
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/94918BAD18C4E8526B528C0028361F609CC48B62.mft
File: 94918BAD18C4E8526B528C0028361F609CC48B62.mft (raw, json)
Hash identifier: V8VlrvZEBA6s+YeCWOWvapN5OLkqja+AG1qtBBM6b8k=
Subject key identifier: 3C:2B:88:E3:80:00:45:3C:A4:CF:3B:36:00:2F:B4:57:13:B7:30:C7
Authority key identifier: 94:91:8B:AD:18:C4:E8:52:6B:52:8C:00:28:36:1F:60:9C:C4:8B:62
Certificate issuer: /CN=94918BAD18C4E8526B528C0028361F609CC48B62
Certificate serial: 21BE21DD3CD8F9534153517E64EA5F80D0F5B21A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94918BAD18C4E8526B528C0028361F609CC48B62.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/94918BAD18C4E8526B528C0028361F609CC48B62.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 16:13:55 +0000
Manifest this update: Tue 16 Jun 2026 16:08:55 +0000
Manifest next update: Wed 17 Jun 2026 19:09:55 +0000
Files and hashes: 1: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (hash: luIF4e8AEEwqBc8g6JUpuDzn6v1Z4Rk3K0OUF6pYqjc=)
2: 94918BAD18C4E8526B528C0028361F609CC48B62.crl (hash: utOLI84hpCZ75jPLGZIu95+eo/44XpbX/PrLy57jBfA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/94918BAD18C4E8526B528C0028361F609CC48B62.crl
rsync://rpki-rsync.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/94918BAD18C4E8526B528C0028361F609CC48B62.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94918BAD18C4E8526B528C0028361F609CC48B62.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 19:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:be:21:dd:3c:d8:f9:53:41:53:51:7e:64:ea:5f:80:d0:f5:b2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94918BAD18C4E8526B528C0028361F609CC48B62
Validity
Not Before: Jun 16 16:08:55 2026 GMT
Not After : Jun 17 19:09:55 2026 GMT
Subject: CN=3C2B88E38000453CA4CF3B36002FB45713B730C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:5b:81:50:4a:52:21:31:6a:fd:8f:11:fa:
26:87:8f:5f:83:10:5f:53:07:0d:29:ef:92:23:9b:
e3:e8:4e:72:b6:98:88:d0:36:d8:bf:4b:86:66:07:
88:73:82:05:de:e1:d5:4c:11:40:03:78:21:f0:04:
4a:3e:00:8a:a7:ce:1f:c4:7a:28:c4:c0:82:f1:b9:
e9:f7:33:22:15:ae:61:70:a4:a0:d0:11:e0:4f:c4:
ff:6c:2e:0e:51:d8:25:76:e9:47:bc:8b:6e:b6:ce:
46:cb:6f:a2:2d:02:d7:6d:56:95:83:07:1c:81:64:
13:dd:61:72:11:f3:1f:72:f8:9d:86:57:1a:ea:b5:
e8:eb:be:47:49:12:99:8c:06:bf:c3:d9:3a:76:b8:
12:c5:e9:97:5f:cb:27:5f:5c:ee:11:44:46:42:a5:
c0:f9:e9:d3:6e:8f:d4:55:bb:2c:ad:c8:9b:da:c6:
ed:00:6a:6f:cb:c2:e9:9d:8b:02:90:bd:1d:36:07:
21:8e:95:67:2e:ad:a5:da:24:1b:be:a8:81:46:3b:
f1:60:e3:f9:db:af:61:09:60:d6:70:28:4d:de:7b:
02:eb:84:09:ff:4b:28:3e:e8:a0:4d:83:25:a7:a4:
5e:af:c1:da:2b:c0:6b:fe:2e:dd:b0:70:ab:7e:ab:
ab:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2B:88:E3:80:00:45:3C:A4:CF:3B:36:00:2F:B4:57:13:B7:30:C7
X509v3 Authority Key Identifier:
