
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
File: 10553E9FBD62D012FC01AA60343F1431B2A6A334.mft (raw, json)
Hash identifier: wqkTZsmiFW6bCuTgKnfrgThmCmfms7WlHSqvEu9buAw=
Subject key identifier: 91:78:57:DA:CB:2C:52:25:50:05:1F:31:FC:50:0E:39:00:80:6A:5A
Authority key identifier: 10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
Certificate issuer: /CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Certificate serial: 498A45A354B6ED979E6A7C7FEA029C1EB1D638D9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 10:31:34 +0000
Manifest this update: Tue 12 May 2026 10:26:34 +0000
Manifest next update: Wed 13 May 2026 14:24:34 +0000
Files and hashes: 1: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: tbo+ssCZ1GgyC2ZlsuUJYvzfgqZD9OlbY8lym/UKgpA=)
2: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: CzpBmVwagEtnKqxKjT1pUSrqGuU3xrwBdruiL5NCJ14=)
3: 10553E9FBD62D012FC01AA60343F1431B2A6A334.crl (hash: v0UMpPa0+YknVrGkp7eecUkeRptRk5JQbF6IaIo56c4=)
4: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: k9nD44XinJnJpBwRMmDV5yfpMBTjz+PYwIGe6HEFz9s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8a:45:a3:54:b6:ed:97:9e:6a:7c:7f:ea:02:9c:1e:b1:d6:38:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Validity
Not Before: May 12 10:26:34 2026 GMT
Not After : May 13 14:24:34 2026 GMT
Subject: CN=917857DACB2C522550051F31FC500E3900806A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:49:25:50:e3:7a:7e:e0:ab:c9:a7:4e:a4:
1d:c1:78:f8:c3:6b:f0:96:38:e3:05:f3:95:e6:96:
6d:b0:86:be:f3:0b:65:48:30:ec:6b:f3:57:50:6d:
3b:f0:58:d2:7e:8e:ef:3c:01:3c:31:8c:a9:60:f5:
e1:db:fc:8f:23:87:bf:24:a0:8e:94:1c:47:c1:28:
63:9e:c3:24:75:28:a5:72:8c:c7:d6:ab:b3:e4:2d:
4d:5e:4b:5d:ce:d8:d7:1a:2a:e2:eb:a3:3a:d0:9b:
2c:57:9a:c5:d8:ec:49:a0:c9:9e:c1:ae:f1:2b:5c:
2b:ca:ad:af:c0:a4:ee:91:20:89:d0:ad:12:6e:42:
1a:90:77:69:d4:d8:e3:15:cd:3b:66:61:25:20:c4:
17:b9:63:85:1c:74:c5:3e:64:d9:b2:08:ba:e2:05:
5f:12:b9:8b:63:4a:b1:50:05:0b:4a:24:05:a0:d5:
45:4b:4e:28:01:07:30:4a:76:87:11:43:cb:6f:c9:
63:22:99:b6:c3:5d:85:6b:3a:17:3d:48:19:5e:60:
10:75:09:98:d6:74:f2:5e:33:83:b1:ab:d5:95:27:
ae:c4:3d:49:35:66:25:7a:f5:41:e1:87:bf:de:32:
a6:df:29:c0:54:c6:b9:71:83:52:3e:2f:a2:b5:8f:
bf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:78:57:DA:CB:2C:52:25:50:05:1F:31:FC:50:0E:39:00:80:6A:5A
X509v3 Authority Key Identifier:
keyid:10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:60:e8:6b:09:27:de:a8:e5:ff:6b:87:bf:e4:2d:a4:3b:f0:
