
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
File: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft (raw, json)
Hash identifier: 7muvzdYjRkHK7QiTe4gLxNOQlFWJIOcgQFEzBdTn5l4=
Subject key identifier: 9F:93:71:00:4B:AE:BC:DA:B5:64:A7:F0:AA:DB:21:7F:B8:D0:11:3A
Authority key identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
Certificate issuer: /CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Certificate serial: 62EC7A686ED5DD6AA446520FF61BB4CCEF389766
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 22:46:45 +0000
Manifest this update: Tue 16 Jun 2026 22:41:45 +0000
Manifest next update: Thu 18 Jun 2026 00:43:45 +0000
Files and hashes: 1: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl (hash: 47o0KJUdKGzZraj3x3PoKKS1/FA86H+42dxUG5afpAk=)
2: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: jUIsiSJsjPDf0Krk/AfybK3xD1mWMXMOgk6ke4wG6/A=)
3: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: tmjFjqEkGuahidtuLOdd3vjYKqdvzowGWZPOwb/+IMI=)
4: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: M2ft8YBsrZNHxT1qFC2d2ksNAchdYmEdnx+ruXyh3Bc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ec:7a:68:6e:d5:dd:6a:a4:46:52:0f:f6:1b:b4:cc:ef:38:97:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Validity
Not Before: Jun 16 22:41:45 2026 GMT
Not After : Jun 18 00:43:45 2026 GMT
Subject: CN=9F9371004BAEBCDAB564A7F0AADB217FB8D0113A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:bb:ff:07:45:71:45:dc:dc:c6:30:c3:3a:
49:98:88:f7:90:47:b1:54:aa:a9:2e:2e:35:f6:98:
39:8d:90:3a:33:40:7f:b8:e7:c7:eb:4a:85:ff:72:
f1:7a:65:86:09:de:48:b5:14:e3:bb:dc:de:fe:55:
46:30:86:b1:44:11:a7:dd:9f:7c:aa:f8:56:ca:58:
24:59:38:76:32:4a:ff:35:06:1d:5d:e9:cb:86:46:
df:d0:62:7d:1d:ee:5b:34:62:70:e0:d8:ef:5d:0c:
69:07:e4:7f:4b:da:0d:ee:8e:b2:e5:61:f8:a5:2c:
aa:02:6d:23:ce:6f:a0:36:d6:af:07:78:5e:9f:47:
4e:e0:1c:f0:97:43:b3:cb:37:08:26:16:ef:9c:c0:
32:71:7a:22:c1:93:59:f9:56:7f:c3:68:6c:3b:99:
0e:90:23:21:8d:c9:2a:8e:e4:16:59:aa:65:63:b6:
7a:d0:3b:c5:2f:e4:7d:9a:d9:d0:da:a7:af:de:69:
6b:19:45:f6:d3:d1:f1:87:20:a4:5c:34:05:45:30:
72:87:1f:7a:cd:8b:61:ab:2b:47:72:71:b0:19:4b:
b8:15:cd:2a:42:f7:4b:ee:92:8f:cf:a4:b6:3e:e5:
55:c6:09:82:03:8d:fc:5a:5e:48:f5:bd:0a:36:de:
d7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:93:71:00:4B:AE:BC:DA:B5:64:A7:F0:AA:DB:21:7F:B8:D0:11:3A
X509v3 Authority Key Identifier:
keyid:08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f6:71:ba:70:0e:af:13:db:02:14:18:cc:9b:30:4f:8d:6b:
2f:e9:45:ed:6c:de:de:e7:3e:6e:8c:65:d4:b7:f4:94:eb:81:
9a:7f:07:bb:af:35:f7:e7:86:ea:8d:e8:98:67:67:f7:1a:df:
33:d6:19:77:61:9f:8c:7b:d5:fa:e4:ad:12:c7:a2:1e:a5:59:
f5:d2:f7:5d:94:e9:b1:5b:9d:78:d2:3a:c2:4f:7d:ed:61:c8:
a2:e6:2c:38:2d:22:09:48:37:b7:95:78:ac:7d:64:80:ad:9f:
1e:01:80:c4:e2:a6:c1:c1:0a:1c:8d:30:3f:7d:e0:f7:44:18:
61:15:65:96:a9:f5:70:bd:78:fc:e7:90:12:26:03:a6:0d:91:
f6:30:0b:d3:63:a7:ea:f4:19:d3:1f:23:6b:58:8b:71:d7:44:
4f:e3:98:04:eb:04:d0:30:cb:fa:ab:88:9a:f8:21:d6:9b:ba:
40:cd:ba:99:a4:b1:a0:c3:99:59:04:df:b2:3a:e5:a0:0f:ff:
e6:1e:63:e5:82:dd:ab:03:a3:9b:0e:79:31:e3:63:91:59:7b:
10:76:e7:fb:78:e0:5b:fb:c3:66:7f:0f:66:91:09:23:21:91:
25:ea:5c:46:bb:40:63:9f:0c:18:26:bc:f5:b7:10:db:e3:2f:
9c:c5:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:13:22 2026 by rpki-client