
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
File: 94036675301DBECEA598F27C69DCB2391E3C2886.mft (raw, json)
Hash identifier: kcm+Wl+amBsZp1J5muL6zfOkZKWQHaemAndJbjClMhI=
Subject key identifier: 12:49:2A:B7:87:96:6D:E9:2B:0A:F1:56:EE:CB:98:BD:E6:DD:D0:A2
Authority key identifier: 94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
Certificate issuer: /CN=94036675301DBECEA598F27C69DCB2391E3C2886
Certificate serial: 3D72657271561438D9CD2C4E4F3C0AC6AA31B7E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 23:32:34 +0000
Manifest this update: Tue 16 Jun 2026 23:27:34 +0000
Manifest next update: Thu 18 Jun 2026 03:00:34 +0000
Files and hashes: 1: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: /165UFjNpwWW+EZFcjl+71+ujJPspyfJC04aoRjZsKo=)
2: 94036675301DBECEA598F27C69DCB2391E3C2886.crl (hash: O3FLHTBt5Cjh75iouumAc6rImswht3kzhrN+E1TlHME=)
3: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: 63RFUP20PHT95cd0UVwx1h2yICgt0oulTqYaR5p2Hfk=)
4: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: Ll1O0jrLBRiezZCuRZRt8vBzf1LiXokuLQkKXN01bA8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:72:65:72:71:56:14:38:d9:cd:2c:4e:4f:3c:0a:c6:aa:31:b7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94036675301DBECEA598F27C69DCB2391E3C2886
Validity
Not Before: Jun 16 23:27:34 2026 GMT
Not After : Jun 18 03:00:34 2026 GMT
Subject: CN=12492AB787966DE92B0AF156EECB98BDE6DDD0A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:84:63:bd:87:ae:e3:ac:1b:f8:a2:3a:bc:
f6:9d:32:f8:00:3d:35:22:5d:66:5e:b7:d1:c8:7a:
08:c1:17:78:cd:f2:07:65:8f:ac:2b:39:ff:01:13:
b5:80:3b:01:69:07:07:05:83:a6:89:f3:f6:3b:6a:
f1:f5:06:3a:d2:65:b0:e1:1d:40:eb:5f:f9:2d:d6:
de:ff:36:50:58:72:3f:80:99:aa:9f:52:d2:d9:36:
68:d0:55:59:d5:a0:2f:b0:f3:79:35:7e:df:21:d8:
0f:5f:4e:31:34:75:5d:a0:06:5e:ce:bb:b6:ba:10:
32:96:5f:ae:03:24:02:47:5a:6b:7d:1a:43:57:cf:
b9:21:68:0d:5d:4d:48:e1:fa:53:94:04:3d:7c:3b:
57:01:8d:76:f8:f4:d3:41:ec:3d:c7:88:79:81:2c:
ab:d9:2b:7e:6a:7e:6d:11:b4:8b:a3:b2:ed:45:85:
d6:24:8a:87:bb:7e:9d:20:9f:43:69:32:94:0d:20:
c5:1e:52:8f:ce:2e:8c:d2:37:b5:2f:5f:90:31:6d:
bd:dc:8a:4a:d6:a1:dc:62:cb:d4:d3:28:ef:a0:51:
2e:73:f7:6f:ab:94:1d:a5:66:4e:39:52:0a:57:33:
2f:a2:ef:a6:13:62:eb:8e:ba:fd:e0:bb:f9:c2:26:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:49:2A:B7:87:96:6D:E9:2B:0A:F1:56:EE:CB:98:BD:E6:DD:D0:A2
X509v3 Authority Key Identifier:
keyid:94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e4:f9:48:f9:2c:74:e0:97:99:28:85:6b:d0:11:a3:41:3b:
