
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft
File: 10305EB1D756B8E205948FA9D96C07D30D5559C6.mft (raw, json)
Hash identifier: BRwo8uTM6ehdkfNqzWBrEBrIJ5avTmJT5inAU7nnLks=
Subject key identifier: FB:86:CC:4D:C0:89:E3:77:69:1D:95:E7:3F:C5:66:42:22:9E:44:F0
Authority key identifier: 10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6
Certificate issuer: /CN=10305EB1D756B8E205948FA9D96C07D30D5559C6
Certificate serial: 2586F2C93D24BBF6C30A9483B9076BDDDF732409
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 06:00:07 +0000
Manifest this update: Wed 17 Jun 2026 05:55:07 +0000
Manifest next update: Thu 18 Jun 2026 08:22:07 +0000
Files and hashes: 1: 10305EB1D756B8E205948FA9D96C07D30D5559C6.crl (hash: YDugAjs8rHkqZe2yl0JdmbpI8gw4XXwIpq/2ii8Scy8=)
2: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: wzVp735bfnp8XDnpMDExEB2u8d/EmF9ou01fz223/d4=)
3: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: G6PGQreB8GGiXWbjNuIkvOBqamEXNRruYXzWZ5ntbWM=)
4: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: xg8S5Jz4WdUD3Z66GOwGk02Rpx5TvYnlOCLFL6/urQw=)
5: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: w+xTBuxDVGZDvJln2gWD2TMLIgtp2a/JxAVQQSe/MJc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl
rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:86:f2:c9:3d:24:bb:f6:c3:0a:94:83:b9:07:6b:dd:df:73:24:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10305EB1D756B8E205948FA9D96C07D30D5559C6
Validity
Not Before: Jun 17 05:55:07 2026 GMT
Not After : Jun 18 08:22:07 2026 GMT
Subject: CN=FB86CC4DC089E377691D95E73FC56642229E44F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:af:d7:3d:84:db:af:d6:38:c6:2f:30:5b:
f9:37:e3:26:7e:81:82:5c:20:9e:55:d6:69:b0:7a:
9a:83:c1:61:5f:62:05:7c:25:35:1a:dc:e3:73:43:
2c:83:f2:9e:76:8b:a5:06:10:f7:46:93:70:2f:90:
24:0b:56:85:e9:30:eb:2b:3b:06:46:e9:94:b9:76:
ff:b4:3b:67:85:3c:b3:a8:cf:7c:11:33:ff:b0:07:
b8:20:9d:b4:f7:99:84:85:18:a4:8f:49:3b:5a:53:
82:68:c6:d4:7c:31:bc:4c:d7:d1:c0:31:a3:15:4d:
51:fe:57:77:b9:e6:62:ef:b4:6c:80:f8:0d:5f:a8:
3e:42:35:a3:57:e9:b9:f0:1f:09:6d:38:d7:93:7e:
6a:52:45:9c:6b:1b:90:fe:d2:d9:0c:a4:bc:2b:d5:
0d:b8:b2:6f:c3:35:1a:61:d9:fd:44:87:20:a4:da:
5b:49:c3:90:3e:96:f3:86:b6:b9:2b:5c:66:10:35:
2e:10:1a:e5:b2:9c:be:e2:0a:9a:18:63:ff:26:4d:
04:3e:ae:9b:3f:6a:76:60:8e:9d:9b:ab:ef:23:58:
bd:c0:62:d2:dc:f8:2d:1f:37:f9:75:b4:c0:be:72:
d9:9e:bd:f5:af:d3:0e:86:44:85:9f:64:49:51:2c:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:86:CC:4D:C0:89:E3:77:69:1D:95:E7:3F:C5:66:42:22:9E:44:F0
X509v3 Authority Key Identifier:
keyid:10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:30:4b:e7:40:d3:6d:35:fe:98:11:22:19:d3:65:6d:1a:3e:
27:9d:25:5e:64:98:e8:90:d7:a1:86:76:17:21:a3:74:8e:d5:
55:48:f1:90:24:c0:08:ae:1f:9b:2d:4f:0a:30:03:2e:44:74:
bd:d5:bd:ab:5d:7c:ab:ca:0e:21:78:98:73:6c:a8:ea:db:2a:
0a:78:cf:d4:b2:fa:6f:cf:1f:cf:3d:c4:aa:63:c4:c9:d0:ef:
20:bb:d0:d7:a1:c7:19:a5:9b:a7:f5:f9:26:b6:7a:7d:bc:d9:
d6:bc:e2:8c:ec:70:c6:4a:f6:30:ae:71:55:18:f9:78:0c:19:
ae:cd:3f:b2:f7:8c:d3:0a:c2:79:85:3e:f5:45:dc:43:56:2e:
7b:37:26:48:ea:ee:1e:6a:a7:7c:a5:4e:51:3f:9a:39:a2:d3:
4e:29:5d:fe:45:fd:b8:48:f1:33:a8:46:d5:08:2e:5d:e5:4e:
e7:22:b0:a7:a3:41:c2:de:97:56:17:1e:0c:32:af:36:74:6b:
f4:df:77:bf:37:3c:e7:73:ab:97:97:e0:fe:9c:6b:e6:de:20:
5d:40:94:a5:38:cd:66:1e:b2:fc:e9:87:c9:9b:9f:76:73:85:
43:b5:a2:0e:67:7f:74:0f:3f:a8:fa:a6:53:cc:af:4b:e0:d7:
85:5e:df:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:37 2026 by rpki-client