
$ rpki-client -vvf rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
File: 19101281C951DCE434F1B713AE570F59EE413A09.mft (raw, json)
Hash identifier: P+qZSf1CWDimNz6zdM1+JQq/2GcCdSQTPoyNABI4gWQ=
Subject key identifier: 61:B6:34:A4:CA:FC:D7:CA:81:E9:7A:30:06:80:CF:08:C1:84:3D:9A
Authority key identifier: 19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09
Certificate issuer: /CN=19101281C951DCE434F1B713AE570F59EE413A09
Certificate serial: 4A00A912190AA7DAE075B1008697779071985A73
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:15:27 +0000
Manifest this update: Wed 17 Jun 2026 02:10:27 +0000
Manifest next update: Thu 18 Jun 2026 03:40:27 +0000
Files and hashes: 1: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: lsZJ+/dkSenhsqGfebfOtSdM0lXp316Uwu+8bQgCJfE=)
2: 19101281C951DCE434F1B713AE570F59EE413A09.crl (hash: SKeAMfDLW9QP8FXUY/vi8iPpDbm9MMEmwD2oleiJ04Y=)
3: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: w5VnAqDMpxkCSyJK8a4JzBCfvPRADlp4Zd050ewYnlA=)
4: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: pQnNBmBtFzueuc0/RAfPveu5rYMb0ariGWnKZ/WG/t8=)
5: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: bgJcO1kAlUNDdjIqyEDrjwkCdWK+MIfy7MXbYHWX1YE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl
rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:00:a9:12:19:0a:a7:da:e0:75:b1:00:86:97:77:90:71:98:5a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19101281C951DCE434F1B713AE570F59EE413A09
Validity
Not Before: Jun 17 02:10:27 2026 GMT
Not After : Jun 18 03:40:27 2026 GMT
Subject: CN=61B634A4CAFCD7CA81E97A300680CF08C1843D9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:e1:27:89:d2:33:64:32:5e:76:6a:a1:55:
bf:89:26:10:9c:8a:d0:47:9b:10:07:4e:46:e7:b0:
28:0f:a5:b2:c6:4c:ae:3b:8e:13:1a:e0:0b:e5:b0:
6c:6c:4e:72:9a:c6:b5:43:4e:20:89:02:70:9d:b2:
68:f8:26:e4:34:d1:34:3b:a9:5d:45:26:af:3b:b0:
62:bb:9e:5c:12:e5:13:27:e8:40:4e:f0:a5:a3:5f:
6c:ff:60:ef:5c:17:6c:7d:33:e4:fb:b8:1d:8b:fc:
2c:ed:95:8c:c6:17:04:10:9f:a4:d2:a6:fe:b8:87:
1c:b6:f3:37:2c:ce:40:ae:5e:e5:2f:e7:fd:7c:88:
64:41:20:c6:46:41:95:26:f6:cc:7a:4f:60:47:c8:
65:a5:a4:d9:59:da:46:66:e1:0f:67:8c:ae:d8:32:
32:59:3d:45:63:93:4d:97:6a:b4:28:9d:15:38:62:
aa:8c:b8:1a:b3:4d:a3:8b:1f:d9:f8:4f:93:ef:5a:
f3:af:62:35:66:09:71:07:29:91:ee:27:02:49:d0:
2b:56:14:34:1b:58:9b:76:da:23:c3:1d:fc:0d:08:
a4:fc:c6:18:11:7f:42:4d:3e:b3:5e:75:a5:3a:d0:
93:ea:c9:a2:87:93:11:75:be:4b:35:90:88:1c:c8:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B6:34:A4:CA:FC:D7:CA:81:E9:7A:30:06:80:CF:08:C1:84:3D:9A
X509v3 Authority Key Identifier:
keyid:19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2e:e2:0c:e3:40:39:8a:aa:ec:65:b8:23:e9:26:2f:f5:62:
2a:91:a4:5a:a0:ba:71:5d:59:3d:39:f4:a8:c0:25:19:9c:7b:
f4:c5:3c:60:df:32:ea:4a:2b:82:bb:98:54:d1:30:b1:c9:c1:
64:0c:f7:1e:d8:07:77:a2:a7:b2:8e:b0:eb:6a:ba:65:7f:7b:
59:d0:92:98:62:d7:24:f6:0a:5b:2d:b6:03:ac:4c:7e:fe:18:
3e:31:b2:87:ad:9d:1c:51:98:62:10:96:09:02:b9:63:92:7f:
92:76:69:27:b6:19:78:10:c1:89:f3:ef:e0:ac:0f:da:c6:bd:
01:71:36:ad:b1:f1:23:f3:91:e6:e3:3a:b5:c7:dc:53:82:c7:
ef:c5:38:78:03:98:7a:3a:62:5b:6c:7f:87:dd:ae:6a:ba:a1:
1d:61:7a:77:40:c5:fe:2e:ef:dc:80:5c:d2:85:53:e8:c6:12:
a9:43:6e:31:28:0c:f7:6d:ee:6c:16:00:96:98:22:cf:b0:37:
84:b8:36:16:ac:62:54:fc:cb:39:3e:b5:bd:cd:d8:ba:52:3a:
45:84:29:d0:3a:3f:f6:45:71:1a:18:bd:c4:40:39:89:60:73:
1d:f5:b9:da:4f:dd:dd:aa:37:a6:75:79:5a:b0:b2:6b:5a:90:
26:a1:cf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:44 2026 by rpki-client