
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
File: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft (raw, json)
Hash identifier: Ds7DGRceg5oi4SQYKPFg3xjDCPfDUyBslTsHIgobDxw=
Subject key identifier: A4:2E:6A:55:87:A0:5E:4F:1D:49:F3:73:EF:1C:58:D5:7D:4F:7E:48
Authority key identifier: 12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4
Certificate issuer: /CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4
Certificate serial: 3859D342200175BA54864FFA4AA5A4E2249739F5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 13:51:28 +0000
Manifest this update: Sat 13 Jun 2026 13:46:28 +0000
Manifest next update: Sun 14 Jun 2026 15:45:28 +0000
Files and hashes: 1: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pD8AAJGfek8X+gmcTJvavhY6u1lO1X5RIEZ8T14MLvE=)
2: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl (hash: GI02cukjRPyxZ506a2U2eP7IQCcLdnG7N4nY4jUcWeY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl
rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:59:d3:42:20:01:75:ba:54:86:4f:fa:4a:a5:a4:e2:24:97:39:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4
Validity
Not Before: Jun 13 13:46:28 2026 GMT
Not After : Jun 14 15:45:28 2026 GMT
Subject: CN=A42E6A5587A05E4F1D49F373EF1C58D57D4F7E48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:be:0f:7b:d4:9a:f6:37:a7:90:f0:a4:b3:
31:e7:25:75:ec:ad:c3:bf:c8:29:14:c3:df:ac:c3:
05:a1:cf:4d:20:dc:47:86:19:2d:1a:ac:51:ca:d7:
43:b1:25:aa:f3:f8:a9:67:47:59:91:f7:1c:d6:17:
c5:95:89:38:67:f9:75:2c:64:be:a7:4a:c2:a0:2d:
e6:7a:11:7d:79:e5:24:15:9a:61:a7:a5:9c:04:ff:
d1:6f:59:ca:78:1a:4d:9c:aa:30:eb:35:11:41:10:
73:b1:8d:78:53:5e:27:10:90:b9:80:83:4b:83:58:
b2:5e:40:f9:a3:c7:37:d1:7f:6a:86:09:e4:3a:a5:
8e:c4:97:0c:7a:08:98:11:65:77:0c:3d:5b:14:82:
eb:08:6e:43:47:2f:b0:7b:25:0d:ea:88:df:58:b4:
e7:70:a7:3a:0f:20:5e:d7:fd:2f:0e:d5:5e:f9:e0:
b8:1c:05:18:d7:43:ee:7f:85:0e:d2:e5:ae:a7:9a:
c4:a5:72:4f:4e:09:b6:7c:15:5c:9f:fd:30:95:98:
8e:4b:b6:75:e0:81:eb:07:c3:84:3a:8e:03:e7:b4:
af:57:aa:ff:6b:6c:8b:cf:b1:01:89:e8:a3:fb:30:
92:79:8b:d6:90:ca:71:e5:96:97:c4:86:4a:65:92:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2E:6A:55:87:A0:5E:4F:1D:49:F3:73:EF:1C:58:D5:7D:4F:7E:48
X509v3 Authority Key Identifier:
keyid:12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:65:9d:e4:21:ca:7b:c3:24:c2:88:22:2b:d2:97:af:39:e7:
b8:45:1b:9d:4d:36:a5:88:88:a7:78:b7:46:be:fa:d7:db:6d:
c8:32:7d:06:10:73:6a:8d:18:1c:c3:20:2b:31:57:1a:da:14:
e4:ac:2b:4e:d4:4e:77:b8:2e:a1:23:e2:6e:8b:e7:49:85:17:
76:ee:75:02:ca:7d:3b:9b:a4:92:1a:a0:db:10:92:fd:ed:c0:
0e:96:ba:a1:0a:5e:de:de:4a:6d:b7:97:ab:67:d9:43:c9:60:
74:ea:cf:d1:69:59:fa:59:7a:6e:96:fe:8d:42:01:4d:02:d2:
de:c2:ba:70:07:e1:a7:c7:44:4a:f1:38:5c:cf:c7:bb:b5:42:
d1:ce:05:d7:38:96:6c:6a:8f:9c:32:bc:9c:e3:05:74:df:9c:
08:27:01:4d:68:0e:5e:20:0b:e4:12:a2:ec:f0:43:55:06:32:
cf:66:47:ff:e3:c9:ed:20:e8:a8:00:3e:93:88:8b:f9:ea:20:
cf:11:1f:43:9e:db:b5:4b:df:56:8c:53:9e:54:27:eb:b5:18:
6a:75:ce:a5:90:fe:f6:f3:b0:7f:cb:56:c2:7d:b2:9d:f4:52:
1d:84:e4:0a:22:cd:ab:4e:17:c2:db:0b:5b:c3:58:13:ed:7b:
61:a4:94:30
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOFnTQiABdbpUhk/6SqWk4iSXOfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1MURF
NUVFRTFDNDAeFw0yNjA2MTMxMzQ2MjhaFw0yNjA2MTQxNTQ1MjhaMDMxMTAvBgNV
BAMTKEE0MkU2QTU1ODdBMDVFNEYxRDQ5RjM3M0VGMUM1OEQ1N0Q0RjdFNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIL4Pe9Sa9jenkPCkszHnJXXs
rcO/yCkUw9+swwWhz00g3EeGGS0arFHK10OxJarz+KlnR1mR9xzWF8WViThn+XUs
ZL6nSsKgLeZ6EX155SQVmmGnpZwE/9FvWcp4Gk2cqjDrNRFBEHOxjXhTXicQkLmA
g0uDWLJeQPmjxzfRf2qGCeQ6pY7Elwx6CJgRZXcMPVsUgusIbkNHL7B7JQ3qiN9Y
tOdwpzoPIF7X/S8O1V754LgcBRjXQ+5/hQ7S5a6nmsSlck9OCbZ8FVyf/TCVmI5L
tnXggesHw4Q6jgPntK9Xqv9rbIvPsQGJ6KP7MJJ5i9aQynHllpfEhkplkgMJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpC5qVYegXk8dSfNz7xxY1X1PfkgwHwYDVR0j
BBgwFoAUElMx6ODNcZfH7oT1CHh1HeXu4cQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzI1OGRjZWEtYjM4My00NDMyLWFkMDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThF
MENENzE5N0M3RUU4NEY1MDg3ODc1MURFNUVFRTFDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMjUzMzFFOEUwQ0Q3MTk3QzdFRTg0RjUwODc4NzUxREU1RUVF
MUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk
MDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1
MURFNUVFRTFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ1lneQhynvDJMKIIivSl68557hFG51NNqWI
iKd4t0a++tfbbcgyfQYQc2qNGBzDICsxVxraFOSsK07UTne4LqEj4m6L50mFF3bu
dQLKfTubpJIaoNsQkv3twA6WuqEKXt7eSm23l6tn2UPJYHTqz9FpWfpZem6W/o1C
AU0C0t7CunAH4afHRErxOFzPx7u1QtHOBdc4lmxqj5wyvJzjBXTfnAgnAU1oDl4g
C+QSouzwQ1UGMs9mR//jye0g6KgAPpOIi/nqIM8RH0Oe27VL31aMU55UJ+u1GGp1
zqWQ/vbzsH/LVsJ9sp30Uh2E5AoizatOF8LbC1vDWBPte2GklDA=
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:38 2026 by rpki-client