
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft
File: 40929298F65205185DF4DD6F4BE251452B43C09A.mft (raw, json)
Hash identifier: +CsybjBtZilXzUiScwh2OHh5a9drx/ja5hgsQyaRZ8s=
Subject key identifier: 33:7E:C6:CC:F5:48:41:88:D8:0C:3D:3C:95:BA:07:AD:90:B5:70:6C
Authority key identifier: 40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A
Certificate issuer: /CN=40929298F65205185DF4DD6F4BE251452B43C09A
Certificate serial: 120DFF5CA99B40A0490435E3407594CE06FA1DBB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 17:15:24 +0000
Manifest this update: Sat 13 Jun 2026 17:10:24 +0000
Manifest next update: Sun 14 Jun 2026 21:03:24 +0000
Files and hashes: 1: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: /Cpp1MQoDAZjHBD8Zezrrpf76FfuIh27guzqvCU4E0o=)
2: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VJ6XHTgP+LYfJ1kWwqo0lBWI8ymcoW5/lJHqRYH+GxY=)
3: 40929298F65205185DF4DD6F4BE251452B43C09A.crl (hash: 706gQUZ2FdmLCEOaqDV4gzPpJ2TerOdD8kPaolJuR4A=)
4: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: FaKND3k0/W3hoCdXnlN+l2wX86NxXD4PJzdg9/BiXgA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl
rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:0d:ff:5c:a9:9b:40:a0:49:04:35:e3:40:75:94:ce:06:fa:1d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40929298F65205185DF4DD6F4BE251452B43C09A
Validity
Not Before: Jun 13 17:10:24 2026 GMT
Not After : Jun 14 21:03:24 2026 GMT
Subject: CN=337EC6CCF5484188D80C3D3C95BA07AD90B5706C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:6c:c9:2c:32:e5:65:a2:ef:bc:d3:99:3f:
4d:72:a3:43:60:16:b3:29:24:c0:db:b8:05:27:68:
10:18:82:f6:a3:a4:63:c9:9e:ea:45:ca:0b:85:d2:
df:09:01:5c:05:d9:16:a4:dd:01:cf:23:fe:56:2f:
81:a0:64:9e:74:f2:39:20:e0:57:7c:35:8d:7a:65:
4a:fe:be:51:a1:0f:d3:08:e7:55:1c:b6:96:7d:01:
f8:75:4c:b7:dd:73:8c:5b:6e:2e:e0:10:44:e5:13:
f2:d9:f0:60:18:f0:7c:45:2b:e9:22:ca:61:91:72:
e6:56:af:46:95:78:df:c8:f6:b8:67:3f:ba:98:6d:
49:5d:fa:f1:f2:30:02:da:51:1a:ab:d5:38:a8:f4:
85:c7:1d:ac:ac:0a:9d:00:c4:a0:63:d0:9c:82:c6:
2e:d8:1e:84:8e:38:ef:cb:37:57:78:8f:b2:3b:7f:
74:db:85:14:44:ca:4e:0a:4f:79:86:03:c4:79:5a:
0c:7d:38:34:4e:f6:46:ef:33:fd:8d:e4:c7:15:4d:
53:91:e7:5d:13:40:17:90:ff:c6:f5:91:9f:76:c8:
9f:5d:83:03:03:8a:f2:2a:db:f7:08:f0:27:a2:98:
eb:de:27:10:a7:0f:57:46:dc:b1:24:e9:c8:84:fe:
89:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7E:C6:CC:F5:48:41:88:D8:0C:3D:3C:95:BA:07:AD:90:B5:70:6C
X509v3 Authority Key Identifier:
keyid:40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1f:9d:5b:09:86:ef:55:dd:8b:f6:c6:17:87:77:a7:51:1e:
f5:0f:99:88:08:19:b9:e3:a2:c5:dd:10:79:6c:c0:f5:a6:ce:
67:6e:2b:4e:b4:51:e0:af:01:76:9c:c6:57:9f:06:4c:bf:54:
04:33:3d:0b:0e:be:9d:a5:55:ef:e6:25:65:44:6e:b5:bb:19:
3a:f2:da:27:7c:46:d6:f2:e1:3d:a4:46:cd:61:33:0f:2c:61:
f9:cd:ab:f5:f5:cf:e0:26:1c:85:49:c9:44:50:1e:6b:db:60:
81:c3:4f:8c:df:60:3a:43:20:27:e6:58:82:b9:7f:0c:c2:95:
4e:9d:b7:fc:f7:e6:40:ee:3a:33:06:3d:c1:db:13:2a:92:00:
94:2e:dc:ea:3f:d4:cb:b6:05:e0:11:7d:21:97:fb:9d:92:f6:
f3:cd:2f:d7:83:5b:40:c3:64:8d:ef:f4:2c:fb:fe:80:94:34:
fe:68:89:aa:3e:66:ed:7d:76:74:ec:46:b1:e2:cc:7c:39:4a:
26:51:94:9f:cd:d4:82:52:2c:6a:d2:a7:f5:5a:ba:5d:79:41:
7a:8b:dd:93:5c:55:2b:f7:f6:44:a5:67:f1:42:15:8c:7c:07:
b4:d4:88:13:69:77:0b:09:c3:05:d8:2f:1e:92:83:2f:dc:29:
ee:5a:a3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:00:55 2026 by rpki-client