
$ rpki-client -vvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
File: 412965964A4E12BD59BDF602A054F3394E99DC57.mft (raw, json)
Hash identifier: wTVQa4pmCFSTUT6o8Whlzyzqg5V/ygc6uBKqVBAwIO0=
Subject key identifier: 0D:E0:79:6C:AE:16:C7:69:A1:14:29:C9:4B:63:0C:BE:28:56:70:AB
Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
Certificate issuer: /CN=412965964A4E12BD59BDF602A054F3394E99DC57
Certificate serial: 7512FD17EFD5D5A47ACEAC8A9FC76FFE62E618C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 08:09:36 +0000
Manifest this update: Tue 12 May 2026 08:04:36 +0000
Manifest next update: Wed 13 May 2026 11:02:36 +0000
Files and hashes: 1: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: s2Tpgag7FxdnRddbkWVhsKOC3K9zk4kizsUSEDbaWVQ=)
2: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: SenSDJoyF/7+T+Cte5ij0s1hRLf2P72+k6wabdM015Q=)
3: 412965964A4E12BD59BDF602A054F3394E99DC57.crl (hash: jkQofmfUioqPnoh76QEAd3jkpCsB2nzdvGA5wpF+EQw=)
4: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: PR4TqG8Gt/NDoejWkXR5KiYWrPCc3WE35fh/Jxbvano=)
5: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: uLq3gfPOGWF6ZWj1F9WMmGzvCujMeECGwqgAQGV2Nv4=)
6: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: TwoAdTsM3NEVv7qQwQrrGzyUs0c/Mt2dxvgYNM1lek8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:12:fd:17:ef:d5:d5:a4:7a:ce:ac:8a:9f:c7:6f:fe:62:e6:18:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57
Validity
Not Before: May 12 08:04:36 2026 GMT
Not After : May 13 11:02:36 2026 GMT
Subject: CN=0DE0796CAE16C769A11429C94B630CBE285670AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:1d:97:f6:a7:b5:4a:62:eb:08:74:95:25:
06:ce:47:f6:d3:7a:31:c4:a6:e5:f2:de:ed:b5:ca:
08:ae:b5:37:18:5e:40:35:14:a5:10:b0:57:86:bf:
ad:3c:23:3a:bc:2b:c4:84:cd:17:6f:a7:2d:b5:58:
39:ae:2a:5d:0b:bb:5d:67:f7:16:3f:7f:2f:72:cd:
90:8f:ae:d9:0b:02:3d:4a:22:a6:ea:22:f8:bb:20:
65:d0:6f:a7:4f:e1:ee:f7:9f:2f:40:4e:27:09:76:
56:6a:cc:bc:d6:5a:ec:67:6b:17:14:10:f5:67:b0:
d6:35:c0:cc:f7:ea:0c:fd:08:1a:55:91:2e:1e:7a:
c2:8a:39:47:e4:bb:b0:e8:f3:36:42:06:05:10:5e:
4a:3d:e1:64:51:ca:e7:37:69:03:79:3f:26:14:c9:
aa:d6:a0:f2:52:a9:e3:2f:d5:df:2f:f5:b1:3e:a1:
7a:53:41:cf:10:3f:f1:2d:c2:b2:65:16:17:98:a6:
b2:57:8e:aa:ca:8f:18:e6:c7:37:4c:91:f4:98:dd:
e3:b6:0e:e7:4b:cf:18:72:ee:8b:96:03:8d:30:fd:
2f:e5:af:bc:dc:98:a5:02:93:cc:ed:85:a5:1e:10:
e5:bc:a1:09:f1:76:5b:3d:7c:08:4b:7d:04:b3:c4:
3a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:79:6C:AE:16:C7:69:A1:14:29:C9:4B:63:0C:BE:28:56:70:AB
X509v3 Authority Key Identifier:
keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:29:4c:dc:82:d5:b2:e5:17:be:c9:9d:74:e5:6f:61:fb:3b:
c2:a8:90:a5:81:2f:2c:d5:3d:8f:9f:bd:17:5a:ed:bc:44:5f:
cb:db:89:0b:2c:bf:29:be:09:fc:f8:ef:4b:9d:ca:4d:60:de:
46:3a:4f:c5:e4:30:d0:3b:ca:35:a6:99:ec:e5:19:19:24:6e:
4d:29:fe:13:db:f5:30:6e:c5:91:85:38:e9:5d:92:12:65:89:
92:5f:5b:73:3c:61:ac:6a:62:ac:9a:4d:59:f6:e4:e4:63:be:
9e:e4:16:a1:7f:43:23:67:2a:65:2a:89:49:b3:d3:99:7c:4e:
23:09:66:e2:60:d0:8d:33:4b:26:ca:12:fd:72:31:7c:bc:c4:
5f:bf:7c:ff:f5:b0:76:12:49:8e:67:6f:1d:f3:e9:b0:23:f5:
f6:be:f5:32:31:9e:e2:9b:db:56:ae:e0:d7:da:dc:c3:8a:03:
9c:57:21:3c:b6:b0:3d:aa:fc:50:ad:ed:99:eb:76:ed:17:55:
3c:08:74:4c:a6:8f:94:48:60:f4:fd:f7:96:fa:b2:50:13:69:
95:db:12:63:06:5a:79:73:5b:4a:6b:72:9e:74:6d:15:11:bc:
cd:e6:ea:77:e8:5c:97:ce:5d:5d:2d:34:3b:27:04:d6:fb:1b:
4f:f5:d8:13
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdRL9F+/V1aR6zqyKn8dv/mLmGMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0
RTk5REM1NzAeFw0yNjA1MTIwODA0MzZaFw0yNjA1MTMxMTAyMzZaMDMxMTAvBgNV
BAMTKDBERTA3OTZDQUUxNkM3NjlBMTE0MjlDOTRCNjMwQ0JFMjg1NjcwQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vB2X9qe1SmLrCHSVJQbOR/bT
ejHEpuXy3u21ygiutTcYXkA1FKUQsFeGv608Izq8K8SEzRdvpy21WDmuKl0Lu11n
9xY/fy9yzZCPrtkLAj1KIqbqIvi7IGXQb6dP4e73ny9ATicJdlZqzLzWWuxnaxcU
EPVnsNY1wMz36gz9CBpVkS4eesKKOUfku7Do8zZCBgUQXko94WRRyuc3aQN5PyYU
yarWoPJSqeMv1d8v9bE+oXpTQc8QP/EtwrJlFheYprJXjqrKjxjmxzdMkfSY3eO2
DudLzxhy7ouWA40w/S/lr7zcmKUCk8zthaUeEOW8oQnxdls9fAhLfQSzxDpvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDeB5bK4Wx2mhFCnJS2MMvihWcKswHwYDVR0j
BBgwFoAUQSlllkpOEr1ZvfYCoFTzOU6Z3FcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjBmN2JlMDYtOTY3Mi00NjQxLTk3YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0
QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0RTk5REM1Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MTI5NjU5NjRBNEUxMkJENTlCREY2MDJBMDU0RjMzOTRFOTlE
QzU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3
YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYz
Mzk0RTk5REM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACMpTNyC1bLlF77JnXTlb2H7O8KokKWBLyzV
PY+fvRda7bxEX8vbiQssvym+Cfz470udyk1g3kY6T8XkMNA7yjWmmezlGRkkbk0p
/hPb9TBuxZGFOOldkhJliZJfW3M8YaxqYqyaTVn25ORjvp7kFqF/QyNnKmUqiUmz
05l8TiMJZuJg0I0zSybKEv1yMXy8xF+/fP/1sHYSSY5nbx3z6bAj9fa+9TIxnuKb
21au4Nfa3MOKA5xXITy2sD2q/FCt7Znrdu0XVTwIdEymj5RIYPT995b6slATaZXb
EmMGWnlzW0prcp50bRURvM3m6nfoXJfOXV0tNDsnBNb7G0/12BM=
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:48 2026 by rpki-client