
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft
File: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft (raw, json)
Hash identifier: Wf1v2DSw86NqGakvshONKXew0g+NZDnbXTSv5kcySaU=
Subject key identifier: 5B:FD:58:5D:FE:34:CD:9D:8F:74:DD:D2:9D:D5:A9:0E:AD:EF:97:15
Authority key identifier: D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81
Certificate issuer: /CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181
Certificate serial: 2F3529507EDC836526B5EC32592BB322AA482639
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 00:54:46 +0000
Manifest this update: Wed 13 May 2026 00:49:46 +0000
Manifest next update: Thu 14 May 2026 01:32:46 +0000
Files and hashes: 1: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: nTkoyc0s6mnt2tkKBJEFQNLgWGbaxLyUZAhyR5bx0jE=)
2: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl (hash: 7QdR29EaKyeKWEGIxmtNMvlJvHCDXJdzMaAg4eLmC9s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl
rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:35:29:50:7e:dc:83:65:26:b5:ec:32:59:2b:b3:22:aa:48:26:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181
Validity
Not Before: May 13 00:49:46 2026 GMT
Not After : May 14 01:32:46 2026 GMT
Subject: CN=5BFD585DFE34CD9D8F74DDD29DD5A90EADEF9715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:d0:5d:99:77:ec:38:b6:7a:30:bb:3c:4a:
16:ed:7f:38:bc:fd:14:30:ac:68:ab:71:15:fd:4e:
91:7e:47:ab:09:e7:8e:56:83:ac:a9:3b:8f:cb:33:
ae:c0:19:25:6d:ab:e3:0a:d2:62:a3:18:4e:ee:35:
02:9e:c2:1a:ae:7e:54:4d:14:c5:7d:11:48:60:84:
69:5d:d6:38:a4:aa:f2:27:52:67:06:21:04:66:05:
c7:05:ce:c3:61:f9:a7:c1:9f:95:a1:39:d8:2c:e5:
50:af:d7:62:d8:f1:fc:e2:5f:fe:03:ca:57:f1:ff:
7e:2b:b6:8b:40:08:b4:6c:7f:15:d2:0e:41:94:f1:
bc:b6:66:5e:92:00:9f:40:94:c0:50:54:8f:d8:94:
c2:43:66:d0:d0:e6:51:f6:0a:77:4e:ee:0f:08:79:
b2:a9:49:d9:a3:c3:32:14:46:2c:a6:f7:cd:db:6b:
e4:63:13:29:c2:54:19:55:6c:29:48:d1:78:50:cf:
1f:cd:73:16:cc:fb:89:04:ca:e5:01:e6:40:9e:25:
4a:69:80:74:00:15:61:5c:a0:f5:10:04:ab:d8:38:
c6:7c:03:95:74:e3:55:ca:27:39:b5:f7:0f:72:52:
5e:fb:e2:ed:9f:a0:9b:a7:01:46:5c:88:c2:43:ae:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FD:58:5D:FE:34:CD:9D:8F:74:DD:D2:9D:D5:A9:0E:AD:EF:97:15
X509v3 Authority Key Identifier:
keyid:D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:94:73:b4:1a:a1:0f:ae:3a:f3:9b:52:17:73:30:53:61:81:
84:ab:40:fb:b2:5f:2b:db:58:14:c8:53:6a:35:9c:ee:04:93:
af:98:28:e6:4f:24:89:76:dc:3c:07:33:97:d3:ce:b6:a9:0e:
ca:84:18:c5:c8:92:2f:af:f8:93:c9:71:b4:9b:a7:e9:f9:c1:
fe:c7:f3:39:c3:d2:42:86:1d:64:02:2f:d0:8c:2b:34:0f:9f:
a1:7f:5c:28:dd:ef:69:c8:11:b4:2f:5c:cd:cb:02:4c:53:7a:
5e:fb:dd:f2:d5:9d:3b:03:05:63:6e:0e:25:b4:a8:b6:83:59:
ff:8b:f8:89:ec:b5:6f:0e:af:89:c4:94:89:ea:88:37:1d:1e:
ea:dd:f0:bf:c9:b0:35:4c:5d:e0:5b:c0:f4:b5:87:4b:ab:61:
07:21:ff:eb:f1:9e:2b:64:3e:f3:b3:07:a9:0a:88:e8:59:42:
09:ca:bd:dd:52:82:31:00:b6:82:4e:be:b1:1e:1e:5b:b7:45:
3c:22:e1:c0:b8:8b:2a:13:01:74:d3:0e:92:ad:f4:eb:2a:be:
2a:21:9c:0f:12:26:ab:3f:6e:c3:ac:97:fd:4a:1e:04:30:72:
8e:f8:a2:c7:74:7f:cd:37:7d:fa:c2:de:72:39:00:82:b8:f7:
ef:fd:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:45 2026 by rpki-client