
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft
File: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft (raw, json)
Hash identifier: b/PcDZ1o7Z4uF/bsaM0mTbKtzORwG4NKM8A+8AhOIls=
Subject key identifier: 48:72:80:88:46:5E:C6:75:1C:1C:52:D2:3E:52:D0:77:DF:58:F6:9E
Authority key identifier: D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25
Certificate issuer: /CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625
Certificate serial: 72361EB7820B07035B178497F07745536BE7A087
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 18:00:59 +0000
Manifest this update: Tue 16 Jun 2026 17:55:59 +0000
Manifest next update: Wed 17 Jun 2026 19:11:59 +0000
Files and hashes: 1: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (hash: 4KthRL11gBmJfq1X/84ocL39dco9wY9VllXbFEY9aPQ=)
2: 3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (hash: 6zRlVB+7VhU+EM3gEBCiqmflsWcB74DY3jlrVLYDaZ8=)
3: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl (hash: b8JhtUAsM9A3e4IJ7aNGsXDP4xM7wMfEumrv/zm2+j0=)
4: 3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (hash: VU4Fqm4q9lM1qlbwtCDfQfln3xy8Zkz6BXFC8JhBhSw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl
rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 19:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:36:1e:b7:82:0b:07:03:5b:17:84:97:f0:77:45:53:6b:e7:a0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625
Validity
Not Before: Jun 16 17:55:59 2026 GMT
Not After : Jun 17 19:11:59 2026 GMT
Subject: CN=48728088465EC6751C1C52D23E52D077DF58F69E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:c5:80:dd:96:05:0b:ae:0c:f7:df:0e:80:
a9:00:84:fb:c5:eb:d7:70:5c:88:0c:9e:18:05:86:
4d:da:97:00:f2:99:a2:40:7c:8b:f5:9a:d4:54:0f:
02:ad:85:8b:c0:35:23:10:eb:c5:4e:dc:9d:59:7e:
53:6e:76:a7:6f:eb:74:16:0f:bf:26:b5:5b:bd:be:
03:26:4f:56:46:ce:d0:18:f7:f6:d6:9b:92:8e:e5:
58:a1:cb:81:07:18:af:54:eb:1e:2d:2f:ed:87:15:
49:03:f8:85:a8:c2:8d:44:d4:68:a7:b7:60:86:87:
13:a7:be:aa:51:af:fa:fb:72:86:9e:01:5c:c0:06:
8f:22:fb:07:91:82:29:89:99:a7:d7:a0:cc:99:9b:
25:f3:7f:ac:8d:5e:97:a8:f2:2f:a3:bd:f4:49:25:
d1:a6:76:1c:0f:c6:2d:01:dd:6b:ae:e3:b2:30:f4:
84:93:d3:d5:55:73:58:e9:a1:3d:05:9b:c6:45:eb:
89:fa:98:5a:42:aa:d9:d6:32:a7:55:23:52:af:2d:
3c:3d:81:5a:be:0f:79:71:23:4c:7c:bc:c0:70:80:
83:df:4a:9c:cf:93:6a:7b:85:cf:2c:de:13:55:40:
56:d3:e5:32:ce:c6:e8:23:75:2f:cf:8f:36:7f:3a:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:72:80:88:46:5E:C6:75:1C:1C:52:D2:3E:52:D0:77:DF:58:F6:9E
X509v3 Authority Key Identifier:
