
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft
File: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft (raw, json)
Hash identifier: ZLxSoB9Jd/Qf+gNYuDPh9NLujR0cH/aPeKSDPUFz9h8=
Subject key identifier: A6:F0:5D:DB:49:F3:60:63:2E:82:65:67:02:91:82:9E:CA:DE:C2:F9
Authority key identifier: F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF
Certificate issuer: /CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF
Certificate serial: 063FBEF283DD1CCB12FED4B879BD44867A25B103
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 21:50:40 +0000
Manifest this update: Tue 16 Jun 2026 21:45:40 +0000
Manifest next update: Wed 17 Jun 2026 22:04:40 +0000
Files and hashes: 1: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl (hash: 73jQeL/oRGPaJCLkLajA3pwkdqAMZipxFGLGVXKjpCs=)
2: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: 25pMisvX0/Q8rpjasSNLO/3FyTnfpVPB5JoH3mYAK2Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl
rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 22:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:3f:be:f2:83:dd:1c:cb:12:fe:d4:b8:79:bd:44:86:7a:25:b1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF
Validity
Not Before: Jun 16 21:45:40 2026 GMT
Not After : Jun 17 22:04:40 2026 GMT
Subject: CN=A6F05DDB49F360632E8265670291829ECADEC2F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:59:58:96:83:38:30:17:5c:66:a6:bc:38:
6e:e9:9c:83:f1:9d:8d:6d:c0:5e:84:88:1d:5f:c2:
e5:8c:15:3b:bd:96:85:c6:28:64:19:ab:a6:9c:f6:
eb:ce:93:11:45:16:f7:a0:75:28:d7:4d:e7:68:20:
3e:b1:2e:7d:43:24:7d:19:7c:98:3e:26:c4:b0:a1:
1b:0b:9f:12:48:80:aa:51:91:17:83:b1:51:cd:c7:
9d:69:71:75:4b:17:6f:07:21:a1:1b:31:dc:73:2f:
01:8a:a0:d1:52:54:95:dd:eb:3d:da:99:d5:98:72:
cb:3e:e6:6f:26:8d:5f:d7:75:22:b9:eb:e4:48:e2:
b3:19:b6:fd:ef:a6:f4:f3:b3:65:f1:6a:e1:a6:eb:
af:59:d6:87:64:81:88:ea:08:90:01:cf:c8:5e:67:
f7:0f:39:74:f9:e9:4a:b3:51:cd:17:48:5f:2c:8b:
01:e0:fe:91:f3:eb:31:18:c7:8b:19:c8:ae:44:b8:
d7:9c:52:8d:75:a9:f0:c6:da:04:30:88:3f:38:52:
4d:63:21:12:18:27:41:ac:97:dd:c7:ea:06:62:d1:
45:c0:9e:54:38:f7:d0:65:16:67:21:55:a4:22:4a:
b6:02:1a:f2:ea:08:8a:34:32:ec:f2:a6:cd:e0:c6:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F0:5D:DB:49:F3:60:63:2E:82:65:67:02:91:82:9E:CA:DE:C2:F9
X509v3 Authority Key Identifier:
keyid:F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:de:01:0c:a8:b3:aa:99:31:70:d1:af:5f:03:9c:ae:f0:52:
0d:09:63:e5:41:2e:7e:f0:d6:90:0f:9b:59:74:f0:b5:b2:71:
a9:42:b4:3e:cc:7f:6e:23:a0:40:15:f8:69:a1:93:ee:00:6f:
cd:a4:bf:aa:3b:33:de:1b:a0:ac:f5:d1:66:22:83:7c:56:0a:
0b:6d:5c:b6:fc:a8:c3:86:ba:11:26:80:e4:f4:b8:4d:4f:e8:
cd:33:85:c4:7b:48:66:05:46:93:3c:7c:2d:f4:0d:d0:61:ea:
c8:43:db:72:8c:b0:3c:65:0b:4e:ea:ec:de:54:00:81:24:6a:
e0:e6:d6:6c:a0:97:fc:dd:53:01:00:76:72:b6:ce:3f:52:ce:
95:be:ba:56:d8:32:5e:82:30:cf:7a:dc:58:55:d2:7b:72:30:
a1:a2:02:f2:01:03:24:24:fe:b6:0c:0d:4b:15:e3:c6:5c:89:
40:c3:54:ea:0f:72:1d:00:f8:ce:cc:bb:e5:99:49:3c:0c:ff:
3f:fe:f2:55:26:39:09:79:30:f3:67:ce:b9:d2:8b:0f:29:47:
f4:30:52:62:78:ca:a1:26:ef:d3:c7:38:e1:35:cd:d6:01:92:
34:7f:db:e6:3b:d3:02:89:b5:21:39:c0:cd:3f:eb:d7:62:1f:
6c:5a:25:df
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBj++8oPdHMsS/tS4eb1EhnolsQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1
MzAyODdERjAeFw0yNjA2MTYyMTQ1NDBaFw0yNjA2MTcyMjA0NDBaMDMxMTAvBgNV
BAMTKEE2RjA1RERCNDlGMzYwNjMyRTgyNjU2NzAyOTE4MjlFQ0FERUMyRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PFlYloM4MBdcZqa8OG7pnIPx
nY1twF6EiB1fwuWMFTu9loXGKGQZq6ac9uvOkxFFFvegdSjXTedoID6xLn1DJH0Z
fJg+JsSwoRsLnxJIgKpRkReDsVHNx51pcXVLF28HIaEbMdxzLwGKoNFSVJXd6z3a
mdWYcss+5m8mjV/XdSK56+RI4rMZtv3vpvTzs2XxauGm669Z1odkgYjqCJABz8he
Z/cPOXT56UqzUc0XSF8siwHg/pHz6zEYx4sZyK5EuNecUo11qfDG2gQwiD84Uk1j
IRIYJ0Gsl93H6gZi0UXAnlQ499BlFmchVaQiSrYCGvLqCIo0Muzyps3gxqLdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpvBd20nzYGMugmVnApGCnsrewvkwHwYDVR0j
BBgwFoAU9ijd3D82se5Kr7J6UqnTXlMCh98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWFkNzM4OTUtYzg0Yy00NjRmLTliNGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMz
RjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1MzAyODdERi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GNjI4REREQzNGMzZCMUVFNEFBRkIyN0E1MkE5RDM1RTUzMDI4
N0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFkNzM4OTUtYzg0Yy00NjRmLTli
NGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQz
NUU1MzAyODdERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADfeAQyos6qZMXDRr18DnK7wUg0JY+VBLn7w
1pAPm1l08LWycalCtD7Mf24joEAV+Gmhk+4Ab82kv6o7M94boKz10WYig3xWCgtt
XLb8qMOGuhEmgOT0uE1P6M0zhcR7SGYFRpM8fC30DdBh6shD23KMsDxlC07q7N5U
AIEkauDm1mygl/zdUwEAdnK2zj9SzpW+ulbYMl6CMM963FhV0ntyMKGiAvIBAyQk
/rYMDUsV48ZciUDDVOoPch0A+M7Mu+WZSTwM/z/+8lUmOQl5MPNnzrnSiw8pR/Qw
UmJ4yqEm79PHOOE1zdYBkjR/2+Y70wKJtSE5wM0/69diH2xaJd8=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:43:10 2026 by rpki-client