
$ rpki-client -vvf rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
File: 19101281C951DCE434F1B713AE570F59EE413A09.mft (raw, json)
Hash identifier: xCDbeoLGOc9WAXXIdCMFEyxA8jJfYe5NPdCGsHuFdqw=
Subject key identifier: CF:36:B1:14:6E:D6:60:36:CD:E9:98:25:85:35:53:D3:76:99:DF:EE
Authority key identifier: 19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09
Certificate issuer: /CN=19101281C951DCE434F1B713AE570F59EE413A09
Certificate serial: 6EBDE01EE5C6F4757568802773A746BE9306A206
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 01:25:15 +0000
Manifest this update: Wed 13 May 2026 01:20:15 +0000
Manifest next update: Thu 14 May 2026 05:04:15 +0000
Files and hashes: 1: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: pQnNBmBtFzueuc0/RAfPveu5rYMb0ariGWnKZ/WG/t8=)
2: 19101281C951DCE434F1B713AE570F59EE413A09.crl (hash: v2W+94Y3PilIZW4lHXkT220zPKF0U9jXW9G1z5Oqn3s=)
3: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: w5VnAqDMpxkCSyJK8a4JzBCfvPRADlp4Zd050ewYnlA=)
4: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: lsZJ+/dkSenhsqGfebfOtSdM0lXp316Uwu+8bQgCJfE=)
5: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: bgJcO1kAlUNDdjIqyEDrjwkCdWK+MIfy7MXbYHWX1YE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl
rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:bd:e0:1e:e5:c6:f4:75:75:68:80:27:73:a7:46:be:93:06:a2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19101281C951DCE434F1B713AE570F59EE413A09
Validity
Not Before: May 13 01:20:15 2026 GMT
Not After : May 14 05:04:15 2026 GMT
Subject: CN=CF36B1146ED66036CDE99825853553D37699DFEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:82:f8:09:b6:d0:a0:55:03:ec:b3:e5:97:
d1:b7:60:8a:3e:c4:22:e2:c6:1c:32:55:09:1e:23:
cb:10:c5:22:f5:b9:6e:ba:fc:79:74:42:a9:64:8c:
08:86:5b:70:0b:78:95:81:23:c0:28:18:d5:29:32:
2e:1e:0e:59:fe:d7:d7:f4:4f:36:05:7a:0c:96:cb:
15:3c:9a:ca:c2:c6:9c:87:ac:57:d3:d7:13:d8:1a:
ad:a5:4b:65:23:12:67:48:3c:41:59:c2:3b:ad:3a:
7f:be:fa:1c:f9:ce:e8:bb:e1:b3:fe:e4:49:d7:6b:
dd:99:de:55:8e:fe:7c:b9:83:30:67:57:ac:d7:24:
b0:84:0a:1f:5e:49:54:44:56:9b:16:89:26:1f:b5:
16:d2:cd:0d:3f:fb:e2:21:ea:8f:8d:6d:c2:c1:cf:
06:38:0c:5c:2b:40:24:ec:56:cc:ac:c5:a4:80:e2:
16:78:00:d4:34:78:98:43:33:4b:0e:45:56:b0:7f:
fc:cd:a9:7b:9a:d8:ea:f2:43:ab:3f:38:8f:46:f4:
59:ee:36:67:84:f6:82:5a:9c:87:19:2a:c8:08:95:
54:4a:60:76:61:7a:4d:28:72:c3:4f:f7:01:11:05:
2f:b9:94:ca:a6:4d:58:b5:55:6b:72:4e:34:95:49:
4d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:36:B1:14:6E:D6:60:36:CD:E9:98:25:85:35:53:D3:76:99:DF:EE
X509v3 Authority Key Identifier:
keyid:19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:38:6b:6c:78:bd:46:ef:a1:74:8e:47:d0:c5:a1:86:4a:03:
f5:28:5d:00:7d:59:49:66:28:fb:3e:8e:e9:3d:47:ab:cf:a1:
4f:7c:b4:c1:5b:58:1a:8b:5c:a3:88:d5:0a:75:f2:de:1a:cd:
23:6d:6f:d0:50:04:08:12:71:6f:ea:01:04:3a:76:d1:3d:c9:
48:e4:e3:ef:86:da:57:0d:78:d8:ce:56:68:33:3f:b3:0a:31:
1e:68:32:04:73:46:44:0f:4f:32:0c:fd:7d:64:69:ef:e0:6a:
4d:58:68:57:5b:2d:88:d1:35:d0:9b:f4:65:6f:fc:a0:2a:ce:
6f:72:f7:43:e5:74:5a:8a:e2:31:a9:f9:9c:63:f0:4b:69:45:
aa:e2:e6:f3:42:36:14:27:b5:9b:ec:f2:7e:8d:0c:46:3d:fa:
8e:d8:db:fc:1e:d8:40:6f:ed:b6:27:39:e3:4d:cd:21:23:36:
7c:8b:67:44:f1:6c:9c:c6:b3:4f:22:80:e5:35:bd:bd:7a:2a:
b5:4b:2d:05:e5:7d:ae:1e:b2:5d:94:68:a8:84:8d:14:c5:8a:
ef:e3:63:b8:c2:88:77:39:ef:d5:70:ba:d1:4f:45:0e:e8:2b:
13:59:01:b3:89:05:f1:1d:7f:7d:32:a6:8f:db:4a:86:98:6c:
60:5d:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:35 2026 by rpki-client