
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft
File: 328533C99D9FDEAA8F1418F15BD32B96BC206058.mft (raw, json)
Hash identifier: OzJ3Gl4KMiyRKU1uTbzWbtYc6+uWyvhK6vFE8iISBQE=
Subject key identifier: 04:EF:25:70:B9:1A:51:9E:2C:2A:C8:AB:96:BD:3C:F2:49:94:D5:66
Authority key identifier: 32:85:33:C9:9D:9F:DE:AA:8F:14:18:F1:5B:D3:2B:96:BC:20:60:58
Certificate issuer: /CN=328533C99D9FDEAA8F1418F15BD32B96BC206058
Certificate serial: 573CC2B9CE7E1ADFDBDB57DDDDAD599DA43074B3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:42:50 +0000
Manifest this update: Tue 12 May 2026 20:37:50 +0000
Manifest next update: Thu 14 May 2026 00:31:50 +0000
Files and hashes: 1: 328533C99D9FDEAA8F1418F15BD32B96BC206058.crl (hash: TdQk7CRFz0N05UkvgzXqAx2DQbGrWgqB5d+7gEfmKdg=)
2: 3130332e3231392e362e302f32342d3234203d3e203338313537.roa (hash: WdtifxvKK3KsxSLiwEXLWrNPcTtmbGv7tQrCl/tBPS8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.crl
rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3c:c2:b9:ce:7e:1a:df:db:db:57:dd:dd:ad:59:9d:a4:30:74:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328533C99D9FDEAA8F1418F15BD32B96BC206058
Validity
Not Before: May 12 20:37:50 2026 GMT
Not After : May 14 00:31:50 2026 GMT
Subject: CN=04EF2570B91A519E2C2AC8AB96BD3CF24994D566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a0:ef:b2:29:37:f3:6d:19:57:ed:e0:30:3c:
e8:89:df:f1:94:0e:14:8e:b0:a1:45:e3:a1:43:be:
c5:6e:44:bd:70:e2:a8:d7:2c:ba:96:20:bb:ec:8b:
38:5f:ab:2a:4e:db:19:99:75:9f:ff:bb:1b:9e:4c:
18:f2:37:8a:cc:20:71:0c:a7:04:c0:15:dd:a0:a8:
e4:4c:b8:76:31:81:da:92:ed:97:79:78:78:67:03:
93:6c:f5:9b:c2:10:a8:7d:f6:6e:30:c4:f6:df:52:
e7:7e:c1:e1:91:d3:40:37:65:29:c0:31:42:4c:9a:
35:46:1b:c6:fe:32:97:cc:a6:3c:b1:64:84:c8:93:
90:0b:50:fd:53:a9:a4:1a:b5:f8:0a:97:28:bd:5c:
22:20:cc:ee:cb:a4:33:91:f6:ee:25:d5:8f:c9:4e:
55:29:22:0a:69:dd:a9:bb:73:4b:6e:8f:17:f9:98:
df:ff:f8:46:93:b9:37:b8:e7:0e:8b:db:19:d5:da:
f5:cf:cf:54:9f:a8:bd:84:86:ce:b6:aa:63:50:75:
51:d7:b7:ce:ee:cd:b6:c2:37:92:24:3d:6a:db:b8:
12:4d:68:42:94:07:a0:e1:ae:0b:e3:5c:98:0c:d7:
84:a8:dc:ca:7b:dc:c4:50:50:7d:0b:7a:ac:d7:25:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EF:25:70:B9:1A:51:9E:2C:2A:C8:AB:96:BD:3C:F2:49:94:D5:66
X509v3 Authority Key Identifier:
keyid:32:85:33:C9:9D:9F:DE:AA:8F:14:18:F1:5B:D3:2B:96:BC:20:60:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0c:5a:b2:1b:2f:12:39:83:24:64:83:9d:98:d2:93:64:66:
