
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
File: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft (raw, json)
Hash identifier: N+rcGUsZqB2drpXBVEVz7dxd4EmT+KYhsLcGUL37AOU=
Subject key identifier: 4F:54:F0:60:99:2E:D0:D8:19:A5:CC:6E:1F:B2:7A:7D:52:4E:3A:80
Authority key identifier: 81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B
Certificate issuer: /CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B
Certificate serial: 6E4687749B456F552C3A6B2CF06935FE60914724
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 08:07:43 +0000
Manifest this update: Wed 17 Jun 2026 08:02:43 +0000
Manifest next update: Thu 18 Jun 2026 09:29:43 +0000
Files and hashes: 1: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl (hash: FK6tOD1KpBq7HbgXC+dpEqyosM+YNYhbhNBrE6VXHOg=)
2: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: S09DylQ/yldBJCxeAdZuhd1EyaS2Xybcb8te/eWM2dM=)
3: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: C4VhfRzKoT9ksZvdL8CPzP9K+3FYQAaDgMeeFvQaFx4=)
4: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: 33Yh92al19b28Gnrtu4qIdUOBoZECAqIchLAQkEaJ/I=)
5: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: +rTucgGLiY8uqL8eF3DTMn/pET3ZcxtiVlAUU6weN/o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl
rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:46:87:74:9b:45:6f:55:2c:3a:6b:2c:f0:69:35:fe:60:91:47:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B
Validity
Not Before: Jun 17 08:02:43 2026 GMT
Not After : Jun 18 09:29:43 2026 GMT
Subject: CN=4F54F060992ED0D819A5CC6E1FB27A7D524E3A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b9:48:8a:89:b4:98:7d:e5:b6:03:ed:6d:13:
c9:cb:e7:08:d7:ce:11:42:ea:cb:e9:b3:67:89:0c:
0d:44:a7:2f:19:15:82:43:f9:97:0f:a5:6d:ca:47:
da:50:6e:02:b0:ed:19:14:b4:ca:c8:7b:53:88:63:
9a:b9:52:dc:9a:ce:4d:08:76:f0:5b:04:52:9c:ad:
37:8b:a4:82:33:88:22:20:c1:da:3b:df:39:0d:f3:
89:dd:a6:30:04:ed:c3:dd:53:a0:d2:a9:6e:a3:e9:
26:19:ba:b4:b8:f2:59:83:5e:ea:fb:96:b7:e4:5f:
dc:04:04:04:b8:cb:94:7b:25:06:f5:75:ce:a3:2f:
0a:75:bd:07:ef:c5:df:b6:49:0d:65:ca:58:e7:c0:
04:e9:28:5e:c9:43:cb:6b:da:03:72:67:97:27:a1:
9d:fb:29:31:f7:8b:d8:96:cb:0a:cd:ff:1b:a7:72:
61:8b:1b:01:0d:1b:aa:37:9f:7b:e0:40:a6:32:98:
39:18:9a:c0:19:35:cd:9c:53:a0:e4:ec:2a:55:c8:
d3:e3:ac:13:ec:18:4f:3d:10:69:32:d2:52:fd:a1:
3a:5d:a4:47:58:d8:00:b4:e0:34:a8:e9:ea:7b:ee:
f3:68:8d:1c:1e:45:23:f6:de:8d:d7:03:83:75:d2:
22:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:54:F0:60:99:2E:D0:D8:19:A5:CC:6E:1F:B2:7A:7D:52:4E:3A:80
X509v3 Authority Key Identifier:
keyid:81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:61:1d:1b:5c:a4:ec:97:64:c3:2b:b3:2d:29:f4:87:c2:29:
c9:53:83:6b:b4:c0:01:16:2f:6c:4f:0d:28:bd:7b:7c:28:3a:
85:5e:d1:94:2d:5f:e5:76:ef:e0:48:4a:23:99:a1:14:03:5c:
d1:0b:b0:7b:29:3b:27:42:95:91:c4:6a:88:15:d2:5a:83:67:
60:e5:4e:5d:74:10:d0:bc:b2:fa:ea:9f:c0:56:8e:51:47:c1:
b9:6c:de:81:46:6f:bd:9c:d1:b5:15:d2:2d:92:0a:99:91:8f:
e0:f2:d1:d4:c0:92:d5:d1:1f:39:fa:ba:8a:96:f3:7a:a7:e8:
81:48:f4:b1:84:7c:4e:f7:f9:a3:aa:dd:68:7f:2e:35:0a:37:
30:18:ca:9b:51:5b:b2:a2:b4:f3:b8:20:3b:19:18:09:b9:fe:
c3:5d:cc:2f:e1:93:d9:b6:fd:c4:c4:19:32:58:7a:e2:c9:a6:
a9:eb:d3:3a:ce:bf:52:2a:40:87:2e:28:c7:5c:ef:df:d6:12:
1a:17:03:0b:72:30:e1:83:17:ae:00:b1:16:85:0f:2d:21:7b:
98:2c:3b:d9:32:b2:bb:31:26:b3:11:aa:c9:46:52:a8:bd:75:
ef:ff:24:4e:3e:5d:38:40:12:8b:08:ad:f9:17:66:d6:ab:70:
09:1b:b9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:23 2026 by rpki-client