9f:dd:03:3f:8d:43:cf:c7:e0:0c:2e:75:ba:ec:2c:4b:e7:6c:
55:25:3d:7b:31:30:35:a0:a6:4d:df:a1:4b:a3:ba:56:bf:82:
6d:a9:83:90:95:f5:d1:c5:6a:bf:ed:fa:88:d6:e0:49:ef:dc:
8e:22:42:3d:2c:7a:17:df:c4:da:b3:bb:d7:00:16:16:00:f5:
d2:02:12:0c:81:17:d6:e9:91:ce:9b:07:3b:bf:9e:90:53:fa:
75:5d:5e:08:7e:00:f3:fa:0a:dc:7c:8f:28:84:72:c7:db:57:
00:af:6e:94:c7:ae:8f:19:06:54:26:68:a9:46:a1:23:0c:43:
ba:9e:41:78:6e:9a:48:43:4f:6a:99:8e:79:fb:31:60:78:4d:
1b:47:4e:62:17:c0:47:76:36:38:68:70:b9:01:f2:a1:2f:11:
22:e1:b4:1a:37:96:70:63:4c:cc:0d:42:60:4d:9f:72:6a:67:
c0:8a:59:75:55:20:86:5c:8d:e8:c7:40:14:b4:5e:19:00:35:
11:83:25:11:c2:62:d8:28:96:d6:3a:d7:62:25:cd:2f:52:00:
00:c1:fd:14:a8:6e:07:86:ac:51:86:d8:38:aa:77:f4:da:fd:
57:8c:02:24
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPXJlcnFWFDjZzSxOTzwKxqoxt+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQwMzY2NzUzMDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkx
RTNDMjg4NjAeFw0yNjA2MTYyMzI3MzRaFw0yNjA2MTgwMzAwMzRaMDMxMTAvBgNV
BAMTKDEyNDkyQUI3ODc5NjZERTkyQjBBRjE1NkVFQ0I5OEJERTZEREQwQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi7YRjvYeu46wb+KI6vPadMvgA
PTUiXWZet9HIegjBF3jN8gdlj6wrOf8BE7WAOwFpBwcFg6aJ8/Y7avH1BjrSZbDh
HUDrX/kt1t7/NlBYcj+AmaqfUtLZNmjQVVnVoC+w83k1ft8h2A9fTjE0dV2gBl7O
u7a6EDKWX64DJAJHWmt9GkNXz7khaA1dTUjh+lOUBD18O1cBjXb49NNB7D3HiHmB
LKvZK35qfm0RtIujsu1FhdYkioe7fp0gn0NpMpQNIMUeUo/OLozSN7UvX5Axbb3c
ikrWodxiy9TTKO+gUS5z92+rlB2lZk45UgpXMy+i76YTYuuOuv3gu/nCJkWLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEkkqt4eWbekrCvFW7suYvebd0KIwHwYDVR0j
BBgwFoAUlANmdTAdvs6lmPJ8adyyOR48KIYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTE3NTk4ZTQtMjA2NC00ZWNiLTk4ZjYtYjI1OWE3NDk5NmExLzAvOTQwMzY2NzUz
MDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkxRTNDMjg4Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NDAzNjY3NTMwMURCRUNFQTU5OEYyN0M2OURDQjIzOTFFM0My
ODg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4
ZjYtYjI1OWE3NDk5NmExLzAvOTQwMzY2NzUzMDFEQkVDRUE1OThGMjdDNjlEQ0Iy
MzkxRTNDMjg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALDk+Uj5LHTgl5kohWvQEaNBO5/dAz+NQ8/H
4AwudbrsLEvnbFUlPXsxMDWgpk3foUujula/gm2pg5CV9dHFar/t+ojW4Env3I4i
Qj0sehffxNqzu9cAFhYA9dICEgyBF9bpkc6bBzu/npBT+nVdXgh+APP6Ctx8jyiE
csfbVwCvbpTHro8ZBlQmaKlGoSMMQ7qeQXhumkhDT2qZjnn7MWB4TRtHTmIXwEd2
NjhocLkB8qEvESLhtBo3lnBjTMwNQmBNn3JqZ8CKWXVVIIZcjejHQBS0XhkANRGD
JRHCYtgoltY612IlzS9SAADB/RSobgeGrFGG2Diqd/Ta/VeMAiQ=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:39 2026 by rpki-client