
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft
File: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft (raw, json)
Hash identifier: VTRMOyJWHaTAsuzbo7CIXZvjU+sKUnuw6ss/TGgwNWs=
Subject key identifier: B4:BB:62:D1:D4:B3:8B:92:D0:1A:EC:64:18:92:AA:65:3D:79:3B:ED
Authority key identifier: D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15
Certificate issuer: /CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15
Certificate serial: 14DF299A01A5B332F7E7405C335A9F1D62C66A57
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 07:22:59 +0000
Manifest this update: Sat 13 Jun 2026 07:17:59 +0000
Manifest next update: Sun 14 Jun 2026 09:36:59 +0000
Files and hashes: 1: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl (hash: uyxU0O6A5VPEUiKLRVuLzLGOOeabHVQCEztswhtqpcQ=)
2: 3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa (hash: /dy1vpCusUxjx9tOrWaCKRl2KSXA8yenkPc1J3oKgv0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl
rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 09:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:df:29:9a:01:a5:b3:32:f7:e7:40:5c:33:5a:9f:1d:62:c6:6a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15
Validity
Not Before: Jun 13 07:17:59 2026 GMT
Not After : Jun 14 09:36:59 2026 GMT
Subject: CN=B4BB62D1D4B38B92D01AEC641892AA653D793BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:f8:8f:46:c8:b4:f3:c1:47:26:f1:8d:bd:
41:27:fa:be:6e:bf:a8:7a:cc:2e:2c:7c:f6:07:28:
0f:7d:02:c4:cc:f6:0b:a4:a5:18:b2:39:4e:7b:10:
8b:0f:e9:74:05:ab:b5:74:7c:40:28:4f:71:2b:a0:
72:00:06:b9:2b:4d:ec:f2:6e:8d:6e:65:6d:73:ce:
c7:94:fc:7e:f0:95:f0:e3:bc:2c:8b:f0:c3:61:78:
d7:bf:f9:75:b7:6c:6e:4b:35:8e:e2:c0:41:fe:71:
6f:79:f0:05:06:7a:22:92:43:f2:af:53:14:09:da:
a4:dd:93:95:64:64:63:be:01:8d:66:36:e4:c6:4e:
50:20:41:f9:fe:03:80:37:fa:aa:d9:64:40:6d:b6:
04:71:8d:61:68:e5:3f:83:26:af:9e:c6:b2:53:f0:
29:ce:de:9b:5f:b0:61:9c:da:56:83:8d:cc:c1:22:
d9:f9:02:d5:40:8e:c9:4e:85:c9:ce:16:de:d3:54:
53:a4:bf:1e:b4:5c:fc:47:b4:76:12:8e:49:f4:ce:
f0:ee:4e:cf:72:55:37:94:f2:ce:f0:28:66:f6:b2:
f4:43:3f:75:c6:d1:5e:b0:0c:0d:57:67:96:e6:f7:
88:3e:1e:60:fb:f8:d7:93:3b:72:a0:6e:5a:01:8e:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BB:62:D1:D4:B3:8B:92:D0:1A:EC:64:18:92:AA:65:3D:79:3B:ED
X509v3 Authority Key Identifier:
keyid:D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a6:ea:51:53:4b:51:6f:e6:fd:a9:7a:6c:92:51:b1:84:80:
24:d4:19:73:6c:0d:cf:76:3a:28:9e:2b:28:0c:c2:aa:fa:6d:
52:a2:fc:56:85:21:47:80:8e:51:a4:0a:61:b2:a0:42:c7:7f:
ff:d2:71:5a:79:67:5f:1b:5d:96:48:d4:97:7f:71:46:ad:84:
c1:56:9c:45:fb:56:09:30:07:3f:0e:00:8f:06:e8:29:50:50:
aa:7f:f0:27:ee:96:c7:f4:41:f5:e2:da:ce:b3:31:d6:61:f0:
c2:1f:f6:53:73:d4:4d:1d:9f:07:64:11:62:53:8d:f2:f2:70:
bf:1d:11:55:ac:86:ea:ef:72:45:5d:40:ca:26:fe:41:09:d6:
1c:03:01:bf:19:b7:45:a6:d1:b8:89:ef:45:82:b7:1f:37:75:
91:b3:fc:c0:c4:b7:74:7d:54:99:08:9d:c9:10:54:15:37:a4:
6c:ea:90:fd:02:b0:28:bb:e7:2e:29:1d:04:98:d1:e7:92:43:
b0:bc:1a:a3:d5:0d:86:64:1a:3b:72:1a:da:db:ce:7f:c4:d6:
d1:8d:f9:48:3e:04:4e:33:ee:fc:88:54:21:42:11:2a:4b:ee:
de:26:d7:ce:56:6f:a4:ef:7a:a4:e6:81:82:fa:64:14:78:fd:
f8:1d:a0:77
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFN8pmgGlszL350BcM1qfHWLGalcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2
QzdGN0UxNTAeFw0yNjA2MTMwNzE3NTlaFw0yNjA2MTQwOTM2NTlaMDMxMTAvBgNV
BAMTKEI0QkI2MkQxRDRCMzhCOTJEMDFBRUM2NDE4OTJBQTY1M0Q3OTNCRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTg/iPRsi088FHJvGNvUEn+r5u
v6h6zC4sfPYHKA99AsTM9gukpRiyOU57EIsP6XQFq7V0fEAoT3EroHIABrkrTezy
bo1uZW1zzseU/H7wlfDjvCyL8MNheNe/+XW3bG5LNY7iwEH+cW958AUGeiKSQ/Kv
UxQJ2qTdk5VkZGO+AY1mNuTGTlAgQfn+A4A3+qrZZEBttgRxjWFo5T+DJq+exrJT
8CnO3ptfsGGc2laDjczBItn5AtVAjslOhcnOFt7TVFOkvx60XPxHtHYSjkn0zvDu
Ts9yVTeU8s7wKGb2svRDP3XG0V6wDA1XZ5bm94g+HmD7+NeTO3KgbloBjtpxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtLti0dSzi5LQGuxkGJKqZT15O+0wHwYDVR0j
BBgwFoAU0P9Q0iFxVJ2P+pqrPoH4dmx/fhUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmUwNWFiNjYtNjZhZi00MGE0LTg5YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIy
MTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2QzdGN0UxNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMEZGNTBEMjIxNzE1NDlEOEZGQTlBQUIzRTgxRjg3NjZDN0Y3
RTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUwNWFiNjYtNjZhZi00MGE0LTg5
YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4
NzY2QzdGN0UxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABmm6lFTS1Fv5v2pemySUbGEgCTUGXNsDc92
OiieKygMwqr6bVKi/FaFIUeAjlGkCmGyoELHf//ScVp5Z18bXZZI1Jd/cUathMFW
nEX7VgkwBz8OAI8G6ClQUKp/8Cfulsf0QfXi2s6zMdZh8MIf9lNz1E0dnwdkEWJT
jfLycL8dEVWshurvckVdQMom/kEJ1hwDAb8Zt0Wm0biJ70WCtx83dZGz/MDEt3R9
VJkInckQVBU3pGzqkP0CsCi75y4pHQSY0eeSQ7C8GqPVDYZkGjtyGtrbzn/E1tGN
+Ug+BE4z7vyIVCFCESpL7t4m185Wb6TveqTmgYL6ZBR4/fgdoHc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:28:20 2026 by rpki-client