
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
File: 12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft (raw, json)
Hash identifier: YsyxR7OCJIggRJsS94UdJ+WDcoQ5LZrsDacFGhGDQ9I=
Subject key identifier: 0E:39:FC:52:73:D8:36:AB:14:DC:5E:13:9B:A7:C9:8A:53:2F:52:45
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Certificate issuer: /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial: 2D0025C145723C47EE1D06C11C82CCFA4373D5E7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 21:45:34 +0000
Manifest this update: Tue 16 Jun 2026 21:40:34 +0000
Manifest next update: Thu 18 Jun 2026 00:33:34 +0000
Files and hashes: 1: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: P7oRDyeMFp3GGVH+xItLcQl5cfAi5+V0YTxFNRF2C0E=)
2: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: OU86nZYQrz1f0zZsfAKDY29WgpGVg/0ubhimI1XnObE=)
3: 12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl (hash: gGp3mgTuGk14ZN8W3c36iMK797eDdHM3XObuNETuAaE=)
4: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: 8vjkp3sLrVBHiAgyH56aiCnbINXIhcUYHhrNLKFnaHI=)
5: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: jn+GzuAFdRGnqz/8h2QUcRukZQjtYixsBnGXWuK3nO4=)
6: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: 5iKsngZjg/l5di0MQ+AlFhBsTwnY2MGxKfhU9yL6oXQ=)
7: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: rRunzg5grI5Ndu/SnsBkpVbfTxQjQL07FKaDwNl7X7E=)
8: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: MAg0dVjN/VisS1hFmLJD+dd3x6Va1gOOR658nswBpQU=)
9: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Wx7ZMhfu3QmD55ls7OXnHTLI9Lf1rMbERV/S++9hKS0=)
10: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: iv2uySioSu/LP3pkRp7Yqlhu3HDQ0VTi7eqjw18RcDM=)
11: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: yNSswNu7I5mxAU9hq/xHGawbAp2gMK9dl+S56V1qrxg=)
12: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: M54jxmbu4YqiH5X9dKoh0g3u0CXxxc0mduMC1QC7i/M=)
13: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: p1nXgf4HFcxW2Y4PUtsAhVWmj9aD2WMQQIgpZQnsekc=)
14: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: U/FMi72YlD8fNIhbb89qQOjcqCNZEMwjeIPmXn3ZWgc=)
15: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: 2s3lWabzD50sQ0ixmB15BHbTU/1RTqhE4LdKo/MqXUU=)
16: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: vuwCjebAC0K8psv6+IDrny1yHZ/N79DOq7lCZjfajGI=)
17: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: by6bVuVjvD6SHS/RSc1MKPNjclAKxLlvShxlE0Ivay8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:00:25:c1:45:72:3c:47:ee:1d:06:c1:1c:82:cc:fa:43:73:d5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Validity
Not Before: Jun 16 21:40:34 2026 GMT
Not After : Jun 18 00:33:34 2026 GMT
Subject: CN=0E39FC5273D836AB14DC5E139BA7C98A532F5245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cc:d5:57:02:a1:a8:d8:82:23:0a:9f:31:fc:
37:db:d8:aa:5c:28:75:ff:c5:4a:1f:2f:37:61:ad:
5c:05:3c:68:24:fe:f7:19:bb:1c:7e:31:3a:3f:33:
12:3b:fb:c5:8a:db:0f:ff:10:a2:a7:65:d6:51:55:
e8:cb:1e:6b:94:58:14:6b:56:89:dc:31:90:a4:74:
3c:5d:f6:e5:53:ba:48:cf:40:58:2b:31:7c:0c:ac:
37:6a:bd:85:27:0d:98:63:49:da:ff:94:2b:bb:e4:
9c:99:d1:66:65:91:6b:86:5c:6f:8a:1e:8f:1e:a5:
92:44:81:0c:76:95:54:13:2e:b8:c0:6d:e0:ab:93:
ff:c1:87:f6:97:5c:7b:aa:a5:92:99:32:2d:91:46:
e0:15:b9:18:e2:1f:f4:d4:f2:1a:09:15:8b:f1:8a:
ba:54:61:0e:ad:6b:15:71:d1:37:c5:29:d5:dd:0d:
1f:00:23:78:72:35:77:ad:c8:ed:64:c6:fc:4c:26:
49:c7:a5:4c:1e:e3:d8:ce:d8:ed:e0:08:ab:0b:55:
1d:ee:d1:ea:54:45:a2:71:c8:29:6c:15:c8:ef:8c:
00:73:f5:17:f6:0e:3d:5a:10:75:06:79:88:e1:78:
55:45:84:80:aa:3d:af:f3:ed:ef:57:f3:1a:f0:d5:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:39:FC:52:73:D8:36:AB:14:DC:5E:13:9B:A7:C9:8A:53:2F:52:45
X509v3 Authority Key Identifier:
keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:90:93:a0:d1:9f:44:99:90:0c:92:94:76:3d:06:32:6d:a4:
4d:a5:5e:79:d3:cb:f7:d1:f1:b5:c8:52:d8:d2:8e:57:e1:e7:
5c:0e:8f:4f:29:c3:8c:28:dd:1f:69:a7:00:2c:59:4c:75:2b:
1a:12:24:e7:4b:cc:11:42:81:22:70:df:ac:7c:c9:08:d1:2c:
f7:fc:ae:ea:38:9d:10:81:0b:7a:84:c7:0c:98:df:93:f0:26:
f4:71:c9:7f:4e:aa:29:9f:1d:f2:8c:b0:a1:ed:f9:a9:8d:c4:
d8:2f:a8:40:96:14:a9:21:d9:c4:93:20:77:80:8d:fc:08:d5:
63:ad:09:c8:c5:1d:6d:f9:df:e0:8d:1c:70:55:1e:64:44:51:
2d:ce:e7:72:58:dc:00:e7:ee:2d:2a:d8:05:eb:af:eb:07:31:
bc:98:2e:38:51:a5:b4:47:e4:5c:c9:d7:c8:23:e5:54:80:f2:
49:31:3c:6f:11:f5:9a:8c:f5:71:99:e8:fa:7b:76:5d:59:d3:
a0:79:c9:4a:e4:c3:ca:c7:ae:2a:0f:ee:1d:bc:96:3a:d3:c5:
f0:85:9c:ab:93:59:9f:8d:4a:a8:24:71:aa:2a:c9:ea:96:7c:
fa:99:ff:a8:7e:41:b8:b7:69:96:7e:57:5d:1c:af:fa:9a:bf:
74:f3:c3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:08 2026 by rpki-client