
$ rpki-client -vvf rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft
File: 00095019ECFE138568A45C973E2550DDCDFE24F9.mft (raw, json)
Hash identifier: Xogpuu6cVJJi/Fgz0sKZxPJSwCQ8pxf1X4bDxRJAFsk=
Subject key identifier: 01:05:43:AB:48:97:C8:5B:1C:BF:F4:CB:08:28:5E:65:B6:62:41:AE
Authority key identifier: 00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9
Certificate issuer: /CN=00095019ECFE138568A45C973E2550DDCDFE24F9
Certificate serial: 549BAE581EF7E8CC2938B2A9469455CB200F6514
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 03:52:33 +0000
Manifest this update: Wed 17 Jun 2026 03:47:33 +0000
Manifest next update: Thu 18 Jun 2026 06:36:33 +0000
Files and hashes: 1: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: QD46OeSAEEYRUHA+p9YKqowoXvSQlWoPfMsfotiNmwI=)
2: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: 9NjGQraMtFt8WFleFmys2JeiEGfDbejk4iig/XaEVZ4=)
3: 00095019ECFE138568A45C973E2550DDCDFE24F9.crl (hash: i7Ssd8tf8twkEdBlm+rgz/XPoaZbh+ofGAg3LZuU3PQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl
rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:9b:ae:58:1e:f7:e8:cc:29:38:b2:a9:46:94:55:cb:20:0f:65:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00095019ECFE138568A45C973E2550DDCDFE24F9
Validity
Not Before: Jun 17 03:47:33 2026 GMT
Not After : Jun 18 06:36:33 2026 GMT
Subject: CN=010543AB4897C85B1CBFF4CB08285E65B66241AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:18:e9:ce:db:46:b6:28:a5:95:30:e3:5f:
19:b1:40:b4:e1:2c:1d:81:f9:4f:8b:41:b5:5b:c0:
09:0f:41:cb:0c:ae:76:25:bf:a2:27:ff:b9:f0:75:
e1:d8:df:37:1e:a9:69:f4:1e:d4:49:4b:85:00:e9:
c6:a8:48:c0:ea:8c:2e:57:29:6e:3a:86:0d:ba:82:
16:45:69:71:1f:9e:a1:8c:e5:48:50:84:74:82:55:
05:f8:c2:13:f8:be:19:e9:3d:b1:3b:3a:a6:0d:c0:
40:3e:cc:4e:84:07:f2:5f:70:93:48:1e:66:8d:c9:
60:c6:66:56:7e:f7:f1:15:56:12:bc:f8:19:fa:71:
e4:69:1d:05:7e:16:ad:2f:4c:dd:0a:9e:af:91:b9:
9a:80:2e:04:a3:6c:48:50:8a:10:7b:e5:2d:03:0b:
91:18:bb:ae:35:c3:1d:94:fa:2b:d5:84:2b:f6:a4:
97:a7:64:7b:77:dc:31:ef:1b:25:9a:81:67:29:2f:
e0:50:31:d1:46:cb:fb:51:92:64:fc:73:ea:67:fb:
6c:9b:ed:8f:47:41:b6:f6:8f:13:24:ae:4a:c3:b7:
27:05:bb:04:71:43:81:48:30:63:08:78:90:c5:ac:
ca:d0:7e:4b:d5:ea:7d:b4:2b:d4:8f:f7:d4:ae:96:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:05:43:AB:48:97:C8:5B:1C:BF:F4:CB:08:28:5E:65:B6:62:41:AE
X509v3 Authority Key Identifier:
keyid:00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dc:5a:a4:d0:f3:19:30:41:ff:73:bf:64:52:cf:59:2a:20:
