
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft
File: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft (raw, json)
Hash identifier: oVEMzVQbGKzZFrA6O/dwibtinVaR7DUD6L/qOZ+fW7Y=
Subject key identifier: E0:D0:E4:7C:30:69:01:99:73:11:BB:ED:56:FC:15:E2:C5:43:4B:C5
Authority key identifier: AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1
Certificate issuer: /CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1
Certificate serial: 74107223A2CA510E04EF327E98D97CFBFC51E58B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 23:02:02 +0000
Manifest this update: Tue 16 Jun 2026 22:57:02 +0000
Manifest next update: Thu 18 Jun 2026 03:00:02 +0000
Files and hashes: 1: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: ffbCXyninBGio9BOygv4p476TIGMpl53kSauEjC/roA=)
2: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: gyHsfmW6KN8Q0altXeM0ynZaoGDZjnrHl/TgsA39vQ8=)
3: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl (hash: EdzvYuCr1qjL2/M2XzLiuIgeAVcqVFjDBFMiK/wdCqo=)
4: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: Jz250gHnK9wmceEyoEa7ZzH19MTY0j2TTvLScjld8Z4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl
rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:10:72:23:a2:ca:51:0e:04:ef:32:7e:98:d9:7c:fb:fc:51:e5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1
Validity
Not Before: Jun 16 22:57:02 2026 GMT
Not After : Jun 18 03:00:02 2026 GMT
Subject: CN=E0D0E47C306901997311BBED56FC15E2C5434BC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:29:00:d2:2d:58:54:48:a0:54:e7:c0:f5:
e5:de:84:4e:75:09:3c:86:45:f8:c2:d0:ec:44:6d:
4b:8c:a1:c1:8b:cd:35:57:4d:39:38:3d:d9:d6:fb:
99:eb:14:f7:0e:44:85:d5:14:0c:de:de:fe:7e:b4:
7f:2f:06:a8:d2:9e:50:3f:00:e6:88:05:da:0f:e9:
9d:a3:90:c3:41:a0:31:5c:d7:74:92:8c:cc:f6:70:
85:57:61:ca:64:88:94:d0:ad:b6:44:96:d3:cb:ac:
96:76:fe:a5:6c:3b:95:da:80:1c:d0:96:8d:78:12:
e8:85:0a:20:66:a3:c9:95:3a:04:9b:1e:e9:2a:7b:
64:84:01:36:bc:be:b4:96:6c:e4:83:43:26:0f:2f:
07:f3:68:34:b7:b3:77:25:19:b4:65:44:77:8d:b1:
cb:06:fd:f4:74:ba:01:45:76:d8:bd:3f:3a:8c:e5:
5d:44:66:65:42:1a:56:c8:19:26:0e:2a:09:1c:c9:
72:16:e7:d2:2c:cb:8b:b1:ee:f1:81:8b:02:17:45:
4b:d4:2d:9b:ed:d2:4f:43:86:f8:7e:5d:02:1d:21:
ca:e5:95:1d:60:08:a0:f9:c2:95:9e:90:88:f4:27:
5f:4d:47:dc:1e:3f:67:11:e6:79:5b:e8:6b:b2:24:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D0:E4:7C:30:69:01:99:73:11:BB:ED:56:FC:15:E2:C5:43:4B:C5
X509v3 Authority Key Identifier:
keyid:AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a5:04:cd:64:25:03:28:4f:19:73:d4:ca:c1:e1:6f:d3:f9:
e2:b5:6b:29:6b:5e:d1:45:5a:d9:e5:ec:5f:39:e8:cc:c3:74:
9d:87:89:37:b8:3d:54:00:2c:06:9f:dd:ba:c9:91:f1:99:b6:
8a:01:d9:8a:cb:f9:f1:4e:08:79:b0:fa:3c:bc:5c:64:ce:50:
28:1c:da:b8:6e:43:ba:ce:f0:fa:2d:c8:63:d2:c3:b0:24:4c:
7f:75:dc:c6:e4:fb:28:58:0a:d9:67:6e:24:11:59:4d:98:92:
7d:a8:f3:9c:56:16:2e:48:51:ea:6c:8e:a9:09:87:ea:5b:48:
09:a4:02:c0:9d:ec:b6:a3:1c:65:69:cc:11:65:a5:5e:0f:34:
fa:e2:28:14:65:ea:a3:91:fc:f3:1f:47:40:ab:fd:93:57:cc:
ce:4a:94:12:a9:50:5f:bf:4f:f6:95:72:93:52:42:48:93:a8:
f7:0a:3f:c5:81:8d:a3:45:4c:84:dd:8d:2f:80:3a:3f:0b:76:
fe:8f:6e:18:ae:5f:2e:03:cc:4e:a8:f6:df:63:ba:68:26:a3:
16:97:8e:81:b6:8e:99:34:bf:df:62:ff:f9:80:44:cb:f9:d3:
3f:64:15:eb:e3:cc:ad:87:fe:43:ff:be:45:f3:5d:b4:f3:4b:
4a:19:2e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:31:02 2026 by rpki-client