
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft
File: 01572889DF1075E65143A4EF4BC1D8C749046C13.mft (raw, json)
Hash identifier: d4mHERVXX/wp/pbLYohRKvhve9TF5LvnXz29zLrPiSs=
Subject key identifier: 1F:08:B4:2D:62:DC:AD:C7:AF:57:C3:AC:79:94:F7:93:92:A6:1A:5A
Authority key identifier: 01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13
Certificate issuer: /CN=01572889DF1075E65143A4EF4BC1D8C749046C13
Certificate serial: 6E8106F74F0C0AFF70A4E900B00FDECAA10947F5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 22:00:54 +0000
Manifest this update: Tue 16 Jun 2026 21:55:54 +0000
Manifest next update: Wed 17 Jun 2026 23:35:54 +0000
Files and hashes: 1: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: oMj1Nm7h+Y4mu9LBu3K/xKLS+Wp19Y5meMISqDSZ+JY=)
2: 01572889DF1075E65143A4EF4BC1D8C749046C13.crl (hash: Xdbl2EuA6jS4K5Bu857s/F8ctSW1JdUt9pIbsilkiUY=)
3: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: fXIslrIHsJvjLRQnP9cWAs1QTJuR4Stfwh7a8LYxHm8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl
rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 23:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:81:06:f7:4f:0c:0a:ff:70:a4:e9:00:b0:0f:de:ca:a1:09:47:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01572889DF1075E65143A4EF4BC1D8C749046C13
Validity
Not Before: Jun 16 21:55:54 2026 GMT
Not After : Jun 17 23:35:54 2026 GMT
Subject: CN=1F08B42D62DCADC7AF57C3AC7994F79392A61A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:f0:ac:80:4a:cb:11:03:ae:ce:48:dd:64:
e9:cb:b6:f5:b9:6a:d2:b1:3d:19:68:d1:2a:c3:42:
33:4f:16:16:70:33:a8:f9:88:db:db:05:47:17:16:
c9:ef:43:ce:87:28:2e:7e:6b:fe:2e:5f:c2:b3:6a:
e6:c5:c1:53:e6:ce:7f:03:47:1c:b7:b2:1d:85:66:
e1:a2:da:8b:75:52:fa:6d:98:fe:3e:fd:95:4d:e3:
d8:c4:36:af:ce:95:de:4b:2c:4c:cd:c5:81:6d:c9:
fe:6b:9a:1d:0e:72:e8:59:f8:c0:77:8b:8d:43:17:
96:bf:ee:41:b2:c1:96:1e:ad:39:76:8f:9b:92:52:
2f:f1:5f:79:42:ff:34:ac:40:97:28:d5:ed:64:bc:
0c:cd:dd:13:75:16:2a:12:e3:13:ca:1d:6f:a5:44:
2c:39:d6:0a:52:59:c3:ae:bf:5a:d6:7e:b3:c3:fa:
b0:fe:26:3a:f7:7b:24:17:3c:01:da:3a:6f:f1:e7:
5a:91:f4:be:f8:d0:60:ee:67:9d:b7:ff:0a:dc:a2:
64:c9:fe:1f:5f:7c:c2:4a:88:d9:a9:34:88:2f:9d:
ef:e4:e2:db:9a:56:20:54:d4:c6:5d:c3:00:b7:71:
03:68:a8:81:92:3c:e2:a3:8b:2b:d1:e6:7a:ef:01:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:08:B4:2D:62:DC:AD:C7:AF:57:C3:AC:79:94:F7:93:92:A6:1A:5A
X509v3 Authority Key Identifier:
keyid:01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:12:57:1e:f1:9e:42:ae:56:fc:ca:8a:56:a5:b2:f5:1a:28:
c9:25:89:d2:38:e8:9e:bc:00:3c:a0:eb:5e:21:44:07:b3:c8:
0e:db:c3:7e:61:dd:05:1b:ee:ee:a6:75:f8:93:c2:88:df:1d:
d6:f7:58:96:a2:81:99:7f:b7:86:80:ce:bb:4f:77:a5:77:87:
c8:9f:60:e7:ae:6f:a4:63:d0:18:be:3b:d7:00:2f:e7:e3:6a:
fb:13:67:6c:69:3a:7d:09:24:63:c3:59:f2:c1:c4:38:4a:1f:
cb:7f:a2:ad:dc:5e:d1:2f:7d:01:57:ce:94:0f:47:3b:e6:55:
89:d3:fe:33:cf:f2:5b:13:c7:f5:be:53:da:1c:72:72:b9:6d:
34:1a:95:e2:5c:36:b4:e9:74:9e:a1:b2:86:0c:e0:34:3a:39:
be:0d:d4:3c:cd:31:67:35:69:0b:7e:01:1b:cf:a3:a1:e6:41:
9b:ad:d2:a4:71:82:34:ac:c1:9a:12:a2:0c:03:99:6e:c8:33:
51:ca:d5:12:8e:08:8e:e0:a8:64:39:42:56:55:50:79:aa:9d:
72:60:e6:be:68:d7:a6:73:cd:09:7c:8e:98:90:f6:58:e3:c9:
29:d6:79:1d:19:64:9b:1d:4c:d8:78:20:93:1a:bf:46:48:94:
cb:85:68:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:23 2026 by rpki-client