
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
File: D59D3CB80F39720CC6378798AF38E978ACC61169.mft (raw, json)
Hash identifier: krCnd4+msyYIQTFh+h3YrcJgH5Cjz2Qsz0DjOVqUiEI=
Subject key identifier: 52:16:30:23:A0:99:49:CC:4D:09:86:C1:1B:47:5F:76:13:88:2C:67
Authority key identifier: D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69
Certificate issuer: /CN=D59D3CB80F39720CC6378798AF38E978ACC61169
Certificate serial: 2252DC9F0CFF282A0E8435F433BE7CC040F3C58E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 23:30:38 +0000
Manifest this update: Tue 28 Jul 2026 23:25:38 +0000
Manifest next update: Thu 30 Jul 2026 01:09:38 +0000
Files and hashes: 1: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: TyeS6OFp+eX9ORLvbkAk7IV44ZT6uQE45kxcvU/K/wA=)
2: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: NXjXH8bagUMJQqwbA86uVF5uVlgJU27CgQDeHpB6ITQ=)
3: D59D3CB80F39720CC6378798AF38E978ACC61169.crl (hash: NdP3GqENHH9g1y+QT1JPab5nvA9BZTwXHLxDvCMoWrM=)
4: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: xDMl4fVPq1KOh6yEyAaFX1Ne1uCSqYoqoG2DK9eXVJc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl
rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:52:dc:9f:0c:ff:28:2a:0e:84:35:f4:33:be:7c:c0:40:f3:c5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D59D3CB80F39720CC6378798AF38E978ACC61169
Validity
Not Before: Jul 28 23:25:38 2026 GMT
Not After : Jul 30 01:09:38 2026 GMT
Subject: CN=52163023A09949CC4D0986C11B475F7613882C67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:ae:08:4d:ea:91:e1:15:90:ed:e8:46:40:
66:74:f1:dd:67:32:5d:19:7f:37:93:3e:6e:b6:d6:
dd:c6:5d:cf:a9:a7:aa:bf:17:eb:21:1a:49:1a:6d:
17:a6:ec:0f:6c:25:e4:d5:71:d9:e1:68:9c:a9:c7:
33:57:ee:35:40:53:c5:03:26:1a:b3:2d:01:69:74:
fb:ba:aa:c3:22:a8:01:bd:af:df:54:b7:a0:9e:a6:
2c:33:8f:94:7d:d6:e5:d9:91:57:12:06:2f:17:b2:
f2:9a:69:93:f0:60:a8:ab:76:74:c7:f1:99:1a:7c:
52:be:50:6b:0f:2c:b2:ba:31:61:28:34:28:fb:5c:
46:d7:ee:57:f5:1f:e5:11:9d:e0:ba:88:60:d8:17:
07:1e:42:50:3d:c0:16:34:3a:11:c5:45:0b:39:5b:
e5:a9:25:15:00:6b:55:67:63:51:9e:0a:9f:b4:f9:
6a:81:65:1a:3e:63:5e:b8:3d:af:f8:49:27:f7:f1:
28:0a:b5:2e:0a:25:c1:83:26:3e:06:d5:e0:1b:50:
70:54:5c:12:99:d5:73:c5:44:03:c2:b3:6e:e1:8f:
9a:fe:c6:d3:09:40:6f:08:23:85:2f:cc:8a:fe:06:
08:b1:8d:96:96:b7:f0:c8:74:4e:ec:1d:2d:09:78:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:16:30:23:A0:99:49:CC:4D:09:86:C1:1B:47:5F:76:13:88:2C:67
X509v3 Authority Key Identifier:
keyid:D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:46:25:57:a1:20:7f:88:d7:76:17:62:55:2b:06:ff:f1:ba:
af:f8:11:ff:51:82:30:41:85:48:57:84:7d:92:68:48:56:d2:
a0:75:88:86:13:fa:df:d3:bc:08:54:e0:9d:a0:b1:69:ec:f5:
b2:47:9f:79:96:e3:39:42:af:dd:8b:61:0a:66:17:1e:36:ef:
43:d8:04:61:27:78:f2:ff:67:b0:82:e6:d8:01:e9:d1:67:03:
b7:e9:67:b2:a1:95:7d:f1:c1:36:63:05:fe:b4:f3:d7:44:a1:
92:53:71:e7:fb:38:58:39:9a:72:59:a2:27:6e:f3:c7:5b:40:
81:76:26:cd:01:08:56:e9:91:8d:39:a5:60:e1:d7:b7:3d:d1:
df:0c:45:f3:ac:31:41:52:c0:28:d6:66:1f:18:6e:85:52:4f:
fe:8c:ee:a4:85:85:8f:df:67:0a:bc:5f:18:3f:44:45:d6:1e:
20:47:6d:c8:f4:5a:ad:92:82:e7:ea:53:c1:40:ef:d9:c9:86:
d8:e5:09:61:6f:20:dd:56:19:72:5c:4f:dd:3c:ea:21:d8:d7:
5c:7d:41:3b:c3:6c:db:5d:ff:f3:0e:5a:98:d2:b8:f1:62:d4:
07:00:e8:54:f9:d0:98:0f:7c:af:d9:36:9d:b0:d1:90:f8:6b:
40:ae:51:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:58:34 2026 by rpki-client