
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
File: D59D3CB80F39720CC6378798AF38E978ACC61169.mft (raw, json)
Hash identifier: 4xK2Edlq8MFAIPWe0nu2HpyIcwPk63rmg5DQc9DQDQI=
Subject key identifier: 35:CB:F4:74:7C:3F:2A:86:56:9E:97:8E:EF:30:4B:AE:23:28:02:64
Authority key identifier: D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69
Certificate issuer: /CN=D59D3CB80F39720CC6378798AF38E978ACC61169
Certificate serial: 3C4F54BD2D51BB868D3EAA44A4D3636195B54112
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 21:08:27 +0000
Manifest this update: Tue 12 May 2026 21:03:27 +0000
Manifest next update: Wed 13 May 2026 23:06:27 +0000
Files and hashes: 1: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: xDMl4fVPq1KOh6yEyAaFX1Ne1uCSqYoqoG2DK9eXVJc=)
2: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: NXjXH8bagUMJQqwbA86uVF5uVlgJU27CgQDeHpB6ITQ=)
3: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: TyeS6OFp+eX9ORLvbkAk7IV44ZT6uQE45kxcvU/K/wA=)
4: D59D3CB80F39720CC6378798AF38E978ACC61169.crl (hash: ytdjt7OBakckTS3HG60oyetC3ZmXMQRF/3y1AClbWfM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl
rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:4f:54:bd:2d:51:bb:86:8d:3e:aa:44:a4:d3:63:61:95:b5:41:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D59D3CB80F39720CC6378798AF38E978ACC61169
Validity
Not Before: May 12 21:03:27 2026 GMT
Not After : May 13 23:06:27 2026 GMT
Subject: CN=35CBF4747C3F2A86569E978EEF304BAE23280264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e8:4a:5c:b5:84:4b:7e:36:51:bd:a4:ae:9d:
4b:a5:43:5f:e0:07:7f:9b:f6:a3:5a:ed:66:87:4a:
72:f1:d6:60:c9:81:aa:8b:2e:1a:7f:68:e5:60:3d:
4b:05:12:f0:b4:71:ea:cd:01:bc:7e:91:ec:12:32:
04:3e:98:e5:7f:da:d9:2e:04:05:30:a1:b4:57:8b:
17:f7:2a:f8:f8:77:a4:fc:b2:99:46:d4:95:ec:1c:
e4:d1:3a:be:08:01:ee:94:1c:81:45:3e:98:eb:a5:
e5:09:ad:2c:69:ba:96:15:94:dd:ff:68:b0:40:14:
18:4c:1a:ba:33:71:e1:b5:7e:63:ef:cc:41:ef:ec:
da:95:26:1e:25:29:39:4e:fb:7c:df:0b:11:34:99:
08:37:a9:27:b2:99:cd:60:ef:7e:ca:7e:0a:20:35:
ad:74:91:cc:96:bc:23:a3:1b:83:a3:9e:1b:e9:98:
43:b6:6c:6d:0b:4a:2d:59:3c:fe:4f:18:54:a7:2d:
dd:40:f0:3e:0e:c0:f0:57:30:94:6e:e1:6b:94:fb:
d6:dc:6e:00:58:9a:81:e5:8a:53:af:46:2a:89:d3:
3b:10:44:de:7c:40:dd:78:3f:c8:e9:2c:38:f6:ae:
f4:a5:97:5b:45:49:6e:be:70:fe:0e:33:fc:25:c2:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CB:F4:74:7C:3F:2A:86:56:9E:97:8E:EF:30:4B:AE:23:28:02:64
X509v3 Authority Key Identifier:
keyid:D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5a:46:74:43:01:61:53:27:09:f1:eb:ab:1a:d5:35:1d:78:
cd:94:03:c2:06:23:1e:e7:5c:92:ff:47:1d:09:73:b0:e4:f3:
a2:15:91:2c:ed:93:33:d8:52:c1:6d:c5:70:f4:b8:92:8e:c5:
ca:af:a9:fe:3e:8e:01:3b:1e:07:bd:9e:ba:ff:c0:b6:4c:41:
e2:29:6a:7a:eb:5d:a1:1e:c6:50:d8:8d:85:ab:56:db:b1:dc:
76:f8:20:d3:f8:24:33:f8:db:d8:8f:0d:36:49:4d:dd:37:c5:
a3:af:63:30:69:74:75:ac:9b:75:67:e4:48:a2:0d:3e:a4:8d:
84:f0:64:44:e7:8a:31:23:20:11:7f:95:65:e3:ae:64:d2:23:
94:84:1b:3b:b1:7a:8b:52:be:6e:9a:8f:b3:3b:79:f3:81:ef:
21:7c:e9:48:01:57:33:96:fd:7f:4e:8d:81:c6:53:60:58:79:
6d:1c:f6:e3:81:40:0e:31:86:99:25:71:33:5f:e7:42:de:5d:
03:d7:46:1e:4d:a8:1b:88:ed:b6:dc:b5:e4:fa:85:93:46:f6:
1d:53:21:b7:d7:41:cd:b1:fd:41:5a:ce:97:93:62:9c:47:2d:
35:f3:24:74:fc:ed:83:80:fc:ee:f6:8e:cd:d4:a3:6e:21:b9:
8e:03:e2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:20 2026 by rpki-client