
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
File: 595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft (raw, json)
Hash identifier: ZrJHaf+eAQMPcSQuL1+Rx6LWx8lUl3YYpy8hTDWdrgk=
Subject key identifier: 6C:0F:CD:4D:CE:B9:8F:4D:53:92:A0:C8:B8:74:9C:5E:02:B2:BB:03
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Certificate issuer: /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial: 492D5E9B2A1A1D85EA8244E97888D7F14116F42A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 06:54:35 +0000
Manifest this update: Wed 23 Sep 2026 06:49:35 +0000
Manifest next update: Thu 24 Sep 2026 08:44:35 +0000
Files and hashes: 1: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: eOdt05IAfcrKKZUnC2uIX6d/C9w0dr4HU6UCs9176ek=)
2: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: pBXuYTqReMplN2AY6AolkobEan90DNcRX+8WnFHv1IY=)
3: 595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl (hash: PpWiDibUi2vEJY+inyk+exykbz3rirm2iCOUP2hsEvk=)
4: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: YnpwLS3qShrtat5vFr4GKHpgIrsqYW7nhd/bbP/N9z4=)
5: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: Gf7+JDdgZXaOoBD3FCXccmzSiqspLprw2RT0W6wNy+U=)
6: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: kbsHwCF+kLPIM6LmBzd7ReTnbGaVE3pJ2tb1Y6LGrMo=)
7: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: OsRtYTl/a4gBsIVTCYGY7UbsLX5kl3Dd0rUx9sxMLF8=)
8: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: jO/LVsBGp/hIYW/T7V2ve/LWVG5Avg+yBl19oxnQ+Ok=)
9: 3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa (hash: EZ+ZMEszQ0FNnAyScxrOoCf6N5MbYNv0AIqesnyNkY8=)
10: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: oIB0azCHKZZD4LUQLYG0Yqlb4f/9KSBQ4JwecEqWsUw=)
11: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: jNXjwR9NoJrp9dtiwnlZ8ZD+nF3IUWQs6hiqUnrS/Ok=)
12: 323030313a6466313a316334303a3a2f34382d3438203d3e20313339323035.roa (hash: YbOI5aFhnLmVxr4CRLkG88zjm2Rznib1BrI9wVME05k=)
13: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: eR32X6TB9dCvTyEj8xcbUe0oCJGcSbLwWM78VEF/mIM=)
14: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 0dcgbUIE4O45ZJeQQknhi7QzWy9JrD3T/y5JsTnfFC0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 08:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2d:5e:9b:2a:1a:1d:85:ea:82:44:e9:78:88:d7:f1:41:16:f4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Validity
Not Before: Sep 23 06:49:35 2026 GMT
Not After : Sep 24 08:44:35 2026 GMT
Subject: CN=6C0FCD4DCEB98F4D5392A0C8B8749C5E02B2BB03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:19:50:a5:49:c5:99:80:62:2b:d9:8f:1e:
d8:18:45:6d:d3:fa:72:a7:ce:bc:31:da:bf:cf:e1:
3a:41:96:02:40:c4:df:b9:4d:a3:3f:d3:07:0e:e4:
11:d6:40:87:3b:63:fe:32:6c:1c:6a:8b:72:a0:41:
ac:38:a3:28:77:f2:26:68:7c:ef:70:06:0e:25:c2:
88:ed:f3:3f:f8:5c:9d:3e:fc:8e:f4:90:e4:cb:a2:
9e:8e:58:3a:c7:37:b5:a6:80:15:a4:58:e6:46:cf:
a9:f6:8e:95:37:fd:08:64:38:29:ef:c3:6a:4d:0a:
9a:f6:1d:55:c9:fd:ae:aa:96:97:bd:d2:d2:a7:0c:
e1:5b:6f:2a:d8:40:26:6f:3b:82:5a:58:9a:bc:aa:
69:f9:50:e6:a6:0e:25:7c:30:47:cb:da:07:9f:f2:
3c:21:fa:b7:4c:42:ca:2c:63:21:f7:be:02:d9:0e:
a0:9c:b7:ae:85:b1:37:b0:c2:3d:75:a8:99:dc:20:
d6:f5:c0:ed:1b:08:70:da:94:6d:bb:47:1d:0a:a9:
a1:15:a8:b4:83:e8:93:4f:0c:36:fb:eb:c1:b4:32:
a6:62:f0:c2:53:90:90:6f:2d:24:17:b2:f4:b5:8d:
db:10:0e:68:fa:71:81:1b:f3:16:a4:51:39:30:c6:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0F:CD:4D:CE:B9:8F:4D:53:92:A0:C8:B8:74:9C:5E:02:B2:BB:03
X509v3 Authority Key Identifier:
keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:55:1c:e4:9c:75:ef:d6:47:46:76:3a:ad:18:15:03:f9:0a:
50:ef:b8:1a:b2:b3:1b:14:e0:9c:22:0e:31:cf:a6:e7:37:ec:
3c:04:0e:0e:d8:3d:09:24:0d:3b:0c:92:29:92:2c:80:49:6a:
c1:22:51:69:8c:46:51:d0:f0:fa:b4:5d:c7:cc:ab:df:be:16:
12:cb:88:7b:fb:13:e6:cd:f7:18:ef:a3:08:2d:82:eb:5d:85:
cc:99:e7:a3:5e:fd:6b:e2:44:62:88:3e:0a:1c:ed:12:a7:63:
1b:c5:5d:f3:35:66:9c:52:3e:c0:ac:aa:77:d3:41:ce:f9:e6:
dc:2a:11:42:9e:40:b4:f8:90:53:e8:4a:60:1a:7f:a8:25:b0:
97:b4:52:55:40:29:93:a8:f1:ad:f2:ed:05:b3:5a:ba:1c:3b:
b2:d7:62:2c:b0:12:de:9e:01:8f:8e:6a:9d:6c:59:dc:6e:04:
ea:27:dc:6e:5c:05:7d:46:de:54:f5:84:bf:d2:50:9c:1d:34:
aa:02:e0:4f:86:e3:93:39:93:2d:ee:c6:a4:ca:b4:31:f4:ac:
2c:87:24:5e:89:00:0b:a3:84:ff:3a:84:76:52:e1:34:81:62:
e6:8e:79:44:a7:5a:f7:28:a8:e2:5b:db:7f:3d:10:14:95:a4:
90:2e:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:03:51 2026 by rpki-client