
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft
File: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft (raw, json)
Hash identifier: a9A5M4cwzKei3JPeRd70lBkg/7wYJLnyfToz1bSHEtU=
Subject key identifier: A4:25:12:9A:D5:3B:F9:AA:DE:94:26:C2:80:F7:B2:B8:05:55:24:CD
Authority key identifier: 98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5
Certificate issuer: /CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5
Certificate serial: 4614AA44D283962AF814C80D8EA397044C0885F8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 05:34:39 +0000
Manifest this update: Wed 17 Jun 2026 05:29:39 +0000
Manifest next update: Thu 18 Jun 2026 08:24:39 +0000
Files and hashes: 1: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl (hash: taYtX73zj2bnJO1vCKL6eWCky17+Ss8zuBeRSdbQ8SM=)
2: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: CodcG2RlcElofIyHkhWkjp7iwOM0brF/BMzNO8nhSZI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl
rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:14:aa:44:d2:83:96:2a:f8:14:c8:0d:8e:a3:97:04:4c:08:85:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5
Validity
Not Before: Jun 17 05:29:39 2026 GMT
Not After : Jun 18 08:24:39 2026 GMT
Subject: CN=A425129AD53BF9AADE9426C280F7B2B8055524CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:59:2f:92:1e:46:b0:6d:57:cf:98:73:12:
81:46:17:d1:9f:54:eb:42:65:68:a9:e9:4a:81:84:
b5:18:db:e1:18:2a:6f:71:63:ce:15:ad:59:1d:b4:
ae:76:e6:cb:8a:3e:75:0d:87:e0:f7:eb:70:1d:50:
da:a9:70:63:60:98:53:36:0f:14:c2:1f:e5:d5:d0:
7f:66:12:f4:07:2b:44:dd:55:76:a3:b9:ba:a7:64:
6d:3b:c9:ae:8a:2e:eb:48:92:25:02:7e:34:ba:cd:
5d:27:e6:54:d8:22:28:b9:b1:4d:b1:67:3b:47:22:
3c:f9:eb:30:83:72:62:f5:31:6d:be:37:21:5b:4a:
3c:6f:54:f8:93:2e:b1:49:7e:82:e8:bc:04:aa:8d:
21:94:7d:a2:7c:26:b2:b3:99:4c:99:87:b2:5d:62:
0b:40:32:9c:9d:ab:cd:d3:68:ae:2f:3b:42:ff:ab:
f1:32:00:17:93:ee:09:28:03:1e:8d:38:24:99:03:
c9:75:7e:64:b1:43:e0:6b:ad:69:eb:11:97:8c:1d:
52:75:5d:66:af:e2:94:90:3a:ad:d9:9c:62:84:30:
5d:47:46:45:c3:4f:ca:b6:7f:8e:bd:7c:3e:dd:05:
06:e4:ee:1a:19:33:05:3a:d2:21:f6:ec:3a:d2:05:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:25:12:9A:D5:3B:F9:AA:DE:94:26:C2:80:F7:B2:B8:05:55:24:CD
X509v3 Authority Key Identifier:
keyid:98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:24:db:d8:9b:9c:08:43:9d:0e:12:12:19:da:34:1a:cc:ce:
2a:6f:2d:ec:f3:9d:d7:8f:6a:73:46:be:17:d6:f2:7d:89:68:
5d:b2:a4:df:14:e2:32:4b:48:b0:36:0b:2b:73:bc:00:8d:de:
46:00:60:f8:0a:b6:f4:4e:ef:c5:43:0e:22:4d:2f:cf:03:de:
19:5a:b4:31:73:2d:82:b1:06:88:3e:ab:61:bf:6f:86:62:38:
b4:08:c8:49:aa:ab:7c:cc:2f:8a:9c:2f:0a:b2:bf:26:49:a0:
6e:aa:4c:38:9e:54:a1:dc:aa:78:56:fb:17:da:40:ad:16:c4:
60:56:1b:14:da:d1:d6:ca:7c:d1:81:97:07:bb:30:cd:10:7f:
06:2e:64:6e:5d:88:7e:ce:f6:7a:4b:8a:43:c6:3f:6f:62:bc:
84:19:ae:0b:99:af:90:ee:05:83:28:9d:e1:23:cd:20:99:7a:
6c:c6:08:6e:24:15:de:41:7b:84:45:dc:ca:1d:ac:08:13:46:
63:bc:ae:bb:d4:df:5c:5d:f4:fb:37:6c:00:5e:61:8f:c9:ce:
bd:b3:23:a6:8b:56:11:38:3f:e6:a7:4f:ef:d1:d8:90:6c:84:
de:3e:da:96:ea:cc:a6:8e:a6:03:40:0d:35:8a:70:38:1f:fe:
77:80:92:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:34 2026 by rpki-client