
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft
File: 994E7625F275D75C44DFB4A7ADF4842506F11789.mft (raw, json)
Hash identifier: N/EZz2Qfh+Er5GcTnGT0o21NZHmDXBe12jP2Hy3/oaQ=
Subject key identifier: 03:13:D2:69:38:49:BA:AC:78:AD:92:A5:3B:11:11:9F:1E:57:A8:74
Authority key identifier: 99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89
Certificate issuer: /CN=994E7625F275D75C44DFB4A7ADF4842506F11789
Certificate serial: 12F4A8A4FB8F8DADB1304BB9F073C9E88321A8F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft
Manifest number: 3A
Signing time: Sun 14 Jun 2026 05:19:26 +0000
Manifest this update: Sun 14 Jun 2026 05:14:26 +0000
Manifest next update: Mon 15 Jun 2026 07:27:26 +0000
Files and hashes: 1: 994E7625F275D75C44DFB4A7ADF4842506F11789.crl (hash: Eb6xBIldB1Km0zwIiVC/gJuGRwECUAMynFL7VUHyTSU=)
2: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: r8HkCpINzf8MUL+ZwgRHMLjx/E/uKIxBx07xyWJ8oXY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl
rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 07:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f4:a8:a4:fb:8f:8d:ad:b1:30:4b:b9:f0:73:c9:e8:83:21:a8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994E7625F275D75C44DFB4A7ADF4842506F11789
Validity
Not Before: Jun 14 05:14:26 2026 GMT
Not After : Jun 15 07:27:26 2026 GMT
Subject: CN=0313D2693849BAAC78AD92A53B11119F1E57A874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:98:b6:9f:dd:28:26:b2:aa:43:0b:8d:af:
0b:df:c3:cc:fc:4c:b2:fc:95:4a:18:59:ba:de:d1:
5e:4d:90:86:c3:ee:2b:f7:a4:6f:1e:2c:85:5d:a3:
33:da:21:0a:43:53:36:64:ad:59:85:01:4f:0b:36:
63:5f:cd:f7:1d:07:c2:7d:bc:eb:65:a3:d0:d5:ae:
45:38:02:06:dc:8b:14:f0:0a:75:47:d3:bf:a4:bc:
2a:b3:bd:af:f1:23:1c:05:a7:11:d3:ba:bb:10:75:
4f:46:05:64:30:40:18:21:4a:42:1d:2c:ba:0f:e5:
d4:12:21:dd:7a:df:0e:ed:a7:78:39:98:56:09:e3:
9c:77:73:fb:8e:11:a6:70:82:2b:e9:92:37:93:a2:
74:f7:af:3d:b6:ae:36:3a:a8:c5:1b:be:0b:76:12:
be:e0:f9:8f:55:ae:0f:9b:91:40:0c:a6:d2:6e:03:
b8:02:12:59:d4:50:08:91:67:97:25:4b:35:c3:0c:
07:ed:67:5d:0f:b9:ba:06:35:a1:22:a4:d5:a9:82:
34:17:70:5e:83:a5:8e:68:f2:71:39:64:af:3a:0a:
3f:b5:f1:d6:d7:82:81:03:1d:f3:ce:36:9b:77:f5:
13:39:25:1d:35:40:74:02:8d:ff:7f:d7:8b:3d:c5:
ad:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:13:D2:69:38:49:BA:AC:78:AD:92:A5:3B:11:11:9F:1E:57:A8:74
X509v3 Authority Key Identifier:
keyid:99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e3:71:05:0c:4b:e2:61:51:fb:60:cd:cc:01:df:9b:89:43:
