
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft
File: A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft (raw, json)
Hash identifier: YI70xaRjreKBAof4fTKa9xTpElJWH+1CrKms6AR3SlY=
Subject key identifier: 11:5E:D6:3E:98:70:8E:0D:7A:9A:86:39:55:BD:78:E1:57:1D:8F:89
Authority key identifier: A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D
Certificate issuer: /CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D
Certificate serial: 4A056E5D0B91D67A06E5C18150175A66F3B3A100
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 01:44:52 +0000
Manifest this update: Wed 17 Jun 2026 01:39:52 +0000
Manifest next update: Thu 18 Jun 2026 01:49:52 +0000
Files and hashes: 1: A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl (hash: q9rjcoEzcm7ARkwL65Rh1f9sh6V66/rAxpJYhZ0nU38=)
2: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (hash: 8eEz6hzQ+vunwmpuzCRDL78SRiuZLqQtnLKEvllRxT8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl
rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:05:6e:5d:0b:91:d6:7a:06:e5:c1:81:50:17:5a:66:f3:b3:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D
Validity
Not Before: Jun 17 01:39:52 2026 GMT
Not After : Jun 18 01:49:52 2026 GMT
Subject: CN=115ED63E98708E0D7A9A863955BD78E1571D8F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5d:e6:6b:2e:25:38:43:f7:2a:a6:ac:68:ea:
9f:3d:64:65:13:2a:31:d6:50:cd:bf:84:86:79:c9:
bb:66:04:78:e6:ed:98:1f:1e:4f:ef:17:d8:bb:ac:
5d:52:21:a2:a8:f7:3b:df:55:c7:5f:e3:63:75:8b:
b6:cb:55:34:42:d1:53:82:1d:b9:77:aa:4a:83:36:
c2:d1:4c:7b:df:43:ef:73:85:37:a2:83:1a:c7:92:
83:e1:7b:c0:af:14:dd:35:d3:ff:be:48:51:e1:e4:
cb:af:e9:28:24:e1:23:cd:8a:4a:ad:c0:85:f1:7d:
f6:58:7e:42:2b:78:2d:ca:a8:fc:ee:c1:93:e7:39:
06:e2:98:4d:5b:0d:0c:d0:23:5d:f3:3f:fb:bd:67:
84:d6:d9:a2:a4:56:86:a5:57:84:be:9b:e7:e6:88:
8b:c6:cf:d4:cc:ed:23:8c:49:a9:55:71:a4:cc:d3:
a1:ce:3b:23:48:f0:41:65:c4:94:ac:bd:42:d5:97:
98:29:08:9a:a1:f7:47:b2:24:ec:21:89:1c:4d:82:
1b:4e:31:50:b0:bb:cc:1c:50:e0:0b:f1:bd:95:d7:
46:ae:cb:7c:14:83:34:2c:9e:3d:51:29:61:29:ad:
87:49:f4:2c:ee:47:e4:c2:f6:02:67:ec:84:e9:a3:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5E:D6:3E:98:70:8E:0D:7A:9A:86:39:55:BD:78:E1:57:1D:8F:89
X509v3 Authority Key Identifier:
keyid:A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:98:07:0d:4c:42:54:af:97:43:1d:dd:8f:4c:d4:c5:f7:99:
e3:ec:8d:e6:b9:4a:ba:32:1e:2d:f2:c4:af:dc:01:3d:c4:07:
93:c6:d1:db:8c:66:91:3c:c9:e7:81:ff:aa:df:dd:1e:56:78:
09:f9:9f:1e:63:74:bb:0c:aa:69:95:35:40:6c:57:c8:1f:29:
1d:1f:95:5c:d7:46:0a:64:65:50:0b:42:fb:d4:0d:9e:9c:79:
de:b0:36:52:b7:86:c1:28:80:73:35:99:e1:ae:91:c3:a9:cc:
53:80:7c:a3:ed:93:7c:c1:36:c9:b3:b7:7a:a4:1a:de:c0:a7:
55:ec:4a:d3:8d:41:a7:f2:1a:a0:b7:91:52:36:5b:86:14:75:
e9:e6:54:7f:63:41:71:eb:37:c1:c2:63:56:e8:b8:30:15:f4:
c4:67:b3:d2:85:35:b3:db:82:a6:9c:10:2f:0f:1e:0c:a5:c7:
71:f3:ca:57:d1:d1:a5:59:f4:42:20:53:03:ee:cd:9c:87:e7:
cd:87:59:42:7a:d8:13:e9:0e:d9:8a:2a:8b:e7:ef:d5:c3:67:
18:96:a8:cb:c0:c5:dc:76:1c:b4:72:fc:36:f2:9d:15:b2:d8:
c2:ba:cc:e2:b4:b8:fc:90:80:27:f8:45:d5:91:5c:7f:5d:20:
0d:d0:e7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:51 2026 by rpki-client