keyid:94:91:8B:AD:18:C4:E8:52:6B:52:8C:00:28:36:1F:60:9C:C4:8B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/94918BAD18C4E8526B528C0028361F609CC48B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94918BAD18C4E8526B528C0028361F609CC48B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/94918BAD18C4E8526B528C0028361F609CC48B62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:cf:c8:27:71:d2:e7:0c:43:48:da:0d:7b:dc:dc:06:ab:2f:
c1:05:8b:9a:4a:ae:db:b4:a9:0e:19:1a:fa:a8:cd:75:06:6a:
05:c4:7a:cd:b3:fb:58:46:05:b1:ba:e6:af:ff:5d:d5:30:3f:
20:fc:ca:9f:e2:fc:59:06:49:03:bc:d1:e5:05:28:29:44:d9:
6a:2b:5f:9a:75:a5:77:13:f5:f6:64:5d:a2:17:f5:a2:2b:23:
41:96:17:d7:4a:e1:3d:28:5b:85:f9:01:23:e0:3e:e9:80:00:
fe:d5:59:51:7c:51:43:31:91:45:de:4c:5e:a2:ad:f8:a0:f4:
f1:e4:f4:0d:a6:77:8f:5a:b5:d4:38:de:c1:e4:4f:c8:2d:38:
0f:08:87:02:53:9e:f7:0e:c0:2c:79:f1:81:c5:86:77:30:63:
b9:0b:91:9f:55:d3:ab:b2:60:98:9b:25:97:c6:9a:54:80:dd:
71:39:77:6f:ef:0e:fb:e9:0c:dc:f0:21:81:0a:5e:2e:c1:ec:
7a:46:a5:7a:70:a9:6e:52:dc:26:0b:35:0d:16:a8:78:5e:31:
c4:2f:4f:d7:24:a7:67:43:9f:74:eb:b4:ca:0f:28:73:63:6d:
21:30:57:d7:b0:e1:35:7b:42:02:17:e3:d6:e9:43:bb:d6:fc:
ae:cc:82:05
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIb4h3TzY+VNBU1F+ZOpfgND1showDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ5MThCQUQxOEM0RTg1MjZCNTI4QzAwMjgzNjFGNjA5
Q0M0OEI2MjAeFw0yNjA2MTYxNjA4NTVaFw0yNjA2MTcxOTA5NTVaMDMxMTAvBgNV
BAMTKDNDMkI4OEUzODAwMDQ1M0NBNENGM0IzNjAwMkZCNDU3MTNCNzMwQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfxVuBUEpSITFq/Y8R+iaHj1+D
EF9TBw0p75Ijm+PoTnK2mIjQNti/S4ZmB4hzggXe4dVMEUADeCHwBEo+AIqnzh/E
eijEwILxuen3MyIVrmFwpKDQEeBPxP9sLg5R2CV26Ue8i262zkbLb6ItAtdtVpWD
BxyBZBPdYXIR8x9y+J2GVxrqtejrvkdJEpmMBr/D2Tp2uBLF6ZdfyydfXO4RREZC
pcD56dNuj9RVuyytyJvaxu0Aam/LwumdiwKQvR02ByGOlWcuraXaJBu+qIFGO/Fg
4/nbr2EJYNZwKE3eewLrhAn/Syg+6KBNgyWnpF6vwdorwGv+Lt2wcKt+q6sjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPCuI44AARTykzzs2AC+0VxO3MMcwHwYDVR0j
BBgwFoAUlJGLrRjE6FJrUowAKDYfYJzEi2IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDdiNjRjM2UtYjEzZC00MjdhLWI5ODItNDM5NDA3M2U1Y2Y1LzAvOTQ5MThCQUQx
OEM0RTg1MjZCNTI4QzAwMjgzNjFGNjA5Q0M0OEI2Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NDkxOEJBRDE4QzRFODUyNkI1MjhDMDAyODM2MUY2MDlDQzQ4
QjYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdiNjRjM2UtYjEzZC00MjdhLWI5
ODItNDM5NDA3M2U1Y2Y1LzAvOTQ5MThCQUQxOEM0RTg1MjZCNTI4QzAwMjgzNjFG
NjA5Q0M0OEI2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMbPyCdx0ucMQ0jaDXvc3AarL8EFi5pKrtu0
qQ4ZGvqozXUGagXEes2z+1hGBbG65q//XdUwPyD8yp/i/FkGSQO80eUFKClE2Wor
X5p1pXcT9fZkXaIX9aIrI0GWF9dK4T0oW4X5ASPgPumAAP7VWVF8UUMxkUXeTF6i
rfig9PHk9A2md49atdQ43sHkT8gtOA8IhwJTnvcOwCx58YHFhncwY7kLkZ9V06uy
YJibJZfGmlSA3XE5d2/vDvvpDNzwIYEKXi7B7HpGpXpwqW5S3CYLNQ0WqHheMcQv
T9ckp2dDn3TrtMoPKHNjbSEwV9ew4TV7QgIX49bpQ7vW/K7MggU=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:56 2026 by rpki-client