
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
File: 84122DA5B146979D5AAE13129EB677B96C49C7F6.mft (raw, json)
Hash identifier: Eg92WPgyfwG7RoeCHfxP9oAbf17bI5R317mkO6iZXDw=
Subject key identifier: 3D:B3:81:E3:A5:3B:31:79:CC:33:8F:7F:41:29:66:85:72:7E:BA:B2
Authority key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6
Certificate issuer: /CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
Certificate serial: 525CB87DD2843A09AC2C05A8B390CEFA1892CAA7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 02:32:09 +0000
Manifest this update: Sat 13 Jun 2026 02:27:09 +0000
Manifest next update: Sun 14 Jun 2026 05:22:09 +0000
Files and hashes: 1: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: jhYHGOtLAWmv9OcO3/5rDKvnFPZl5OTObgAsQoi8r50=)
2: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: LWJq/XJLjGCHAx0PdP5FSd33v0EqmvbG5/RZUAKgCgs=)
3: 84122DA5B146979D5AAE13129EB677B96C49C7F6.crl (hash: GSOVuoHfGgXRHpiE1qMycnwHq5K3omHVvxbFXcj72Ao=)
4: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: u+tKwHgjMKGgdgEnZPp2mwsftX+fJPIHxzdML3oWuA4=)
5: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: fHid8e/HPZhTBqkYcMs+Y715ZVlDl6RBBe2DwEnsBPc=)
6: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 2a7WLuRJ0dxekwgo8okkZl2guEN5PE3JgGMBxaSTXY4=)
7: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: LXKwnzjsakvh6k668BXuaYJ1O5iQ9reQNkhpZI7YDu8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl
rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5c:b8:7d:d2:84:3a:09:ac:2c:05:a8:b3:90:ce:fa:18:92:ca:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
Validity
Not Before: Jun 13 02:27:09 2026 GMT
Not After : Jun 14 05:22:09 2026 GMT
Subject: CN=3DB381E3A53B3179CC338F7F41296685727EBAB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:a7:76:a9:93:fe:fc:24:b5:fc:c3:4e:27:
a6:7b:73:7b:04:9e:c4:c0:e1:0a:f3:6c:bd:ef:9b:
45:cf:32:c2:93:96:de:98:a2:d4:59:82:06:18:e2:
5d:ef:3e:74:7f:8d:71:50:6f:56:98:84:37:6b:71:
d4:8d:f9:e0:3a:43:71:df:9d:3c:4b:b5:61:59:a9:
0a:e6:bc:da:e9:07:59:df:d7:e4:94:cb:03:5c:97:
a0:63:3c:ad:5d:9a:56:8d:1b:b1:7c:40:ac:d2:33:
20:6e:6a:70:d5:58:7b:56:36:b9:13:d8:68:2f:e8:
c6:c2:62:8b:25:ad:fd:06:2d:a2:c7:48:ed:03:c4:
93:20:6f:cd:84:c4:7d:89:58:1e:7d:3f:ea:4a:f1:
10:45:45:12:e8:28:53:da:bb:34:c8:76:f9:b7:8b:
77:e8:ea:8a:f1:e2:85:be:3f:f1:7f:7e:8f:93:14:
03:e7:d0:d9:32:f3:6f:51:4b:b5:c0:f7:45:03:6e:
0d:9e:f4:a6:6b:4b:52:7a:7e:53:9e:7c:96:e2:b4:
3b:06:66:1a:bd:6b:41:f3:18:aa:fe:09:07:b1:f2:
02:17:63:e8:6c:19:f1:52:a6:5f:34:d6:05:6f:da:
02:95:29:4e:df:5a:1c:a9:21:ae:c2:c4:fd:de:11:
dc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:81:E3:A5:3B:31:79:CC:33:8F:7F:41:29:66:85:72:7E:BA:B2
X509v3 Authority Key Identifier:
keyid:84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ba:b1:cb:da:9b:ed:f2:e1:de:85:46:50:3a:a0:6c:76:f6:
ea:e6:bd:94:99:e8:60:ea:bc:f5:3e:d9:f3:a7:f2:4d:67:89:
f5:8b:7f:67:21:47:6b:f8:63:50:65:56:f3:d4:e0:dc:86:0a:
6d:2f:76:80:41:6a:e7:32:db:97:5d:d3:99:d7:82:f9:7a:8d:
24:b1:f1:cd:fd:c9:8b:e7:62:76:4c:f1:20:c2:25:89:85:95:
5c:23:13:cc:40:2e:24:7c:d8:04:6a:0f:8d:3c:78:f1:6c:25:
30:fd:25:e5:f0:3a:36:9a:7d:4f:d2:83:c3:03:82:d0:85:76:
3d:c5:e0:f3:08:49:20:bb:5f:f4:dc:45:4f:5c:ce:81:57:f8:
da:4f:14:5a:2f:b1:f7:89:d2:0a:b3:47:27:73:0f:ac:a5:82:
67:d5:8b:87:47:6a:15:a5:58:ea:5b:61:bd:a8:aa:05:12:b6:
d3:17:2f:4f:e1:1d:cf:af:48:3a:43:eb:b8:f3:39:c9:91:ed:
af:9e:7a:1f:2a:e9:70:76:a3:ed:6a:b6:85:b9:20:6a:69:88:
5d:f6:89:f8:7d:2f:e2:14:61:a9:28:77:6e:d8:b1:9c:98:2c:
ec:c5:cb:d6:89:69:30:86:dd:70:29:ba:95:95:7c:15:3b:05:
c5:71:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:24 2026 by rpki-client