
$ rpki-client -vvf rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
File: D51AA8B3D72CDB71C90345B767919665E60A217F.mft (raw, json)
Hash identifier: oV7IpvJvr/DuBLg4oomcjREBr2l/QxRVwquZZIb11hE=
Subject key identifier: 37:B1:82:35:85:BF:B4:21:75:EF:69:A3:0C:77:77:74:A8:84:E5:AA
Authority key identifier: D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F
Certificate issuer: /CN=D51AA8B3D72CDB71C90345B767919665E60A217F
Certificate serial: 144F0799BB3B5BB034A2002BB16D3CBB708D92F5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 17:04:49 +0000
Manifest this update: Tue 16 Jun 2026 16:59:49 +0000
Manifest next update: Wed 17 Jun 2026 17:23:49 +0000
Files and hashes: 1: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: qWXJBwwFjRlNPlzGu34yKlzyWtSJkvJR6tTW+DXklsI=)
2: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: rfjdhFUeqRzlpu/a6IIMJJdIbxMUcj3gavb0NZINzaQ=)
3: D51AA8B3D72CDB71C90345B767919665E60A217F.crl (hash: eyknxoIReVA3KZjQTsWkFy1v/QRuf1nLIsizFXN51zE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl
rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:4f:07:99:bb:3b:5b:b0:34:a2:00:2b:b1:6d:3c:bb:70:8d:92:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D51AA8B3D72CDB71C90345B767919665E60A217F
Validity
Not Before: Jun 16 16:59:49 2026 GMT
Not After : Jun 17 17:23:49 2026 GMT
Subject: CN=37B1823585BFB42175EF69A30C777774A884E5AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:47:70:1f:53:21:3f:3c:6c:c0:c3:f8:13:
55:1e:4b:b8:fa:d2:51:67:ff:d1:f2:84:69:49:60:
31:5e:39:0c:f8:df:a8:a8:c4:b5:c9:c3:a3:a5:b2:
f5:93:75:82:f8:6c:10:6f:98:83:6d:97:ad:46:7e:
2c:11:30:e8:c7:34:25:98:15:7b:a5:52:96:8d:96:
a4:07:6c:52:16:4a:35:49:2e:17:ea:a2:a9:eb:f5:
03:df:69:e4:61:4a:49:44:d6:e3:cc:cc:2c:af:7a:
a5:31:51:a0:6b:6b:37:af:da:f5:e1:93:17:86:0f:
da:77:f7:0b:93:48:f6:7d:28:9a:15:fe:e6:14:f1:
1a:a3:72:3e:ee:f9:d1:d9:2d:ab:00:e0:a7:28:dc:
8d:69:72:3f:93:5b:93:1d:c3:a7:a1:2e:a9:7b:25:
3b:b0:53:97:97:5e:7d:a0:9f:3c:a6:6f:87:d4:0f:
6f:07:98:0a:6b:b1:78:35:4d:18:8c:94:1a:ac:47:
2e:45:89:fe:b9:c2:5b:5a:6f:1e:d4:22:ed:b0:14:
d7:d0:36:00:8b:21:6a:e3:9d:14:a7:a4:c0:6c:78:
77:9f:67:62:1c:cd:4b:29:e5:1d:c8:65:6f:a9:d4:
9e:a9:3b:1c:ab:7b:03:a7:65:1a:d4:a6:65:f7:66:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B1:82:35:85:BF:B4:21:75:EF:69:A3:0C:77:77:74:A8:84:E5:AA
X509v3 Authority Key Identifier:
keyid:D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:01:29:91:b3:49:d1:71:bb:8e:70:de:b0:d7:d9:b9:75:f7:
99:d7:7b:aa:b7:eb:28:3d:52:d9:f8:23:f4:8d:0e:72:ab:69:
42:98:08:f5:94:9a:c5:5d:d3:e8:6f:93:44:3f:0b:8b:dc:b0:
50:94:57:8c:8f:7c:a4:08:44:0a:e2:a7:93:fa:e2:73:d5:6d:
13:10:1b:dc:0f:ae:a7:23:e8:3a:93:3c:50:c0:54:e5:07:9e:
fa:c8:45:45:c1:e6:6e:70:7e:0e:bf:0d:2a:b5:bb:f8:8c:f8:
00:e9:e0:b5:54:44:06:f5:7c:cf:84:34:32:51:3f:5f:54:c7:
72:5a:62:2f:20:e6:4c:fe:71:e0:1c:c5:24:ce:fd:16:e5:5e:
88:1a:83:9f:2e:18:96:37:b1:a5:25:7a:fc:6c:18:24:90:11:
65:17:2b:dd:98:26:41:8a:fb:1e:ad:30:07:6a:cd:eb:bc:62:
35:77:45:76:35:dc:e6:65:fc:4e:89:d4:32:87:cb:b9:4e:d7:
13:fa:0f:06:cf:b0:f4:57:f1:6e:c1:1c:65:46:a6:70:3e:9b:
10:5a:bd:10:aa:ea:25:68:f4:f3:27:79:f6:36:62:7f:82:d0:
6d:96:1f:0b:ae:61:79:81:89:a4:15:13:81:df:23:80:fe:25:
38:67:29:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:14:44 2026 by rpki-client