
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft
File: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft (raw, json)
Hash identifier: uB3qzEKBOrYzETu5vL0Lz2oQ47GiVDRg+lWdNRT7sDI=
Subject key identifier: 97:D4:2D:5C:AF:40:95:9F:4B:6A:54:11:E3:39:20:FE:FE:AF:9E:51
Authority key identifier: C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC
Certificate issuer: /CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC
Certificate serial: 0E0BD7A33DA99A05F3AB690122E0830DE81F234B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 08:08:50 +0000
Manifest this update: Sat 13 Jun 2026 08:03:50 +0000
Manifest next update: Sun 14 Jun 2026 09:54:50 +0000
Files and hashes: 1: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: R6QK9+MoLmzsMre1Y9YXqP/L5rUmbxfvyX6TdZV81Yk=)
2: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl (hash: cTYIEMBhbBD7RW6WVJThkHuleyoQNLPE+blfOA53mw0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl
rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:0b:d7:a3:3d:a9:9a:05:f3:ab:69:01:22:e0:83:0d:e8:1f:23:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC
Validity
Not Before: Jun 13 08:03:50 2026 GMT
Not After : Jun 14 09:54:50 2026 GMT
Subject: CN=97D42D5CAF40959F4B6A5411E33920FEFEAF9E51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e5:cd:98:23:20:fd:98:7c:e2:58:85:0b:8d:
e8:54:9c:80:a6:b9:90:6a:9c:8f:de:a2:ba:0e:83:
45:47:35:dc:a4:8e:eb:ad:c0:1d:cd:5b:04:44:4d:
b1:28:99:e3:31:8d:ae:b1:29:14:98:03:e1:c2:3a:
17:ec:ce:ea:a7:0a:a2:8d:6f:af:93:f2:d4:c5:b6:
af:63:b3:a0:2f:92:68:9d:cd:ef:10:63:8d:75:14:
0f:87:69:a2:98:0a:c1:24:b5:2d:a5:04:6d:87:ee:
c7:31:21:db:3d:eb:ab:52:64:47:0b:9a:c0:45:5f:
51:91:5a:66:fd:e0:cb:04:1b:c3:dc:74:86:76:ba:
fb:36:96:b3:c5:64:26:98:56:d7:d7:32:c6:d4:0b:
06:36:93:2c:69:02:3e:a0:61:2b:84:95:b6:c9:ec:
a5:fc:4c:f8:eb:5e:f1:aa:0c:a4:60:77:ce:20:cc:
86:c0:61:d1:f4:ec:0f:92:95:27:95:c9:09:0e:ff:
89:ab:f2:be:c6:9d:4e:5d:6f:37:72:6b:0a:d4:bf:
5e:c2:38:71:98:4d:9b:77:a4:06:11:8e:d0:fb:21:
d1:73:97:d4:c3:a3:f0:7d:5a:7c:93:f0:4a:8e:a0:
06:a0:44:3e:d6:bf:22:09:72:24:80:1e:39:32:97:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D4:2D:5C:AF:40:95:9F:4B:6A:54:11:E3:39:20:FE:FE:AF:9E:51
X509v3 Authority Key Identifier:
keyid:C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:31:f4:df:bf:2d:10:d2:13:dd:cf:96:d1:c6:91:b5:b5:9c:
20:5a:32:5e:cb:5a:10:75:e9:6e:7b:17:88:59:59:b5:6a:f0:
a1:14:5a:65:9b:5c:e4:01:a4:f0:92:90:86:ec:cd:20:21:5d:
1c:61:5b:97:a9:a4:74:ed:43:90:ce:61:5a:b5:9c:ea:ff:68:
04:53:fe:93:9c:14:27:30:7c:fe:d6:76:14:9c:5d:3e:69:4b:
9f:ee:f8:ba:55:07:57:fc:90:b1:97:f0:4c:1a:d3:c0:f1:46:
0f:d5:31:ad:42:93:5a:11:c9:79:54:ac:48:48:7d:1f:73:16:
9d:ef:36:f6:38:91:3e:de:01:6c:19:4e:f6:8f:4e:3a:7d:ff:
b8:ee:bf:89:9c:5c:33:ee:73:36:1a:2c:99:c2:30:80:60:e2:
8f:f1:04:12:c8:d4:7d:49:fa:6f:07:f5:a6:63:19:dc:ab:7b:
f4:93:b8:1b:87:b6:cf:95:a1:6c:db:b4:4f:55:38:c7:c8:ef:
26:4a:b7:6c:4c:a6:b0:21:8f:cd:4c:6a:84:ea:a1:de:fc:5a:
e9:6a:54:fd:42:db:72:0c:2c:9f:15:d9:4c:21:f0:be:e1:44:
e8:69:be:16:62:10:0c:10:1b:d4:e2:83:5e:35:fb:78:36:b6:
38:ba:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:34 2026 by rpki-client