
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft
File: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft (raw, json)
Hash identifier: dPVccBxeHtQ4jmj2eEYJNPkwY8azDw6kyP6LFq4nMOk=
Subject key identifier: DE:EE:8D:2E:91:79:15:DD:BD:26:79:36:9C:C8:C8:86:92:61:96:BE
Authority key identifier: D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81
Certificate issuer: /CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181
Certificate serial: 12CBD31B9F6653C9EBE9A3501878D71CFFCF28D1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 15:07:54 +0000
Manifest this update: Sat 13 Jun 2026 15:02:54 +0000
Manifest next update: Sun 14 Jun 2026 15:23:54 +0000
Files and hashes: 1: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl (hash: lT1DsQixyXDqkQ0d/SHaIaBGKcPlHBP0ku3lUYhlOfA=)
2: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: nTkoyc0s6mnt2tkKBJEFQNLgWGbaxLyUZAhyR5bx0jE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl
rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cb:d3:1b:9f:66:53:c9:eb:e9:a3:50:18:78:d7:1c:ff:cf:28:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181
Validity
Not Before: Jun 13 15:02:54 2026 GMT
Not After : Jun 14 15:23:54 2026 GMT
Subject: CN=DEEE8D2E917915DDBD2679369CC8C886926196BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:b9:18:ef:0f:f3:ab:71:07:80:e2:ef:2d:
05:cd:b1:45:d1:71:95:1b:f4:1b:6a:90:fa:dc:e0:
18:7b:4e:7c:a4:25:6f:6a:0d:bc:4f:a0:ae:fa:5e:
f6:87:9b:94:53:51:b0:66:85:4f:e0:f4:b6:96:4a:
ce:67:b7:e3:eb:c6:de:f5:a1:e9:35:92:da:48:c5:
d6:68:f5:9e:3b:4c:02:f4:08:88:77:ff:ab:11:40:
47:21:52:ab:6b:69:81:9f:18:b1:bd:45:9f:a3:67:
fd:7f:cc:7d:5e:9b:24:a4:b5:fb:e9:52:12:33:c3:
3e:90:da:3b:4e:56:6f:36:83:80:28:c8:7f:0c:df:
97:3f:0c:02:fe:67:06:01:a6:dc:52:b5:44:03:e7:
ed:a1:bb:fc:af:4a:7f:20:c7:e1:67:f3:5c:6d:be:
cc:a5:6e:cd:b4:3c:99:61:b4:a9:39:d7:8b:05:6e:
fa:47:8a:05:82:5e:b2:7b:7d:18:4d:04:3c:ce:3f:
1b:11:ff:b3:ab:4a:72:20:14:96:1b:e2:1d:34:de:
b3:ef:c4:4b:f1:10:79:00:ea:c2:09:68:20:d8:54:
a9:a3:75:3c:c7:99:9d:b8:6a:67:df:07:63:35:82:
7f:e0:51:c4:ef:1c:c4:c7:33:c3:ca:c0:50:fe:e0:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EE:8D:2E:91:79:15:DD:BD:26:79:36:9C:C8:C8:86:92:61:96:BE
X509v3 Authority Key Identifier:
keyid:D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a9:f6:6f:06:23:ea:ce:03:dd:69:91:cd:80:0e:4f:4e:8e:
6d:18:a4:16:56:0b:cd:24:93:0d:3c:65:4f:13:f4:a7:8c:c0:
84:2a:7b:dd:8d:7a:96:74:f2:01:c3:4c:6d:2b:fb:62:44:21:
e7:14:ab:be:d3:82:c8:ac:35:15:9f:8a:68:a9:42:be:de:7a:
10:64:29:7b:db:e5:d7:bf:d7:42:89:b7:8e:02:76:26:3a:f5:
41:ac:44:f9:48:d0:fa:62:6d:ba:dd:34:f6:f5:11:5a:35:59:
b1:f3:d1:9b:36:25:08:b5:0c:d0:6e:fa:8f:bf:89:f8:2d:d6:
bc:1d:85:68:8b:f7:5b:35:9e:08:9c:08:1f:ce:5b:2c:f9:b2:
6a:72:65:ec:d7:73:83:c6:8d:22:87:e9:11:18:a5:38:ce:0d:
5e:55:e3:a3:b0:9a:16:50:15:34:a8:b6:4e:16:29:34:3d:ab:
54:b0:1f:79:62:f8:63:f4:73:f0:9c:ed:d9:76:ff:6e:10:30:
3c:a4:2c:46:84:90:34:be:79:c0:b2:0e:ac:42:43:df:82:ec:
a8:b7:b6:9e:85:97:38:21:cb:6c:ee:81:af:f3:60:90:fe:a6:
c4:08:d4:99:f0:11:c7:48:fc:be:21:1e:55:14:30:5f:d3:80:
8e:9f:a1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:28:44 2026 by rpki-client