d4:31:8d:42:be:38:b8:09:0e:f3:77:1b:7b:5f:08:d2:79:03:
f7:e2:61:f1:05:36:ca:e2:6d:93:f0:58:66:01:bf:55:ec:67:
9d:84:46:58:e1:d3:2d:8d:e4:ac:62:7f:ba:11:c9:b8:13:36:
ac:c2:fc:c5:80:dc:58:1f:e1:c6:00:93:ed:b9:a1:b6:32:2f:
9e:ae:e4:20:c4:04:e0:5b:dc:7f:49:23:77:0a:8d:36:26:45:
8d:1c:bf:17:51:5d:a5:dd:11:5f:3f:75:6d:6a:b2:5b:3c:c1:
54:40:d9:a4:27:0e:60:1b:0d:5f:a2:f7:ca:d5:4d:ab:db:1d:
87:ab:79:e6:5a:4d:a4:23:66:ba:ef:71:98:3a:8d:77:0b:d3:
c5:eb:a7:1f:57:27:2f:e2:71:2b:e7:13:6f:3d:ba:a4:fb:69:
27:eb:4c:2f:fa:6f:81:0c:a2:92:89:2c:c4:07:3e:84:17:2e:
62:1d:fa:de:33:61:83:e4:8b:61:c8:16:f1:47:c2:89:27:21:
25:81:46:eb:19:2d:b3:7c:2c:f6:80:0f:95:96:db:40:ec:08:
f7:8d:d8:14:0e:1a:d3:2e:69:d2:69:21:90:45:51:9c:2a:99:
ae:1f:5d:26
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSYpFo1S27Zeeanx/6gKcHrHWONkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA1NTNFOUZCRDYyRDAxMkZDMDFBQTYwMzQzRjE0MzFC
MkE2QTMzNDAeFw0yNjA1MTIxMDI2MzRaFw0yNjA1MTMxNDI0MzRaMDMxMTAvBgNV
BAMTKDkxNzg1N0RBQ0IyQzUyMjU1MDA1MUYzMUZDNTAwRTM5MDA4MDZBNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7kklUON6fuCryadOpB3BePjD
a/CWOOMF85Xmlm2whr7zC2VIMOxr81dQbTvwWNJ+ju88ATwxjKlg9eHb/I8jh78k
oI6UHEfBKGOewyR1KKVyjMfWq7PkLU1eS13O2NcaKuLrozrQmyxXmsXY7EmgyZ7B
rvErXCvKra/ApO6RIInQrRJuQhqQd2nU2OMVzTtmYSUgxBe5Y4UcdMU+ZNmyCLri
BV8SuYtjSrFQBQtKJAWg1UVLTigBBzBKdocRQ8tvyWMimbbDXYVrOhc9SBleYBB1
CZjWdPJeM4Oxq9WVJ67EPUk1ZiV69UHhh7/eMqbfKcBUxrlxg1I+L6K1j7/XAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUkXhX2sssUiVQBR8x/FAOOQCAalowHwYDVR0j
BBgwFoAUEFU+n71i0BL8AapgND8UMbKmozQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTcyMTY0MjUtNmFhMy00NDI5LWIxNzUtODY5MDFiYjBjYjFmLzAvMTA1NTNFOUZC
RDYyRDAxMkZDMDFBQTYwMzQzRjE0MzFCMkE2QTMzNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDU1M0U5RkJENjJEMDEyRkMwMUFBNjAzNDNGMTQzMUIyQTZB
MzM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcyMTY0MjUtNmFhMy00NDI5LWIx
NzUtODY5MDFiYjBjYjFmLzAvMTA1NTNFOUZCRDYyRDAxMkZDMDFBQTYwMzQzRjE0
MzFCMkE2QTMzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAINg6GsJJ96o5f9rh7/kLaQ78NQxjUK+OLgJ
DvN3G3tfCNJ5A/fiYfEFNsribZPwWGYBv1XsZ52ERljh0y2N5Kxif7oRybgTNqzC
/MWA3Fgf4cYAk+25obYyL56u5CDEBOBb3H9JI3cKjTYmRY0cvxdRXaXdEV8/dW1q
sls8wVRA2aQnDmAbDV+i98rVTavbHYereeZaTaQjZrrvcZg6jXcL08Xrpx9XJy/i
cSvnE289uqT7aSfrTC/6b4EMopKJLMQHPoQXLmId+t4zYYPki2HIFvFHwoknISWB
RusZLbN8LPaAD5WW20DsCPeN2BQOGtMuadJpIZBFUZwqma4fXSY=
-----END CERTIFICATE-----
Generated at Wed May 13 09:11:58 2026 by rpki-client