50:64:06:c9:d3:4b:ba:7d:d2:f6:d5:a8:2d:2a:87:a1:8a:a4:
6e:47:82:a6:27:d8:61:ee:55:3d:2b:0a:ad:dd:72:f8:04:4c:
c9:7b:5a:1c:86:85:87:c4:5a:62:a5:fb:b5:df:94:a9:53:4b:
ec:89:fc:61:49:b9:49:4f:f0:e8:cf:8d:bd:98:3a:a9:4b:e8:
cc:11:d5:97:a2:62:96:48:97:05:71:df:d5:d7:cb:bf:b3:8d:
0c:5b:15:a1:c9:cf:16:a8:0e:b3:b1:8d:cc:9a:a3:f2:7b:3f:
82:03:b9:a9:e0:72:55:f4:75:9f:c8:1a:ff:d9:d2:8d:0a:20:
94:29:b7:35:64:29:34:66:ae:48:46:a1:99:a5:00:47:dd:d6:
a0:3d:53:fd:15:56:8c:af:b7:05:4e:93:e4:eb:2e:b2:38:0a:
66:a2:84:18:a4:01:55:b3:08:44:f2:c3:35:6b:8f:23:1e:02:
30:04:b2:bd:b0:19:5c:2f:7e:82:33:90:7f:89:30:a1:f3:dd:
8d:dc:89:17:57:9b:e8:c5:75:9d:bd:a7:b5:f6:dc:2a:ea:4b:
28:6b:93:c3:c7:36:38:3a:58:a9:7c:e8:25:43:68:32:d9:c5:
88:9c:89:f9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVJuuWB736MwpOLKpRpRVyyAPZRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERD
REZFMjRGOTAeFw0yNjA2MTcwMzQ3MzNaFw0yNjA2MTgwNjM2MzNaMDMxMTAvBgNV
BAMTKDAxMDU0M0FCNDg5N0M4NUIxQ0JGRjRDQjA4Mjg1RTY1QjY2MjQxQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4xjpzttGtiillTDjXxmxQLTh
LB2B+U+LQbVbwAkPQcsMrnYlv6In/7nwdeHY3zceqWn0HtRJS4UA6caoSMDqjC5X
KW46hg26ghZFaXEfnqGM5UhQhHSCVQX4whP4vhnpPbE7OqYNwEA+zE6EB/JfcJNI
HmaNyWDGZlZ+9/EVVhK8+Bn6ceRpHQV+Fq0vTN0Knq+RuZqALgSjbEhQihB75S0D
C5EYu641wx2U+ivVhCv2pJenZHt33DHvGyWagWcpL+BQMdFGy/tRkmT8c+pn+2yb
7Y9HQbb2jxMkrkrDtycFuwRxQ4FIMGMIeJDFrMrQfkvV6n20K9SP99SultS1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAQVDq0iXyFscv/TLCCheZbZiQa4wHwYDVR0j
BBgwFoAUAAlQGez+E4VopFyXPiVQ3c3+JPkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTZmMWViNGItNDhkYy00ZWVhLTkxODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlF
Q0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERDREZFMjRGOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMDA5NTAxOUVDRkUxMzg1NjhBNDVDOTczRTI1NTBERENERkUy
NEY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx
ODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUw
RERDREZFMjRGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAfcWqTQ8xkwQf9zv2RSz1kqIFBkBsnTS7p9
0vbVqC0qh6GKpG5HgqYn2GHuVT0rCq3dcvgETMl7WhyGhYfEWmKl+7XflKlTS+yJ
/GFJuUlP8OjPjb2YOqlL6MwR1ZeiYpZIlwVx39XXy7+zjQxbFaHJzxaoDrOxjcya
o/J7P4IDuangclX0dZ/IGv/Z0o0KIJQptzVkKTRmrkhGoZmlAEfd1qA9U/0VVoyv
twVOk+TrLrI4CmaihBikAVWzCETywzVrjyMeAjAEsr2wGVwvfoIzkH+JMKHz3Y3c
iRdXm+jFdZ29p7X23CrqSyhrk8PHNjg6WKl86CVDaDLZxYicifk=
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:50:16 2026 by rpki-client