
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft
File: ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft (raw, json)
Hash identifier: ynCZ0utYAfVOmaKDfQJngJrWa9Z75qeYex6KPss5pwo=
Subject key identifier: 0A:C9:1F:FA:D3:43:94:C3:14:52:5D:E1:0E:9B:F5:52:E0:D2:88:3B
Authority key identifier: AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54
Certificate issuer: /CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54
Certificate serial: 75EB14DC48A891AA6CF0ED7415E4835EB46B23B2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 06:25:38 +0000
Manifest this update: Wed 17 Jun 2026 06:20:38 +0000
Manifest next update: Thu 18 Jun 2026 10:16:38 +0000
Files and hashes: 1: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: eMjrRkEiItNdv20OSL8v5DoNQVMNdFSIv45ei3rnYVk=)
2: ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl (hash: iyWmkMYYFUQCHPVqu8tQDQ06J6ELSK5N9xLh5jqC+ig=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl
rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:eb:14:dc:48:a8:91:aa:6c:f0:ed:74:15:e4:83:5e:b4:6b:23:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54
Validity
Not Before: Jun 17 06:20:38 2026 GMT
Not After : Jun 18 10:16:38 2026 GMT
Subject: CN=0AC91FFAD34394C314525DE10E9BF552E0D2883B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:e3:3a:e0:3b:bf:c0:5b:07:d9:2d:14:04:
5c:ff:7c:7e:c8:52:d9:97:a5:12:b2:e8:d7:ed:1d:
b7:7f:23:14:0a:a4:b1:e7:20:c9:84:06:59:0d:8f:
7a:fb:7e:85:b5:58:44:fa:f6:89:98:57:ff:96:9b:
32:27:cd:3e:2b:98:b8:28:21:28:82:dc:9b:5c:da:
7e:7a:2a:ad:4b:18:69:37:5d:77:0d:6d:cf:d0:39:
dd:f1:e9:cb:44:f6:70:13:9f:45:04:6d:91:a6:f9:
73:d0:7c:ac:e1:f1:bd:63:d0:64:ac:79:41:1d:cc:
7b:a4:4a:45:00:13:89:25:20:a6:40:34:17:a9:ff:
60:88:86:55:66:0d:31:2a:85:cd:7b:0d:f5:ff:ea:
17:80:be:1f:26:59:58:69:b9:f4:fa:61:cf:17:24:
8e:fa:fb:70:5e:16:d7:46:34:1a:44:10:6d:0d:e4:
6a:ef:78:e9:2b:98:f3:c6:fd:5d:53:35:8c:04:66:
31:b1:1a:78:b8:bb:a6:ae:1e:f5:96:eb:ed:0a:8c:
0a:15:31:6a:4e:61:e2:67:14:65:dd:48:db:4a:95:
20:de:57:0a:d5:b1:c3:07:ac:c2:4e:88:f7:0f:59:
c5:48:7f:05:2d:80:9d:ab:de:9b:37:da:07:05:b9:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C9:1F:FA:D3:43:94:C3:14:52:5D:E1:0E:9B:F5:52:E0:D2:88:3B
X509v3 Authority Key Identifier:
keyid:AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:79:95:62:08:23:4d:de:75:3d:09:ab:dd:e4:18:99:77:b3:
09:3f:c2:f3:b0:53:ed:59:f1:05:6e:65:27:98:2a:58:ee:00:
83:fd:72:62:1d:48:32:e0:1d:74:f6:c6:ad:9f:f5:4d:48:b8:
53:90:6a:cb:be:75:2b:23:b9:e0:50:3d:47:5d:5c:10:18:cd:
49:4d:ce:aa:90:39:65:3d:cb:3b:a0:42:c1:82:fd:2a:a0:b8:
3e:0b:b8:32:2a:e2:72:46:23:26:e3:12:15:cc:b5:06:25:73:
7d:c9:cb:c6:bd:7f:55:05:0d:3b:21:c9:1d:62:c2:bd:f2:63:
52:22:c5:c1:66:4d:81:ed:2f:98:ee:5f:96:13:fe:5d:88:8b:
15:6e:41:f4:c0:75:2d:de:19:e1:d9:db:a1:4c:7e:5e:65:26:
5d:6e:e0:f1:82:cf:cc:0a:12:14:45:b9:c5:cc:df:1a:45:5e:
cd:28:55:8d:d8:ad:a7:72:cc:86:35:83:6a:72:d6:58:de:97:
51:8d:37:03:dc:a1:19:a9:ab:7c:42:e9:e3:ee:94:1c:55:e4:
4e:df:e7:6a:e0:eb:0f:52:93:8c:8e:98:c0:55:8d:84:c7:12:
09:ca:e0:30:aa:4c:4d:9b:14:d3:9e:2b:fd:34:0b:b4:18:d8:
0f:ef:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:06 2026 by rpki-client