keyid:D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:34:63:60:0b:a7:54:96:f5:27:29:be:a8:13:35:dd:d0:c5:
2d:88:49:79:5a:7e:3b:30:c6:f1:78:54:47:9f:0b:fc:ab:bb:
a5:86:d9:1f:45:b0:a3:a3:63:71:97:56:dd:7d:bc:b4:13:35:
cc:ab:f5:e4:30:33:ea:26:29:0a:c6:ff:03:81:8a:10:60:84:
e6:57:f7:d4:64:90:04:64:ea:7e:cb:24:ef:8e:0b:b4:87:1d:
3a:84:2e:f0:4b:25:6e:49:1c:50:3e:41:f1:fa:64:32:bc:62:
88:e1:ce:eb:41:3c:92:b6:ca:01:28:88:3e:c8:3a:ac:ad:94:
93:0b:42:bb:97:c0:17:3a:03:93:a6:c7:6d:3f:f4:ee:bd:75:
ff:9e:7b:d9:2c:0d:43:e9:cc:a5:49:76:37:64:09:08:cb:37:
a2:f7:8d:54:85:01:3a:11:8a:5e:30:0b:d0:38:15:51:69:12:
cd:a3:08:9d:7d:c5:52:9b:fd:cd:ec:c7:b3:ce:e7:63:10:ef:
54:95:4f:a2:b1:61:87:20:9c:76:f8:0d:52:74:28:6e:ad:57:
50:0b:22:62:52:a6:6e:e6:c6:3a:9f:c5:a7:55:64:0c:43:ed:
23:32:f4:dd:2e:94:30:08:fd:88:2d:6e:1e:b9:ae:5b:f8:a2:
b8:e5:9e:57
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcjYet4ILBwNbF4SX8HdFU2vnoIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBGMEM4RDE1MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0
NkM0QzYyNTAeFw0yNjA2MTYxNzU1NTlaFw0yNjA2MTcxOTExNTlaMDMxMTAvBgNV
BAMTKDQ4NzI4MDg4NDY1RUM2NzUxQzFDNTJEMjNFNTJEMDc3REY1OEY2OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIycWA3ZYFC64M998OgKkAhPvF
69dwXIgMnhgFhk3alwDymaJAfIv1mtRUDwKthYvANSMQ68VO3J1ZflNudqdv63QW
D78mtVu9vgMmT1ZGztAY9/bWm5KO5Vihy4EHGK9U6x4tL+2HFUkD+IWowo1E1Gin
t2CGhxOnvqpRr/r7coaeAVzABo8i+weRgimJmafXoMyZmyXzf6yNXpeo8i+jvfRJ
JdGmdhwPxi0B3Wuu47Iw9IST09VVc1jpoT0Fm8ZF64n6mFpCqtnWMqdVI1KvLTw9
gVq+D3lxI0x8vMBwgIPfSpzPk2p7hc8s3hNVQFbT5TLOxugjdS/PjzZ/OsKpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSHKAiEZexnUcHFLSPlLQd99Y9p4wHwYDVR0j
BBgwFoAU0PDI0VD+rrOyYq4mDu1u+kbExiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjUxZDZjOWMtZWFkNy00NWZlLWExOWEtNDIyMzVmYzUzNzgwLzAvRDBGMEM4RDE1
MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0NkM0QzYyNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMEYwQzhEMTUwRkVBRUIzQjI2MkFFMjYwRUVENkVGQTQ2QzRD
NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjUxZDZjOWMtZWFkNy00NWZlLWEx
OWEtNDIyMzVmYzUzNzgwLzAvRDBGMEM4RDE1MEZFQUVCM0IyNjJBRTI2MEVFRDZF
RkE0NkM0QzYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG00Y2ALp1SW9ScpvqgTNd3QxS2ISXlafjsw
xvF4VEefC/yru6WG2R9FsKOjY3GXVt19vLQTNcyr9eQwM+omKQrG/wOBihBghOZX
99RkkARk6n7LJO+OC7SHHTqELvBLJW5JHFA+QfH6ZDK8YojhzutBPJK2ygEoiD7I
OqytlJMLQruXwBc6A5Omx20/9O69df+ee9ksDUPpzKVJdjdkCQjLN6L3jVSFAToR
il4wC9A4FVFpEs2jCJ19xVKb/c3sx7PO52MQ71SVT6KxYYcgnHb4DVJ0KG6tV1AL
ImJSpm7mxjqfxadVZAxD7SMy9N0ulDAI/Ygtbh65rlv4orjlnlc=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:53 2026 by rpki-client