
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft
File: 12099D13750CE0704F5D87C255E4B056E703B28D.mft (raw, json)
Hash identifier: AvsAmesmz3kj2MQFXUFZkaCFNZ1OxFkBiPHelXTFNo8=
Subject key identifier: 8A:A7:B6:9F:A5:6F:34:FA:B0:FF:A9:86:DC:30:EF:C6:D1:79:52:75
Authority key identifier: 12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D
Certificate issuer: /CN=12099D13750CE0704F5D87C255E4B056E703B28D
Certificate serial: 47CDE6EE8DE759A2F5EC5FD4494CAB8DDEEEA1E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:25:41 +0000
Manifest this update: Wed 17 Jun 2026 02:20:41 +0000
Manifest next update: Thu 18 Jun 2026 02:51:41 +0000
Files and hashes: 1: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (hash: guj2wYIy2OeBYkQ4ioJGOVZvTeDH758uPYwCniNJbeE=)
2: 12099D13750CE0704F5D87C255E4B056E703B28D.crl (hash: N17rRvNnwxhqu0LVBE8vyzTni4OBSOHkx8Zsvm+h7Ck=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl
rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:cd:e6:ee:8d:e7:59:a2:f5:ec:5f:d4:49:4c:ab:8d:de:ee:a1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12099D13750CE0704F5D87C255E4B056E703B28D
Validity
Not Before: Jun 17 02:20:41 2026 GMT
Not After : Jun 18 02:51:41 2026 GMT
Subject: CN=8AA7B69FA56F34FAB0FFA986DC30EFC6D1795275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:e0:4a:8d:9f:a5:16:cd:3e:f8:5e:9d:a4:
ec:34:9a:4e:1c:78:47:d7:00:7d:64:d7:d9:06:f7:
e7:eb:e0:ed:1b:93:db:7c:4e:d7:eb:9c:87:e0:e0:
43:c3:bf:a2:50:e8:a9:9b:61:d2:94:6b:9e:4b:b8:
26:89:19:e5:a1:52:67:be:ee:3a:fa:2f:98:2c:f9:
7d:ea:5a:ca:01:8e:03:4e:ff:5c:97:33:27:de:a3:
c1:c9:22:48:de:85:d9:a6:69:07:9b:13:af:da:74:
16:1e:8b:a3:54:b0:30:47:50:c7:7e:aa:16:02:50:
89:86:a8:61:6a:1b:94:1a:bd:e6:6f:e9:b9:cd:ad:
cb:9e:e8:4e:80:01:dd:c0:72:d0:f5:bd:a0:e2:b9:
d5:01:99:af:65:70:09:26:c8:14:5c:34:1f:0a:45:
fe:85:e6:c4:f9:6e:02:f6:e2:03:42:88:1d:33:5d:
23:26:10:5e:fb:da:b7:54:eb:62:f4:51:69:78:f1:
6a:11:9b:16:42:f3:b8:88:2a:7c:5e:21:f0:c1:7c:
32:be:0e:b1:68:1d:25:f4:4a:96:e2:d2:6d:12:07:
53:9d:ef:f1:35:f7:a5:b4:b5:48:e5:89:9a:58:35:
d3:04:c0:84:36:97:c5:e7:4f:3d:63:1a:00:00:00:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:B6:9F:A5:6F:34:FA:B0:FF:A9:86:DC:30:EF:C6:D1:79:52:75
X509v3 Authority Key Identifier:
keyid:12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c7:7b:37:55:c5:57:96:5d:7f:6e:1b:a4:89:66:1b:a0:41:
23:9b:f3:21:d9:93:70:1c:ec:75:7c:8b:46:ef:a5:0d:04:9b:
e7:31:f1:4c:23:13:cd:d1:45:46:07:d9:40:83:ea:a0:40:fd:
f3:76:92:b4:4f:0f:e2:a6:79:32:fe:10:71:fc:fb:6e:54:af:
06:1b:af:7e:cc:26:d3:7c:9c:08:b5:8a:84:c9:0f:48:0c:2d:
b1:65:cc:da:7d:ff:94:3b:66:9b:07:15:ce:fe:44:94:a5:85:
6a:49:fb:41:e7:13:ad:c9:9e:b5:eb:fa:97:6d:00:3b:ca:ba:
d0:76:3a:2e:e5:06:58:6a:0a:81:0e:53:d2:62:bf:92:70:bc:
ce:e5:71:d1:23:46:7d:ba:64:55:ea:5a:2e:7f:65:86:cd:fd:
60:81:16:ed:39:42:21:5c:e8:31:11:95:6d:4c:09:69:5f:31:
a7:07:1e:ea:ef:30:1a:b1:fa:9e:54:49:0d:d6:b5:08:3a:69:
73:48:a7:07:13:18:5a:ab:9f:7a:46:fd:7a:cc:61:04:93:08:
33:a0:f1:ec:39:73:dc:b8:3f:03:69:fc:ed:8b:40:74:b7:19:
82:d5:bd:78:f3:e5:16:a6:d2:20:9a:cb:9d:f4:e1:c9:82:42:
58:64:7c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:50:16 2026 by rpki-client