
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft
File: ADF43E36B1768DE874BC2E4386678718C68AC58C.mft (raw, json)
Hash identifier: krdr76lT8bNPX7j8HLxl1H+4gNA+0+HmZts8rg+HV4U=
Subject key identifier: 50:9C:7F:9D:A3:5B:EC:9C:BC:89:DE:F6:44:1B:DD:54:D6:88:91:C2
Authority key identifier: AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C
Certificate issuer: /CN=ADF43E36B1768DE874BC2E4386678718C68AC58C
Certificate serial: 321555C678FEAF2D5920F8CC924DAC414494A588
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:56:31 +0000
Manifest this update: Tue 12 May 2026 19:51:31 +0000
Manifest next update: Wed 13 May 2026 21:24:31 +0000
Files and hashes: 1: ADF43E36B1768DE874BC2E4386678718C68AC58C.crl (hash: 8rMantZbteutZtCcTBatrEJVbUK3WvP9JbSECPDV4Zc=)
2: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: YGwFwZ5ZgSYttDBh5EguczXxt0Tj6L2YYXDVT0BcXEg=)
3: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: 5KPKZA2RTu5ylHSV1TQQG9h2k3pnK+Y0k5lXF80cirU=)
4: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: HhOurlT1i9ohxjrni1AsVYHua6nriyDIMH2PNMhJi+I=)
5: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: K8yPbAzC5p5yuBTV3LGTKzGdC+9ek4+ufDT1mYTr44E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl
rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:15:55:c6:78:fe:af:2d:59:20:f8:cc:92:4d:ac:41:44:94:a5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADF43E36B1768DE874BC2E4386678718C68AC58C
Validity
Not Before: May 12 19:51:31 2026 GMT
Not After : May 13 21:24:31 2026 GMT
Subject: CN=509C7F9DA35BEC9CBC89DEF6441BDD54D68891C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bb:59:d1:bf:8c:1a:04:c3:ea:53:49:fc:80:
9d:bb:60:fa:70:22:c0:6a:3d:ba:81:33:10:a2:d4:
b6:9d:71:a5:3a:f5:47:b8:7c:41:a7:7d:ce:ea:55:
60:99:55:e0:62:e7:50:60:6b:c0:04:8b:74:1d:41:
05:51:c2:8b:7d:18:cf:37:e0:e4:73:32:2e:99:2c:
e6:91:6a:14:40:6e:57:41:c4:1b:be:68:c9:8e:97:
f5:5e:70:ff:e4:e5:82:7b:18:fd:9f:df:8c:26:98:
4e:75:8e:8e:18:1a:b9:ff:df:b3:e7:e9:ac:3b:78:
8c:f9:54:14:6c:72:57:2f:49:6a:d3:1c:4c:63:38:
cb:65:ab:05:ac:b1:6c:70:f3:9d:1b:0d:56:fa:01:
4b:52:ef:b3:26:39:b6:4e:29:b3:62:55:8d:c4:dc:
98:68:bc:2e:59:8b:95:9b:06:7e:ce:1d:d7:9d:b7:
93:66:01:2d:af:e6:33:c2:07:95:7c:e4:0b:8b:5d:
44:14:fd:78:df:7f:4e:04:38:72:00:d0:76:b1:5f:
e0:41:0d:d3:59:37:57:eb:14:52:c9:2d:84:f2:7e:
f1:11:42:bb:bb:07:2f:8d:c7:28:a2:08:0c:19:ab:
08:16:ab:d9:a3:8f:9e:2c:4c:b1:6f:06:4a:d3:96:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9C:7F:9D:A3:5B:EC:9C:BC:89:DE:F6:44:1B:DD:54:D6:88:91:C2
X509v3 Authority Key Identifier:
keyid:AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b6:79:a8:62:f5:18:c8:40:a3:62:1f:e5:5c:81:36:46:b5:
dd:49:04:71:74:86:f9:5b:3c:c5:3c:32:71:cf:8a:4d:e1:86:
a1:71:6d:90:35:74:5f:89:63:41:90:d3:e1:cc:f1:7f:05:a3:
96:07:ee:bd:2c:01:ad:04:b8:41:49:d1:7a:39:ec:d7:a8:58:
b9:04:c9:36:ac:ea:5a:66:da:57:f5:2e:ce:26:63:1a:84:e5:
7f:29:42:ec:87:d2:ad:e2:f5:2a:6c:8f:1c:0f:d5:43:70:3a:
45:89:4d:29:bc:b4:bc:0d:69:d5:e8:22:9d:d5:f2:90:f7:b6:
07:4f:0b:33:ad:92:ef:75:cf:3b:0b:38:29:47:89:7d:f4:fe:
62:ad:1f:93:64:ec:d7:c3:9f:7f:7d:49:cb:7f:51:5e:65:6a:
af:77:56:e3:81:20:74:08:5a:79:87:bd:b8:62:f6:5f:fe:f4:
34:d5:ec:5d:07:96:ad:22:97:95:39:4b:ab:ad:3e:7e:4f:5f:
32:ab:f8:79:99:99:65:c2:71:f7:af:5d:d4:61:66:78:87:c1:
5b:f6:e5:98:57:d4:ab:b0:a9:1a:3e:1c:29:25:65:58:17:90:
28:fc:fd:a6:70:d5:c4:24:0d:12:60:0c:91:86:d3:49:fc:a1:
c0:fb:51:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:10 2026 by rpki-client