
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft
File: 01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft (raw, json)
Hash identifier: fg2N1UWPkNWielrGFhxoNm2EeYgqYXUGkIwaV2ZykRM=
Subject key identifier: 14:39:24:6F:61:12:E7:4D:02:AA:2A:7E:BE:33:BB:DF:FD:F5:4F:DA
Authority key identifier: 01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0
Certificate issuer: /CN=01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0
Certificate serial: 09C4BF5BC072111B1F6D00D475A28D4CCB64966E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 13:56:12 +0000
Manifest this update: Tue 16 Jun 2026 13:51:12 +0000
Manifest next update: Wed 17 Jun 2026 16:27:12 +0000
Files and hashes: 1: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: ySzed5uDLDabSH9SesSAtowh1c9UjHu8DGpoOUcm2mA=)
2: 01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl (hash: iRr1O+AahmR7uP5+KN3C9Ao1p8vwRq7XUQ63+/d5N1M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl
rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c4:bf:5b:c0:72:11:1b:1f:6d:00:d4:75:a2:8d:4c:cb:64:96:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0
Validity
Not Before: Jun 16 13:51:12 2026 GMT
Not After : Jun 17 16:27:12 2026 GMT
Subject: CN=1439246F6112E74D02AA2A7EBE33BBDFFDF54FDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:27:96:05:ca:27:0a:23:3a:4e:89:2b:f8:
57:47:1a:bd:a2:9c:0f:07:d5:8c:1a:32:84:56:ee:
31:52:c5:55:22:a5:02:63:c4:11:98:66:67:1d:aa:
7d:de:58:52:7a:40:58:f1:cc:fe:4a:0f:c5:03:53:
b4:27:af:e1:0b:b1:6d:5d:1d:0f:c3:0f:64:33:27:
a5:f0:0c:4d:7e:23:5a:63:fa:6e:78:00:50:a6:fa:
ae:da:9d:95:c1:fe:be:d7:87:ba:b9:6b:97:10:6b:
91:8c:9d:94:59:79:ce:0c:6f:d0:ce:df:07:e0:4d:
4f:3e:0e:fe:b5:c1:96:56:16:90:de:77:0e:40:ee:
49:f7:0c:3c:e1:6f:7a:d7:f7:dd:fc:ec:2a:98:bb:
be:91:93:43:48:29:f1:e9:bc:74:3a:ef:ea:70:ac:
bd:49:77:c0:93:c9:83:ef:77:4d:0d:7d:07:78:f4:
df:33:13:96:9e:67:e4:ff:56:dc:91:07:96:6f:51:
91:dc:57:b6:bc:b0:2d:1c:68:39:16:6d:b7:7a:38:
fd:f8:1e:38:1b:da:6b:67:7e:3b:fd:76:70:7a:ac:
29:b2:a4:82:7d:eb:7e:72:b1:8f:18:9e:fd:98:b2:
e1:7d:4b:ec:65:75:c3:5b:69:3e:85:35:db:e7:66:
b7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:39:24:6F:61:12:E7:4D:02:AA:2A:7E:BE:33:BB:DF:FD:F5:4F:DA
X509v3 Authority Key Identifier:
keyid:01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:b5:fc:9b:43:a2:d7:18:51:9a:ed:86:86:af:79:b7:e6:ac:
80:78:99:ac:ea:98:8a:7e:70:12:9c:df:b7:38:90:5e:c6:77:
a3:27:d5:e6:07:30:87:9f:b4:7d:2d:20:d1:1a:c4:1c:3a:2e:
9c:a1:1e:23:14:83:49:3c:ed:cc:2f:f9:1d:e0:d9:3e:88:96:
e0:ce:71:aa:5d:91:5e:98:52:f6:b5:c4:ac:21:bf:aa:95:fb:
6b:6e:6a:f2:0c:44:c9:9b:31:6b:9e:17:6a:c2:cf:fc:c0:0e:
93:fa:ec:fd:51:20:2d:47:28:53:11:2c:d1:97:e2:19:ab:c8:
94:64:2c:7f:dd:ea:ac:53:e7:d3:48:b0:87:e0:d0:b2:05:7b:
7b:8b:69:99:fb:9d:39:1c:7e:5f:33:8e:e5:94:96:49:40:20:
71:ca:d7:6a:e8:aa:63:1a:96:fb:3e:ff:c7:02:43:66:9e:41:
1f:2d:21:16:a8:a5:99:ff:39:99:8b:8c:d7:7e:53:4b:80:10:
e4:89:95:e8:2b:fd:cc:a9:2e:28:df:f7:de:88:6f:c1:13:51:
63:69:6f:5c:b9:6c:99:29:cd:47:84:50:0d:e0:2d:c2:62:fe:
1d:06:ab:52:b9:09:04:95:a9:51:9f:5a:85:50:0b:6d:4e:d9:
e8:39:5e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:48 2026 by rpki-client