3f:c9:e2:53:40:48:ca:94:48:3f:23:4c:c4:8c:6f:a6:68:8d:
3e:64:9b:62:f5:f4:33:bb:04:89:68:e0:c5:dd:d5:b0:56:22:
8a:31:c4:3e:61:36:b0:72:27:89:7d:c4:bb:9d:b1:31:3c:f9:
e9:9d:70:c7:6c:d6:cb:f4:09:32:89:52:00:37:7e:9d:24:8a:
01:a4:a3:2e:c6:4d:b2:18:98:cd:87:d9:16:1f:bc:d4:8d:ae:
a1:c5:c3:b9:e3:c2:0a:bf:94:00:06:43:c5:25:e5:31:6c:4f:
69:92:40:a5:99:6e:34:ff:e5:bf:0a:e7:82:81:b7:b8:1b:bf:
4b:38:1f:bc:34:f6:07:1a:ea:0d:40:c2:4d:8e:64:99:51:0e:
c2:5b:5d:31:a7:78:ff:c4:a4:27:6c:ac:6c:a5:47:80:09:28:
6d:ea:fd:db:2e:ae:35:fa:d0:2b:c8:b3:ba:15:51:22:e9:cb:
70:c8:9b:28:a6:2b:e0:33:83:16:39:ff:3d:54:aa:5f:a0:e6:
59:b7:ca:c8:36:fb:36:62:de:c5:73:49:8e:3c:78:87:b3:33:
a8:b5:a8:f1:24:c5:d1:51:e1:0d:8b:73:af:1f:db:76:f4:9f:
18:fa:cb:47
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVzzCuc5+Gt/b21fd3a1ZnaQwdLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI4NTMzQzk5RDlGREVBQThGMTQxOEYxNUJEMzJCOTZC
QzIwNjA1ODAeFw0yNjA1MTIyMDM3NTBaFw0yNjA1MTQwMDMxNTBaMDMxMTAvBgNV
BAMTKDA0RUYyNTcwQjkxQTUxOUUyQzJBQzhBQjk2QkQzQ0YyNDk5NEQ1NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsoO+yKTfzbRlX7eAwPOiJ3/GU
DhSOsKFF46FDvsVuRL1w4qjXLLqWILvsizhfqypO2xmZdZ//uxueTBjyN4rMIHEM
pwTAFd2gqORMuHYxgdqS7Zd5eHhnA5Ns9ZvCEKh99m4wxPbfUud+weGR00A3ZSnA
MUJMmjVGG8b+MpfMpjyxZITIk5ALUP1TqaQatfgKlyi9XCIgzO7LpDOR9u4l1Y/J
TlUpIgpp3am7c0tujxf5mN//+EaTuTe45w6L2xnV2vXPz1SfqL2Ehs62qmNQdVHX
t87uzbbCN5IkPWrbuBJNaEKUB6DhrgvjXJgM14So3Mp73MRQUH0LeqzXJeKtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBO8lcLkaUZ4sKsirlr088kmU1WYwHwYDVR0j
BBgwFoAUMoUzyZ2f3qqPFBjxW9MrlrwgYFgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjAyMWVlNzYtYTlmZi00YmZhLTgyMjMtOTQ2ZWVjY2NmMDM2LzAvMzI4NTMzQzk5
RDlGREVBQThGMTQxOEYxNUJEMzJCOTZCQzIwNjA1OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zMjg1MzNDOTlEOUZERUFBOEYxNDE4RjE1QkQzMkI5NkJDMjA2
MDU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAyMWVlNzYtYTlmZi00YmZhLTgy
MjMtOTQ2ZWVjY2NmMDM2LzAvMzI4NTMzQzk5RDlGREVBQThGMTQxOEYxNUJEMzJC
OTZCQzIwNjA1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADcMWrIbLxI5gyRkg52Y0pNkZj/J4lNASMqU
SD8jTMSMb6ZojT5km2L19DO7BIlo4MXd1bBWIooxxD5hNrByJ4l9xLudsTE8+emd
cMds1sv0CTKJUgA3fp0kigGkoy7GTbIYmM2H2RYfvNSNrqHFw7njwgq/lAAGQ8Ul
5TFsT2mSQKWZbjT/5b8K54KBt7gbv0s4H7w09gca6g1Awk2OZJlRDsJbXTGneP/E
pCdsrGylR4AJKG3q/dsurjX60CvIs7oVUSLpy3DImyimK+AzgxY5/z1Uql+g5lm3
ysg2+zZi3sVzSY48eIezM6i1qPEkxdFR4Q2Lc68f23b0nxj6y0c=
-----END CERTIFICATE-----
Generated at Wed May 13 03:23:36 2026 by rpki-client