:7c:3d:48:
c7:43:82:c2:bd:21:f9:20:0d:f1:9a:29:c0:2c:d5:ee:c8:75:
ab:50:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:47 2026 by rpki-client