
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
File: 591286FA978EE719A57E5A972B00E176D16D8BD5.mft (raw, json)
Hash identifier: CXAOn7pj9o6F0cJhWKMrKVzGM3P8lwfHo48zQB6TL/8=
Subject key identifier: C5:8F:63:9B:2A:A3:BD:B7:06:3F:46:DA:C6:67:DA:7B:81:89:F6:64
Authority key identifier: 59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5
Certificate issuer: /CN=591286FA978EE719A57E5A972B00E176D16D8BD5
Certificate serial: 7A4C47CC7F07718A0C56BAC5EC188F9425826F6C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 01:10:47 +0000
Manifest this update: Sat 13 Jun 2026 01:05:47 +0000
Manifest next update: Sun 14 Jun 2026 03:47:47 +0000
Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: SnKbiJCVGtegt8XCckG5YzkpcAALoWkVUsik+AGbmDg=)
2: 591286FA978EE719A57E5A972B00E176D16D8BD5.crl (hash: rLBO9bA4QF6a4XFP7X/dXO+qQG22m6v8FuzwljC54iw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl
rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 03:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:4c:47:cc:7f:07:71:8a:0c:56:ba:c5:ec:18:8f:94:25:82:6f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591286FA978EE719A57E5A972B00E176D16D8BD5
Validity
Not Before: Jun 13 01:05:47 2026 GMT
Not After : Jun 14 03:47:47 2026 GMT
Subject: CN=C58F639B2AA3BDB7063F46DAC667DA7B8189F664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:50:77:d3:db:d6:dd:8c:d2:30:97:ef:a4:
a2:d6:37:b0:15:39:58:81:c7:d3:5b:00:c7:0f:23:
33:6b:32:fb:f6:bb:23:5f:82:99:67:d4:87:55:0f:
94:b3:71:1c:d0:57:3e:19:31:62:9a:f8:32:fd:92:
bf:67:13:ea:d0:72:29:58:16:a0:7a:0b:a8:94:89:
53:b0:59:5d:a1:1a:37:12:8d:94:e4:77:8a:4a:40:
10:9f:29:77:84:e5:0c:dc:1b:af:11:62:c5:a6:17:
66:2b:a6:4d:ed:2f:46:1a:45:1c:f0:0a:9a:a9:fd:
7d:97:9b:b1:d0:0c:e8:2d:1b:48:aa:6f:f1:fe:be:
e7:17:89:17:4d:aa:ea:e2:41:74:3d:18:97:2b:b8:
b8:83:5f:b2:2a:fd:1e:25:d9:9e:9c:0e:19:00:1c:
01:34:ba:06:a7:c3:02:c6:50:ac:2d:5f:05:35:d4:
f9:4a:3d:1c:75:f0:2a:48:d6:6c:3d:ce:3a:2c:7c:
e2:b8:a3:db:f9:39:62:b0:2d:ac:35:86:91:98:74:
13:92:78:ad:35:9e:2f:96:b4:77:65:f6:eb:72:8c:
6e:92:92:42:09:51:d8:ec:0d:77:11:06:2a:4a:e1:
3f:be:94:0c:3c:71:fd:7c:65:94:d1:22:0e:60:d9:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8F:63:9B:2A:A3:BD:B7:06:3F:46:DA:C6:67:DA:7B:81:89:F6:64
X509v3 Authority Key Identifier:
keyid:59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:eb:bf:1b:97:fe:af:4f:b4:9c:f3:9f:cf:67:91:23:dd:96:
f9:06:4b:55:2b:f9:dd:0a:0f:af:e4:87:34:45:20:c9:cb:07:
09:69:d8:61:5c:33:11:c0:68:6c:d8:d7:c2:37:c7:24:66:9b:
3d:0b:9d:70:da:75:1b:c7:0e:97:1f:e7:3e:0d:08:cb:ca:2e:
6d:88:35:c7:97:4e:b6:62:a9:d1:90:4a:e1:bd:91:1f:09:fa:
bf:45:8d:28:54:21:d2:63:9d:d0:3f:c8:16:5b:69:a7:36:55:
67:c0:29:ad:05:b5:44:b3:5a:f0:57:49:7e:b0:ee:1c:0a:8d:
79:0c:5d:6f:1b:d2:ef:ac:38:40:2e:7d:27:a0:36:5b:1e:b3:
ac:8c:8d:58:ae:11:fa:44:5e:77:f2:44:0e:09:83:59:79:1d:
93:54:a5:c3:3e:04:e6:8d:11:ce:1f:2e:c7:f1:74:ff:a3:30:
79:8c:52:2a:84:d5:ad:79:7e:43:a8:de:c1:c7:36:99:90:80:
34:d6:80:48:6f:a4:0c:d8:45:39:f5:d8:e1:d8:4d:b3:71:47:
58:05:47:ad:03:53:09:c1:aa:4d:40:00:47:4b:8e:d3:d6:4c:
4d:02:ca:18:a1:7b:ac:40:6b:ba:cf:97:56:33:c3:3b:d9:62:
ea:2a:2a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:40:59 2026 by rpki-client