
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft
File: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft (raw, json)
Hash identifier: oC8y35vBw6JMocP6e6RTtssDCYlFu3QVZGk6a5HXpUs=
Subject key identifier: D9:4C:27:AC:8A:C5:12:12:9F:73:93:D2:36:CE:DA:B1:08:DB:94:F0
Authority key identifier: 0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1
Certificate issuer: /CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1
Certificate serial: 7F8250424EE2A2D791019274C818EBEA9C9A9776
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft
Manifest number: 3A
Signing time: Sun 14 Jun 2026 02:00:17 +0000
Manifest this update: Sun 14 Jun 2026 01:55:17 +0000
Manifest next update: Mon 15 Jun 2026 04:48:17 +0000
Files and hashes: 1: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl (hash: ci3iR7FNA0azSnh/SEUaiuEbEM8WiugGgQKjU5R4yQ0=)
2: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: 5EvruLBNSAVPD9rhIUp2sgGO0l1cxlFHLpEgjT7FBPg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl
rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:82:50:42:4e:e2:a2:d7:91:01:92:74:c8:18:eb:ea:9c:9a:97:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1
Validity
Not Before: Jun 14 01:55:17 2026 GMT
Not After : Jun 15 04:48:17 2026 GMT
Subject: CN=D94C27AC8AC512129F7393D236CEDAB108DB94F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:96:38:80:bd:93:cf:45:b5:d7:13:f5:81:
cd:eb:df:29:1f:13:9f:3c:c6:18:fe:a3:20:11:7c:
b9:95:4e:f7:44:3c:52:22:2c:a5:3a:70:ea:fd:39:
fe:8b:37:8f:24:ca:d1:a9:18:15:92:40:33:6c:2b:
d6:e1:e6:5e:f0:df:36:10:32:67:cf:5f:50:24:3e:
f9:7f:ac:f0:3c:a2:c7:6b:81:ba:7f:f5:cf:c3:da:
19:0c:b4:32:e7:c4:d5:96:a6:32:85:b3:03:d2:10:
85:3c:4d:eb:a4:2e:28:11:72:62:52:53:b7:2b:67:
91:24:b8:9f:a5:56:fb:fd:7c:09:8d:6b:df:bb:c9:
ac:93:bc:0a:61:c7:5d:ba:34:b4:f0:60:1a:ac:16:
fa:23:df:80:c8:a6:08:6e:a1:6f:b9:3b:13:d3:a4:
d0:92:6d:c1:dc:b2:ed:fa:97:ae:c2:77:6d:f1:20:
e1:52:67:3b:69:20:ea:4f:9d:f7:b7:a1:80:9e:49:
5b:59:1a:9b:4b:de:95:d8:73:4d:51:08:6a:d3:ea:
e1:c4:44:c0:a5:e6:85:71:b7:bc:c8:bb:87:7c:b1:
1c:f0:8e:90:31:a4:43:72:54:64:15:72:7c:43:01:
63:05:60:c8:5a:7f:f6:0e:51:44:cf:31:c1:4e:7d:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4C:27:AC:8A:C5:12:12:9F:73:93:D2:36:CE:DA:B1:08:DB:94:F0
X509v3 Authority Key Identifier:
keyid:0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ee:51:3e:3f:b2:58:d7:ff:fc:93:13:c2:79:fc:2e:f3:99:
31:9a:8f:cf:3f:f2:82:42:cb:32:34:71:58:4b:a4:c8:a7:9b:
f7:27:34:cb:21:4f:a5:4f:1a:1f:ca:0a:c3:e6:8b:9a:e7:bc:
e1:a8:c2:3e:7e:87:fa:41:74:e3:bb:3f:77:1c:30:c5:86:64:
02:20:86:77:d4:fe:8a:6c:ab:5d:4d:2c:0f:62:9a:2b:04:fa:
af:f9:ea:e3:a0:1a:b0:da:40:b7:d0:ed:57:6b:61:cd:5f:6a:
d4:2c:33:36:d4:a6:b6:ae:bf:bf:7a:29:bd:00:9c:c5:25:db:
a2:34:a9:c1:fd:3d:8b:16:8f:91:71:fe:5e:f7:44:c0:ec:d7:
c8:13:06:2c:8e:97:66:68:af:91:ee:af:1f:18:7f:43:92:e6:
e2:f3:40:bf:8e:18:10:fb:db:b9:2e:d8:d6:1a:9e:9e:e7:73:
6d:d5:c8:a5:42:6a:c1:93:67:8d:a7:3f:8b:70:f3:25:28:f2:
a2:27:5d:96:35:60:8b:5a:f1:e9:5e:77:be:e6:fb:18:a4:07:
74:18:46:ae:03:05:dd:91:0f:15:5c:a4:6f:13:43:22:85:3c:
f9:be:0e:bf:ad:c1:7c:4f:ab:53:99:2e:70:5a:ce:fb:3b:45:
49:74:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:05:13 2026 by rpki-client