54:f8:8c:95:45:3f:15:ac:98:e2:3b:fb:0f:ef:ad:0c:dd:2f:
af:b9:41:52:84:85:37:8e:ee:74:20:30:70:9b:cf:70:e2:be:
1b:0e:fc:13:0f:7d:56:5f:3b:c0:0f:e6:91:5a:60:39:fe:98:
32:71:8e:f6:01:98:fc:e0:f7:9d:03:1e:a1:15:b1:ca:75:f9:
7c:16:5e:7d:2b:d2:9d:aa:bc:5e:58:cb:c6:f6:7a:73:66:f9:
99:87:c7:00:9b:4a:d9:43:81:c7:50:42:e6:2d:9e:ae:09:46:
1e:5d:0a:2f:10:5c:f7:38:f4:a8:32:15:04:fb:04:f1:29:bc:
71:c8:cb:9b:65:96:e3:94:d0:17:ba:99:a2:46:dd:47:b8:ef:
21:8d:ac:9b:8a:00:ec:0b:e0:fa:b3:7c:13:36:89:07:82:a0:
37:0a:d7:b8:3d:e0:79:53:b6:5c:b7:66:5d:98:a3:cd:a9:b0:
5d:dc:6f:c7:df:d1:b6:88:f0:4a:29:d2:fe:6c:dc:1d:df:5f:
3b:4a:95:a9:70:84:f1:7a:87:b4:f1:58:31:b4:fe:d0:b3:b5:
69:66:5e:90:76:da:a1:ed:f2:d8:fc:4a:d8:e7:40:e2:da:2c:
81:7a:a6:95
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEvSopPuPja2xMEu58HPJ6IMhqPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk0RTc2MjVGMjc1RDc1QzQ0REZCNEE3QURGNDg0MjUw
NkYxMTc4OTAeFw0yNjA2MTQwNTE0MjZaFw0yNjA2MTUwNzI3MjZaMDMxMTAvBgNV
BAMTKDAzMTNEMjY5Mzg0OUJBQUM3OEFEOTJBNTNCMTExMTlGMUU1N0E4NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0pi2n90oJrKqQwuNrwvfw8z8
TLL8lUoYWbre0V5NkIbD7iv3pG8eLIVdozPaIQpDUzZkrVmFAU8LNmNfzfcdB8J9
vOtlo9DVrkU4AgbcixTwCnVH07+kvCqzva/xIxwFpxHTursQdU9GBWQwQBghSkId
LLoP5dQSId163w7tp3g5mFYJ45x3c/uOEaZwgivpkjeTonT3rz22rjY6qMUbvgt2
Er7g+Y9Vrg+bkUAMptJuA7gCElnUUAiRZ5clSzXDDAftZ10PuboGNaEipNWpgjQX
cF6DpY5o8nE5ZK86Cj+18dbXgoEDHfPONpt39RM5JR01QHQCjf9/14s9xa1/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAxPSaThJuqx4rZKlOxERnx5XqHQwHwYDVR0j
BBgwFoAUmU52JfJ111xE37SnrfSEJQbxF4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzEvOTk0RTc2MjVG
Mjc1RDc1QzQ0REZCNEE3QURGNDg0MjUwNkYxMTc4OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85OTRFNzYyNUYyNzVENzVDNDRERkI0QTdBREY0ODQyNTA2RjEx
Nzg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1
NjMtOWIwZjI0OGIxYWYxLzEvOTk0RTc2MjVGMjc1RDc1QzQ0REZCNEE3QURGNDg0
MjUwNkYxMTc4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA7jcQUMS+JhUftgzcwB35uJQ1T4jJVFPxWs
mOI7+w/vrQzdL6+5QVKEhTeO7nQgMHCbz3DivhsO/BMPfVZfO8AP5pFaYDn+mDJx
jvYBmPzg950DHqEVscp1+XwWXn0r0p2qvF5Yy8b2enNm+ZmHxwCbStlDgcdQQuYt
nq4JRh5dCi8QXPc49KgyFQT7BPEpvHHIy5tlluOU0Be6maJG3Ue47yGNrJuKAOwL
4PqzfBM2iQeCoDcK17g94HlTtly3Zl2Yo82psF3cb8ff0baI8Eop0v5s3B3fXztK
lalwhPF6h7TxWDG0/tCztWlmXpB22qHt8tj8StjnQOLaLIF6ppU=
-----END CERTIFICATE-----
Generated at Sun Jun 14 12:03:30 2026 by rpki-client