
$ rpki-client -vvf rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft
File: 07036C5527255D59345E40A173983EEEA0C09FD0.mft (raw, json)
Hash identifier: yOptSwvMp2ldR2A7BCMZFv+YTxoPHLDdMSfwmdX3ydc=
Subject key identifier: 0B:95:99:8C:D8:63:D7:97:D8:53:C0:BB:93:57:E1:F3:79:F1:B8:C2
Authority key identifier: 07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0
Certificate issuer: /CN=07036C5527255D59345E40A173983EEEA0C09FD0
Certificate serial: 10CB46EE9FBFB1456F011B9F699440979ED716DC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 23:27:27 +0000
Manifest this update: Tue 16 Jun 2026 23:22:27 +0000
Manifest next update: Thu 18 Jun 2026 00:51:27 +0000
Files and hashes: 1: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: xCKI0MCHXup6mIiN8YCHZcQ0nipWKRsEPA9gZhTI18I=)
2: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: 4usmrutgY/beqY8KttmIEGM6ND+uj+WPCIUZTt7ix2A=)
3: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: XhiLVWroBIGTKL45UQb8xrlJuP9CTy+d6X2Fb8sJelo=)
4: 07036C5527255D59345E40A173983EEEA0C09FD0.crl (hash: EovXsoghWkU2iSgpNPEyFrvkq1wGIuvf9hYEllfxjv8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl
rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:cb:46:ee:9f:bf:b1:45:6f:01:1b:9f:69:94:40:97:9e:d7:16:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07036C5527255D59345E40A173983EEEA0C09FD0
Validity
Not Before: Jun 16 23:22:27 2026 GMT
Not After : Jun 18 00:51:27 2026 GMT
Subject: CN=0B95998CD863D797D853C0BB9357E1F379F1B8C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:c3:2e:b0:52:d2:55:a8:b1:7d:c4:1d:0d:
53:d3:0b:2e:60:74:48:d8:b3:d9:a6:29:bc:95:d5:
52:79:e3:3f:23:f5:13:0a:f4:04:8e:06:44:d7:b8:
98:2a:0b:33:eb:62:2f:43:39:34:58:e2:ae:9a:80:
52:68:de:9f:53:6e:e2:42:ac:34:dc:f8:d7:63:81:
1f:05:20:38:da:d3:e4:35:a9:48:c3:ad:3d:a4:ee:
bd:28:ef:88:f3:b8:7d:a6:d7:db:9d:58:19:d1:d8:
c3:84:c6:38:d8:db:45:03:24:ad:49:ac:8e:0c:1d:
4a:0f:5a:0b:93:fc:0b:a4:9f:81:cd:df:a6:d5:4a:
50:1a:69:40:b8:ad:63:e8:e2:62:6d:27:3c:06:f2:
7c:25:06:dd:45:8d:0e:28:5b:b3:99:51:62:91:e0:
6f:05:f5:bc:df:95:1b:91:a8:9b:79:e3:02:e9:01:
22:1a:73:d5:ba:0b:49:78:44:23:14:3f:27:cb:e5:
1d:e7:57:67:ad:4e:64:16:8d:f0:64:8b:70:58:b3:
80:99:d0:f0:7d:39:20:24:f7:03:16:fe:f8:04:48:
32:09:ca:18:c0:8e:58:a4:5f:cb:f3:df:66:3e:5b:
d2:b5:74:54:74:4e:ec:1b:bb:81:53:54:62:26:65:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:95:99:8C:D8:63:D7:97:D8:53:C0:BB:93:57:E1:F3:79:F1:B8:C2
X509v3 Authority Key Identifier:
keyid:07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:58:2d:02:ef:6f:d3:4b:c4:4a:5b:a2:cd:55:50:bd:fe:1d:
35:4b:a9:35:c1:21:fd:0f:b8:be:c8:6e:5d:e9:f9:a8:b3:d0:
0c:ef:97:79:3b:74:15:51:57:6f:6c:78:61:f6:fd:84:b7:d3:
b7:87:99:7a:6f:9f:88:cc:69:33:bb:f3:ee:56:3f:80:48:18:
94:e8:20:ca:3f:e1:63:a9:53:be:65:e3:a2:89:10:21:eb:57:
e3:8a:32:6b:7e:dc:b1:03:10:ba:7e:2c:8d:96:eb:98:bb:da:
b5:c0:72:92:e3:f4:f2:f6:d0:cb:fe:9a:be:f8:72:78:93:f9:
89:06:9d:d9:8d:00:93:4e:a9:f5:1a:97:81:f8:26:94:26:e5:
55:8c:2b:3f:1d:34:a9:f6:e3:f0:0c:a5:67:83:e0:0c:ee:95:
04:ca:47:4b:f3:04:f5:c2:ff:73:bd:1e:51:91:cc:ac:7c:3b:
39:07:62:a5:fe:19:03:dd:82:65:66:06:0c:f3:4b:7c:7d:fd:
f1:c3:75:1e:a5:57:b8:49:de:c7:4e:47:8d:7b:c2:39:50:b9:
96:d1:a0:ba:07:6d:19:04:c3:44:26:d2:49:42:63:9c:ef:73:
2b:18:2f:9a:13:e5:23:39:2e:11:b2:98:3a:49:67:8f:3a:04:
4a:a9:97:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:12 2026 by rpki-client