
$ rpki-client -vvf rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft
File: 993E93A0664A9D902D978F3596929ADCAC0D2885.mft (raw, json)
Hash identifier: h8gK603vPY/blRG6++un6o9Cmx6hMSHA88eDO43Vu3g=
Subject key identifier: 9D:52:22:01:52:FB:FC:05:1D:0E:8E:84:E4:30:22:E0:25:23:4D:E9
Authority key identifier: 99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85
Certificate issuer: /CN=993E93A0664A9D902D978F3596929ADCAC0D2885
Certificate serial: 6C337289CC95533A00828E8376F75259D929F8CF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 23:48:04 +0000
Manifest this update: Tue 12 May 2026 23:43:04 +0000
Manifest next update: Thu 14 May 2026 01:38:04 +0000
Files and hashes: 1: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: 5aAX0IVwi9Xgk1AjsNPK5oymgMFcjVvUxV24RP5spu8=)
2: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: poDQZ/2rD8eLtkNhMBfgdpUsz7sf37vpupMVDHqtCB8=)
3: 993E93A0664A9D902D978F3596929ADCAC0D2885.crl (hash: XnCK/mgPWq+Jd+JXFF104+bY9F9OY5dHN5iMEpTdiWM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl
rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:33:72:89:cc:95:53:3a:00:82:8e:83:76:f7:52:59:d9:29:f8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993E93A0664A9D902D978F3596929ADCAC0D2885
Validity
Not Before: May 12 23:43:04 2026 GMT
Not After : May 14 01:38:04 2026 GMT
Subject: CN=9D52220152FBFC051D0E8E84E43022E025234DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:96:59:9c:4c:f5:8c:a2:f9:67:10:7f:f9:
8e:74:d5:67:cc:dd:49:b5:8e:24:8c:f6:e0:32:0d:
dc:a1:bf:5e:61:55:6e:23:d7:8d:ce:24:60:98:90:
c1:68:8e:48:50:54:05:e7:8b:1e:e4:50:f5:0c:29:
08:5e:45:48:8b:54:2a:86:61:a8:d7:c5:e6:77:d6:
23:3b:54:46:d0:76:73:cb:c4:d0:f3:9e:6e:16:15:
14:1b:cc:1c:61:a6:92:44:0d:95:7e:5c:ea:05:7e:
6a:4f:cd:7a:43:83:86:6a:7a:d1:c6:0d:2c:3b:09:
76:56:65:a5:b8:84:b1:00:8e:bf:83:94:18:48:4e:
a7:87:f2:28:b0:6a:0c:bd:1e:2d:ff:a8:f4:bb:c5:
0c:a7:d7:05:e3:71:f1:5f:00:50:13:ae:34:53:2c:
d5:2a:8b:d6:f4:2f:58:2b:b4:33:6c:0b:ae:a1:26:
74:fe:b6:97:ef:81:f9:f2:31:97:77:ad:39:b8:9b:
8e:76:f2:87:4a:e8:f4:65:23:1c:96:4a:f1:33:9b:
8e:6a:e4:13:7c:96:e2:91:28:8f:07:84:01:2e:45:
f9:1e:84:07:ca:2d:c8:27:5d:31:fb:ca:03:d1:80:
c5:94:84:24:b4:33:02:82:8f:80:b4:d2:fc:02:76:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:52:22:01:52:FB:FC:05:1D:0E:8E:84:E4:30:22:E0:25:23:4D:E9
X509v3 Authority Key Identifier:
keyid:99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:de:4a:cd:25:64:1d:7c:a1:89:0a:7e:e6:fb:b6:67:b5:c1:
1f:b4:e9:62:7b:88:8e:a1:78:fe:5f:0e:01:65:5e:e9:d8:34:
65:cf:ea:87:23:44:dd:db:74:2d:d9:29:50:72:4f:15:71:9f:
da:b2:8d:97:b8:1c:fa:93:95:6f:f5:1e:74:34:7d:66:e5:71:
6e:91:37:5c:00:1b:63:c7:39:93:b9:02:4f:28:70:11:17:2f:
e0:50:62:2f:ff:a2:a2:53:1a:58:3f:7f:d9:9c:17:9f:86:d2:
74:19:dd:e0:45:81:ca:37:e0:f5:80:92:17:b2:df:a5:fa:ed:
db:e7:52:45:5b:f2:32:59:54:2f:6f:96:95:ff:97:34:87:23:
d3:8e:db:2f:4d:03:2f:ce:fa:f2:84:f0:60:79:fe:84:a9:73:
49:57:7f:38:bd:a3:83:e2:8f:5e:d3:c0:66:95:fe:4d:f8:a4:
ce:75:de:c2:64:67:b4:eb:41:9d:11:d1:a7:74:34:b8:7a:7b:
68:68:df:d9:b4:f3:a8:c7:ed:95:7c:9e:62:31:01:5a:14:d3:
fa:fb:64:8b:f4:68:e2:1b:16:de:8b:14:42:a5:c8:8e:ac:4b:
71:1e:4b:bd:32:e8:97:ef:89:be:2b:a5:29:76:b3:92:38:5e:
85:da:07:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:25 2026 by rpki-client