
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft
File: 511F1AA1B492F6794EF165F62B075919F2B16E44.mft (raw, json)
Hash identifier: bfyg5UKT7789wc5IXOZWXPlSSc9pSe0mmpNsyEI7kek=
Subject key identifier: 1C:2E:76:82:4A:DA:67:6F:79:E6:8D:F3:EB:CE:41:E7:68:86:BD:44
Authority key identifier: 51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44
Certificate issuer: /CN=511F1AA1B492F6794EF165F62B075919F2B16E44
Certificate serial: 50B85F8299AF95BFF0AFB5CBB97D226C4CBB0786
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 10:06:08 +0000
Manifest this update: Sat 13 Jun 2026 10:01:08 +0000
Manifest next update: Sun 14 Jun 2026 13:03:08 +0000
Files and hashes: 1: 511F1AA1B492F6794EF165F62B075919F2B16E44.crl (hash: m91Ca2zQaTjG5YyqHdGEA2oYWtSTYYmpZVWaawtparc=)
2: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: FVP2US2KHUP1OZkRW6LNBrYfqVg0Zj0UfccY8UblEsw=)
3: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 23fAd0P4P+mgKNL3oa2CrgF3dqXD3ZtfsTB8p14sYV4=)
4: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: E1+7D4tNcCRDkcP3qmZK/bR+JhJZ6mmoU1gs2WuZdOo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl
rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b8:5f:82:99:af:95:bf:f0:af:b5:cb:b9:7d:22:6c:4c:bb:07:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=511F1AA1B492F6794EF165F62B075919F2B16E44
Validity
Not Before: Jun 13 10:01:08 2026 GMT
Not After : Jun 14 13:03:08 2026 GMT
Subject: CN=1C2E76824ADA676F79E68DF3EBCE41E76886BD44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:66:77:1d:3b:f0:02:a7:f4:eb:dc:c7:96:
31:91:51:e3:4e:59:a2:eb:0d:4f:a1:49:c0:9a:60:
63:af:9a:44:dc:96:a7:b4:7f:08:a5:59:77:a3:bd:
66:5d:35:33:4c:f4:59:5c:a7:c9:c4:60:12:25:61:
5d:a8:f1:68:31:db:29:34:a4:ec:01:f4:00:e3:e2:
5e:54:c1:cb:cd:40:a5:9c:d7:d5:04:3a:fe:f2:55:
d9:51:da:20:01:b6:41:fd:06:2a:8b:1b:d9:65:20:
7d:9a:fb:91:8b:78:92:5e:08:81:8b:58:b0:c0:d2:
2f:2c:df:b8:f4:e6:cd:e7:87:93:34:89:f2:60:07:
12:07:9e:bb:ee:fb:79:66:6c:38:48:d7:92:f9:a6:
39:ab:16:01:76:59:cf:db:b6:38:16:2a:34:46:7b:
01:65:bb:ac:52:01:6d:a7:36:0f:a8:ce:e2:3c:53:
47:f3:70:ef:16:b8:5d:0c:b4:0a:41:a6:8e:2b:ad:
e4:e8:4a:68:9f:44:ee:3c:41:22:2e:72:c7:0d:40:
43:bf:20:ae:27:c4:83:3a:98:03:12:3b:8c:c1:4c:
44:7c:2f:d2:19:9c:57:76:12:5a:f9:a6:f5:32:64:
94:6d:b8:15:7e:28:cf:b7:b4:34:59:0d:01:ac:7b:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2E:76:82:4A:DA:67:6F:79:E6:8D:F3:EB:CE:41:E7:68:86:BD:44
X509v3 Authority Key Identifier:
keyid:51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f9:c8:a0:71:97:28:1e:3c:c0:48:74:b7:10:23:bd:a9:18:
0c:77:5a:58:ba:bd:85:7e:19:99:32:d7:94:90:d8:2e:7a:43:
43:0e:76:66:e2:d5:0b:d4:2c:eb:52:50:2c:ce:e4:cf:8d:3e:
41:3e:1e:57:4a:d3:8f:4e:a3:3e:3b:01:66:e6:a0:95:4f:d6:
cb:28:34:3c:74:e5:0b:3e:d0:3e:35:d5:66:4a:41:41:33:49:
fa:fd:03:4e:4d:ab:58:c9:26:e6:7f:e8:8f:4d:9b:61:1c:be:
06:88:47:d2:c1:ad:54:48:69:39:4b:ec:10:95:50:f4:35:4d:
59:ed:28:82:7e:03:9b:fa:47:65:cc:2a:b0:54:d4:6c:97:5c:
47:3c:e2:fe:3f:63:69:a8:89:93:7e:a0:98:c4:f6:b5:81:cf:
59:9f:0b:6e:d4:03:ae:e0:cc:96:fc:d3:d2:2c:dc:41:53:cd:
c6:f7:ff:b2:74:ac:20:29:7b:cb:04:2a:1a:dd:12:74:b4:9a:
9b:50:d0:ac:5c:9c:ce:2e:8a:07:73:5a:c3:c9:2e:c8:c7:96:
11:e1:ef:56:d8:10:df:40:63:4c:50:e0:21:2a:70:0e:88:71:
bd:3c:ab:58:e9:de:45:97:75:78:fb:0b:68:18:88:98:59:66:
c0:18:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:47 2026 by rpki-client