
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
File: 10553E9FBD62D012FC01AA60343F1431B2A6A334.mft (raw, json)
Hash identifier: O0mwCPnissfFXGU6Leii+XZ7q2n/EL/Gvg++ok7tRQY=
Subject key identifier: 59:11:92:22:37:7B:9D:53:10:6B:31:40:ED:AF:BF:9F:57:8F:05:9D
Authority key identifier: 10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
Certificate issuer: /CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Certificate serial: 4CEE91BBCD180378589050AC303866A4EB29F197
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 21:14:56 +0000
Manifest this update: Tue 16 Jun 2026 21:09:56 +0000
Manifest next update: Wed 17 Jun 2026 22:17:56 +0000
Files and hashes: 1: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: tbo+ssCZ1GgyC2ZlsuUJYvzfgqZD9OlbY8lym/UKgpA=)
2: 10553E9FBD62D012FC01AA60343F1431B2A6A334.crl (hash: WnEMS8S9QWA8fFoKhJSn4RnibahmlE/4lKTQzYciEMU=)
3: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: k9nD44XinJnJpBwRMmDV5yfpMBTjz+PYwIGe6HEFz9s=)
4: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: CzpBmVwagEtnKqxKjT1pUSrqGuU3xrwBdruiL5NCJ14=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 22:17:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ee:91:bb:cd:18:03:78:58:90:50:ac:30:38:66:a4:eb:29:f1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Validity
Not Before: Jun 16 21:09:56 2026 GMT
Not After : Jun 17 22:17:56 2026 GMT
Subject: CN=59119222377B9D53106B3140EDAFBF9F578F059D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:b8:5e:38:4e:ca:2a:e1:29:27:e6:8b:dd:
c3:ea:ad:63:7c:2f:f1:10:5a:f5:06:d6:be:e4:09:
5c:fa:0d:01:22:75:d6:af:48:cb:db:b5:79:ed:fc:
cf:af:55:f6:db:21:5d:fc:79:1f:f3:73:e0:88:95:
b7:60:24:cb:de:03:03:4c:86:39:21:11:cd:bb:6a:
d0:30:c6:19:e4:0b:26:19:5b:48:e4:d2:5c:bc:d8:
be:27:d8:1b:3c:76:40:d8:5a:5c:33:6d:81:ab:0d:
d7:3c:e0:29:90:ac:46:f9:21:e2:15:ef:6d:5b:ce:
73:eb:03:41:96:88:65:98:78:b7:4e:cd:92:7d:bc:
d3:c3:33:1c:2d:85:1b:f9:7a:b4:2f:52:5e:1f:ff:
b2:d2:0a:8e:91:b6:7c:2b:03:3a:d4:0a:ce:87:58:
87:93:d1:ed:45:9f:b8:22:94:dd:d2:29:09:88:e1:
7a:c9:d0:e7:1c:69:36:9f:52:f2:5d:1e:cb:b7:58:
8e:4d:61:fc:fe:d5:d2:1d:69:cf:87:1a:ae:67:0b:
da:d1:c4:43:ad:a2:96:53:59:bb:f0:d7:c8:b8:f6:
ad:8e:8b:79:4a:7d:7e:3a:f0:a1:b6:3d:51:6e:63:
d8:f3:25:0f:3b:39:6a:fd:57:92:5b:d4:db:df:18:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:11:92:22:37:7B:9D:53:10:6B:31:40:ED:AF:BF:9F:57:8F:05:9D
X509v3 Authority Key Identifier:
keyid:10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c0:77:c4:f1:a4:b9:56:83:65:fd:e2:3e:8c:04:1b:f3:f6:
94:d2:c1:fb:ad:f2:80:d8:d1:99:b8:38:0b:e7:62:e7:b4:29:
ba:5d:21:a1:fc:62:da:c2:ac:32:f0:e0:61:63:e5:f1:45:a1:
1a:f8:1d:40:49:68:59:cd:87:3b:57:b6:a8:15:11:92:5b:09:
da:7a:c2:b6:f5:dd:66:36:02:f2:3e:dd:8c:37:3a:8d:1d:dc:
2b:b6:e3:c2:ec:d1:91:ae:ff:e0:42:d8:1e:b9:b8:87:87:2d:
11:14:3e:5b:05:ac:85:1e:2f:de:19:c1:38:c6:2a:d8:f2:1e:
0d:f8:85:6f:9e:4c:4d:4d:9a:32:1a:93:2b:6d:6c:1f:94:68:
0e:58:37:70:52:7e:80:be:73:ef:94:65:8b:d8:e8:96:7e:a1:
6f:99:3a:e6:79:9e:fa:c5:b0:61:d9:99:49:be:69:c9:92:0b:
15:de:34:f8:89:05:93:08:f7:bb:53:e8:df:66:11:84:77:53:
91:63:3e:6b:00:6c:ef:ed:ce:79:6e:b6:7d:09:97:66:83:96:
cc:bc:47:e7:c0:2f:22:fe:c1:cb:5c:fd:4e:98:f7:da:56:65:
43:e4:2c:cb:84:87:94:d9:2f:f8:c1:bf:37:38:a4:3c:43:ac:
be:7f:0c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:51:30 2026 by rpki-client