
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft
File: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft (raw, json)
Hash identifier: x3O+OXq2onu+bxXrGnnpnrfvYlrhbjBmCoW/Prf36xM=
Subject key identifier: CE:71:E6:FB:68:17:0C:02:AB:AA:0B:4F:5A:29:EC:EE:80:19:18:82
Authority key identifier: C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1
Certificate issuer: /CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1
Certificate serial: 511C7B31C455CDDB703998DEE27FF0FA610253C5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft
Manifest number: 38
Signing time: Fri 12 Jun 2026 19:23:53 +0000
Manifest this update: Fri 12 Jun 2026 19:18:53 +0000
Manifest next update: Sat 13 Jun 2026 21:57:53 +0000
Files and hashes: 1: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: NFuKh4QURKhti5ts/RHCyWk9MjNgIHs/zpDCkdJPOO8=)
2: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl (hash: bOqPuZyX/5v3IOUzTGSuU1++wFx0E3Yn4X2bIqsDn0o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl
rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:1c:7b:31:c4:55:cd:db:70:39:98:de:e2:7f:f0:fa:61:02:53:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1
Validity
Not Before: Jun 12 19:18:53 2026 GMT
Not After : Jun 13 21:57:53 2026 GMT
Subject: CN=CE71E6FB68170C02ABAA0B4F5A29ECEE80191882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:a6:c0:56:06:82:19:77:ac:c3:c4:98:6f:
df:95:c7:68:9d:1a:45:f7:be:a1:66:0e:be:46:46:
7c:d2:78:4d:3c:e2:d2:ba:59:2f:df:7c:6b:d9:82:
bf:eb:6a:88:11:68:56:cf:8a:86:54:4b:10:37:d8:
47:d0:f2:4a:8b:1c:ef:8b:94:fa:1a:83:54:7e:ac:
29:3b:17:6d:52:22:26:22:6b:c8:35:2d:4f:30:c5:
7e:aa:2a:c1:ae:17:3d:04:6c:68:ba:14:ca:bd:f9:
74:57:76:9d:04:6a:b9:8d:c5:04:bb:ff:f3:a1:22:
9a:ce:78:12:f1:03:e5:48:52:0c:04:6a:a1:52:73:
a0:95:a9:78:87:7f:fb:48:d5:63:f8:72:90:1d:28:
84:b3:46:95:2e:54:88:b7:96:01:f9:e5:0a:7e:1b:
81:df:8e:ed:3d:9d:36:9a:46:2b:2b:f1:d8:b3:0b:
cd:95:19:ce:cb:cd:76:57:80:03:c3:d9:87:4c:cd:
4a:54:90:72:3c:e0:d6:bd:85:10:b5:55:ab:44:11:
50:3b:aa:b9:fa:fc:35:e3:8b:9c:ff:81:90:da:7d:
b0:66:50:7a:86:7e:c1:51:71:a7:b1:9a:9e:56:8f:
d2:2f:a8:a6:aa:6b:7f:0d:f6:f0:eb:24:fa:fa:b5:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:71:E6:FB:68:17:0C:02:AB:AA:0B:4F:5A:29:EC:EE:80:19:18:82
X509v3 Authority Key Identifier:
keyid:C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d5:0d:a9:77:9f:86:12:66:c2:d1:7a:14:72:57:17:ec:a1:
aa:6f:52:e6:67:28:56:cc:a7:47:d4:c8:fc:7f:a9:55:e0:b6:
6d:93:f4:f9:3f:ef:ed:e2:d6:19:7d:35:dd:67:f8:04:f9:16:
34:ed:80:fd:c2:b8:58:34:ec:4b:bf:bc:98:e8:39:11:cc:71:
2e:cc:47:77:e3:8a:5d:9f:ac:53:0d:17:e0:7b:24:d1:44:72:
76:15:e0:48:8b:23:af:d3:ff:b0:64:78:a6:dd:7a:ae:d2:fd:
1d:44:3a:3b:7f:d1:24:42:ef:b6:9f:c5:4a:73:d1:ac:57:f9:
e5:f0:bb:0e:b0:0e:04:a4:6b:c1:03:6e:a7:8c:d0:f3:d2:03:
63:42:95:8b:6b:04:53:21:27:96:d8:9b:c0:28:2a:c3:b0:2f:
a6:41:32:eb:b7:3c:32:75:f9:9a:7c:92:4f:2e:51:1f:47:35:
cc:55:84:1c:73:27:23:95:a7:3b:1d:a4:e0:c1:2a:f7:38:ae:
78:c7:44:f6:0c:17:40:bd:32:a5:92:d5:09:43:28:eb:5c:4a:
02:ac:79:91:0d:32:16:36:05:17:70:1f:1b:2d:d2:de:67:b8:
10:f0:02:9b:c2:ab:cb:7a:32:f2:68:a0:e1:1e:8b:12:75:49:
d7:3f:d4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:42:00 2026 by rpki-client