
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
File: 518CB795450041B0537FB0312901D771579DCEC4.mft (raw, json)
Hash identifier: yuQ+Lh9oLYc9RSn9bFk0FAIFnp+Wz5jtIhPRu4thlHo=
Subject key identifier: 41:CB:7F:27:F7:A8:95:31:31:E2:FB:03:93:3F:EE:27:63:F1:3D:4F
Authority key identifier: 51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4
Certificate issuer: /CN=518CB795450041B0537FB0312901D771579DCEC4
Certificate serial: 3055B26ED1D143F2F163138351358C43D1C1C3A1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 03:32:04 +0000
Manifest this update: Wed 17 Jun 2026 03:27:04 +0000
Manifest next update: Thu 18 Jun 2026 06:11:04 +0000
Files and hashes: 1: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: X+iPKuq3a//oKJcRH7RCMyPd3wqSs+gr09rlg8og0vI=)
2: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: iCJ8MTvJq5y1PpIDZMP2NlWvXH8yCPvTkvBM8kuoTNA=)
3: 518CB795450041B0537FB0312901D771579DCEC4.crl (hash: HrYtxDM2SP0SDkUtrgNO1EJ4XMabxJ/Lc3Syz6/agCc=)
4: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: GypeOWXaZk/hIkKcj8p9VzDp/KvisMSO2917iwkOduU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl
rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:55:b2:6e:d1:d1:43:f2:f1:63:13:83:51:35:8c:43:d1:c1:c3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518CB795450041B0537FB0312901D771579DCEC4
Validity
Not Before: Jun 17 03:27:04 2026 GMT
Not After : Jun 18 06:11:04 2026 GMT
Subject: CN=41CB7F27F7A8953131E2FB03933FEE2763F13D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:42:15:96:a7:42:54:65:29:70:19:8e:51:
1c:41:aa:93:27:4c:75:55:2c:8e:98:72:86:ca:41:
cc:0e:c6:8b:fb:27:de:0a:20:c6:ae:fd:eb:74:34:
f7:d5:e4:ef:b1:f6:2a:74:1a:df:67:d3:72:40:91:
c7:27:57:31:a6:9d:91:41:0a:01:06:6e:dd:8a:63:
e9:4f:ae:d5:c8:a1:89:a9:e3:77:b5:a5:f7:e4:a2:
3d:be:39:a4:39:6b:3a:ac:80:92:34:97:76:4b:bc:
6f:5e:22:a1:89:a2:a0:b4:8e:90:bd:1c:92:20:87:
47:8f:dd:e8:c6:35:11:be:c4:da:dd:ac:46:4c:19:
c5:99:da:07:a7:44:c5:b7:aa:5e:c9:7f:fb:ba:98:
f2:04:e1:93:ea:a4:aa:74:7e:bd:5b:7c:68:92:b6:
84:97:e3:11:ab:6e:22:ef:32:69:d0:b2:ce:b2:f6:
05:6f:fc:49:39:bd:23:b6:f7:03:40:73:12:4d:5f:
d8:46:8c:66:5e:2e:e2:bc:9c:1a:7b:b1:cb:a3:d4:
ec:1a:67:bb:d4:00:81:e0:46:71:4f:b5:af:e4:ea:
53:5b:52:f5:15:2c:30:24:13:2e:e2:2f:08:05:9b:
7a:15:4b:db:a2:84:e2:7b:57:2b:20:43:10:c8:03:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CB:7F:27:F7:A8:95:31:31:E2:FB:03:93:3F:EE:27:63:F1:3D:4F
X509v3 Authority Key Identifier:
keyid:51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c1:4f:3b:e6:f8:9b:56:81:ed:d8:ba:d4:5a:bd:7c:37:22:
d4:24:01:22:9d:9e:49:a4:5e:71:a8:d4:cb:7c:bc:12:9e:83:
25:92:41:bb:f7:36:b2:56:bb:95:4c:b2:f8:97:e4:79:0e:9a:
1e:13:a7:73:a1:f9:67:d1:d4:25:29:c7:ca:1e:97:fd:cc:44:
7b:83:5c:9e:12:4d:cc:87:df:90:67:50:83:b6:74:00:b6:56:
ed:06:09:19:e4:dc:e4:76:85:9a:48:93:dd:9f:cb:6c:d3:27:
d3:4f:f1:45:1f:dd:03:4b:5d:1d:f6:a2:c8:85:31:01:8a:17:
b0:ba:6b:cb:3d:1f:98:be:12:c7:38:22:60:9e:e3:48:ce:dd:
6d:0b:05:c9:86:3c:4c:78:8c:d9:cb:a4:b6:52:1e:c1:6b:8f:
a1:79:e8:aa:48:1b:85:32:22:71:bc:d1:ed:fc:03:ef:72:69:
36:a2:b1:63:6b:3f:76:10:97:b4:a6:2b:07:3d:6a:52:ce:39:
b5:95:69:b4:90:0b:de:a4:6e:58:84:f3:b0:de:c0:35:5b:b0:
62:ac:a4:8e:d2:2d:cf:2d:6d:2e:37:9c:4f:04:0a:eb:25:8c:
a9:24:3c:bd:4a:a0:af:cb:a0:0d:42:a1:08:0b:3c:f8:52:7b:
c5:ec:d7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:04:26 2026 by rpki-client