
$ rpki-client -vvf rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
File: 3559C104797053AE8E5C72BE7726BF44C2878CF1.mft (raw, json)
Hash identifier: q7D1EkrzkMD5jooV9m7RRO0Sbk6zoie3DfBcYmsieM4=
Subject key identifier: E0:2C:47:EE:6C:43:E2:FF:6A:04:5C:F1:E5:40:3F:0E:3A:B8:C9:0B
Authority key identifier: 35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1
Certificate issuer: /CN=3559C104797053AE8E5C72BE7726BF44C2878CF1
Certificate serial: 069D2B1F35E09326A889424889042106CC7F6E06
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 21:49:44 +0000
Manifest this update: Tue 12 May 2026 21:44:44 +0000
Manifest next update: Thu 14 May 2026 00:12:44 +0000
Files and hashes: 1: 3559C104797053AE8E5C72BE7726BF44C2878CF1.crl (hash: nLBeVAWXCEb51h2B9ZI16Pz+9EQ8DwyDdffqm9X01yo=)
2: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: TDHHkU7auhZbGybqQy/XY5A0u3/rxbPGk544rbieSIw=)
3: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: eqd0E+Lb4EVtDoQqymHQTLKTQ6HfKOpFx++L2qv+u+A=)
4: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: fC4L8rYhZI0UDA/WORkA1APzTZ9nOmT1ddK9x1B6L7w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl
rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:9d:2b:1f:35:e0:93:26:a8:89:42:48:89:04:21:06:cc:7f:6e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3559C104797053AE8E5C72BE7726BF44C2878CF1
Validity
Not Before: May 12 21:44:44 2026 GMT
Not After : May 14 00:12:44 2026 GMT
Subject: CN=E02C47EE6C43E2FF6A045CF1E5403F0E3AB8C90B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:0b:46:cd:88:36:00:7d:f9:82:5d:b2:c1:
65:fc:8f:ab:cc:51:a8:37:87:d3:ad:9c:ca:3a:72:
fc:a3:8e:64:95:a7:ed:8c:5d:ea:6e:c4:cb:93:23:
51:80:63:d1:a5:6f:c5:e3:60:80:a5:11:c6:dc:08:
5d:d8:34:3c:42:f7:d9:21:e4:d2:a1:5f:f8:ba:2f:
96:e3:7b:4a:ad:4d:21:86:59:ff:1e:af:72:6d:56:
23:c6:00:c2:40:73:cf:52:a7:d2:23:bc:c9:98:28:
33:95:27:39:2e:f2:44:c7:9f:1b:a6:05:86:a8:84:
14:de:11:4e:0c:43:1e:35:3f:51:c8:cf:00:86:88:
50:cd:a3:97:53:7f:a3:42:2a:f5:d8:a8:b3:99:5e:
fb:4b:07:41:9a:9c:10:ff:35:4b:2b:d1:56:6c:7b:
d5:95:69:85:92:28:ef:15:8b:29:91:30:16:01:af:
77:7d:5c:46:ed:33:64:44:07:75:fd:59:1a:5b:ec:
06:a5:ad:26:b0:6b:3e:bc:9e:a6:f7:95:f0:cd:de:
7a:e6:54:ea:dc:71:1a:bc:27:a0:cb:42:8b:11:40:
57:cb:cd:2c:d0:c1:63:c3:e5:7b:69:32:64:86:0f:
37:60:de:2c:a5:d4:b3:05:7b:dd:98:19:4b:97:67:
2d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2C:47:EE:6C:43:E2:FF:6A:04:5C:F1:E5:40:3F:0E:3A:B8:C9:0B
X509v3 Authority Key Identifier:
keyid:35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ec:60:63:0a:00:8b:97:bd:aa:22:c6:ab:b7:6c:a5:2c:50:
58:22:ec:6f:1a:f5:98:d4:6e:5e:4d:cd:99:60:ee:bc:73:ac:
68:c2:d9:7f:88:b5:e6:23:13:35:38:8e:fd:8b:b0:73:02:13:
40:26:79:a9:12:03:14:45:c8:4b:57:2e:f8:07:99:b4:02:4a:
05:6b:87:cb:bf:10:66:c0:64:41:05:01:22:3e:ff:b2:8e:d5:
26:ce:e7:ac:3e:50:48:3b:7d:0b:a5:d1:0d:1b:1a:f2:56:a9:
cc:44:2c:d8:c8:21:5a:34:b2:df:d0:ad:b5:26:26:31:6c:9a:
b6:d5:a7:65:2f:b1:b4:17:a5:d0:ca:eb:6b:dd:c6:92:4c:74:
56:9c:28:b7:35:27:3d:b3:83:f8:d4:6e:04:54:60:6a:49:7e:
ea:2f:0b:ad:1c:06:87:45:34:56:cf:f7:c2:fa:fc:3b:aa:66:
e6:3b:04:96:74:1f:ee:44:00:60:37:00:31:55:77:13:16:01:
10:68:1b:4c:fc:a7:87:1f:9a:7b:ff:ae:5e:09:4a:10:a2:f2:
d5:aa:d6:71:24:79:85:6d:21:d7:9e:4f:2f:ba:b1:a2:e1:9a:
ee:f0:e0:fe:c9:45:00:9a:7c:d5:ba:70:11:10:4c:de:24:4a:
da:9d:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:19 2026 by rpki-client