
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft
File: 935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft (raw, json)
Hash identifier: bERwj2mOAFS5qEQvd4dpuvaDF+Dx8hQwc7woJj6uPAg=
Subject key identifier: 11:9F:13:CB:14:0F:48:F2:CE:69:B6:8A:3B:78:95:59:D9:24:87:1C
Authority key identifier: 93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C
Certificate issuer: /CN=935DD14314C92CCD3B1B65E68751DA3E87B1057C
Certificate serial: 72382AD02B639669992164241371A590102D4191
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 21:50:37 +0000
Manifest this update: Tue 16 Jun 2026 21:45:37 +0000
Manifest next update: Wed 17 Jun 2026 22:52:37 +0000
Files and hashes: 1: 935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl (hash: nCvS4JHuNgNE6wWdy1G24GCuiUgJqSucV8cgvccHxtI=)
2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: kjEpWP2mRiJBPHjX3tFZhbKjrbBSMQGM2y+PNic1u8w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl
rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 22:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:38:2a:d0:2b:63:96:69:99:21:64:24:13:71:a5:90:10:2d:41:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935DD14314C92CCD3B1B65E68751DA3E87B1057C
Validity
Not Before: Jun 16 21:45:37 2026 GMT
Not After : Jun 17 22:52:37 2026 GMT
Subject: CN=119F13CB140F48F2CE69B68A3B789559D924871C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:71:13:33:11:73:0c:a6:eb:bf:1b:53:dc:00:
19:ac:18:46:7b:c4:02:63:5b:1e:69:97:ac:68:b3:
31:de:22:f8:b5:7d:5a:77:db:01:a9:ad:3f:4e:dd:
ea:5c:64:94:57:8a:30:12:f7:4b:30:22:96:29:3f:
21:aa:90:59:a3:3c:b9:0f:96:13:ce:75:ac:78:25:
dc:e9:0f:07:c7:3c:bd:d7:ac:5f:35:bc:1b:e5:61:
b2:87:10:2b:e3:c7:7e:0c:33:aa:96:eb:53:ef:c3:
d7:c9:3d:fc:ea:72:3c:22:20:3f:24:63:0d:45:3c:
3c:14:01:b9:e7:0f:55:88:90:34:86:d9:e9:b3:de:
fa:c0:ad:08:53:2c:ca:6d:db:ff:37:10:1c:0c:1e:
34:62:f5:17:f4:89:f8:18:1f:fc:19:37:be:36:85:
2d:f3:b6:9c:e4:ff:9c:01:17:7b:c9:4b:ce:98:10:
59:f6:5c:92:2b:13:58:eb:fa:86:30:f4:39:36:43:
53:32:03:9e:b1:6c:63:d0:97:f7:9d:79:1b:dc:8e:
34:62:dc:31:07:e3:d5:40:98:db:64:32:85:1c:7d:
ef:c7:14:99:4c:00:da:df:58:12:95:9c:0b:ba:df:
43:15:84:f1:2b:76:48:50:6e:65:8b:70:78:d9:3b:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9F:13:CB:14:0F:48:F2:CE:69:B6:8A:3B:78:95:59:D9:24:87:1C
X509v3 Authority Key Identifier:
keyid:93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:98:68:71:4a:40:03:48:27:5e:fb:26:00:e8:26:e4:ae:de:
4b:ad:c3:83:11:73:6f:d7:2c:4d:ff:b2:04:41:6c:bc:5f:8c:
13:df:93:53:92:97:50:b5:42:79:49:38:2d:33:e6:6d:03:72:
21:05:70:b2:dd:26:24:4d:b3:f0:72:ad:7a:15:bd:f3:6d:a0:
8a:1a:d0:65:f5:4a:52:f4:99:b1:b6:b1:ef:c9:42:de:15:5e:
0e:53:95:6b:7e:15:bd:61:2d:47:a8:2a:76:8b:b0:fc:5d:9d:
b5:15:26:ea:c3:49:4d:63:09:b9:a9:03:3e:83:70:13:13:dc:
15:81:8c:73:2c:11:e0:9e:1c:c0:e3:65:1f:e2:9c:18:36:5c:
b3:46:03:2a:0b:f5:c1:21:01:fd:f0:81:75:8d:4d:ba:fb:be:
be:bd:97:90:bb:b9:e4:7b:0c:a1:87:89:62:fd:d0:6f:41:b3:
42:77:86:8c:4a:3a:1c:c9:84:a0:46:3f:3f:1b:c7:12:11:ab:
c7:53:de:aa:88:7d:a6:30:26:b7:69:8a:e2:fa:10:3a:1f:bd:
b5:33:53:ee:2f:fb:72:9f:0f:4a:0e:87:b4:27:c9:22:10:51:
87:bd:de:01:78:1a:a9:55:12:0a:86:11:f0:ae:3b:3e:65:b2:
c3:c2:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:52:10 2026 by rpki-client