
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft
File: 935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft (raw, json)
Hash identifier: +Y+Ks5cWUQ+Wal8Mlm2X0yrj3NZ1aniD96bZSar2MTc=
Subject key identifier: D8:9F:3D:36:31:C6:70:01:D9:DA:9E:1F:20:98:FF:BA:FA:21:62:FA
Authority key identifier: 93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C
Certificate issuer: /CN=935DD14314C92CCD3B1B65E68751DA3E87B1057C
Certificate serial: 04F3CA13A6656AF5D4E732080112C35B63D6FDA5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:54:28 +0000
Manifest this update: Tue 12 May 2026 18:49:28 +0000
Manifest next update: Wed 13 May 2026 18:56:28 +0000
Files and hashes: 1: 935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl (hash: Q5VdT2SU+CfYRgu093eS0lP82zyiQaoBbtqMUESzKcI=)
2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: kjEpWP2mRiJBPHjX3tFZhbKjrbBSMQGM2y+PNic1u8w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl
rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f3:ca:13:a6:65:6a:f5:d4:e7:32:08:01:12:c3:5b:63:d6:fd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935DD14314C92CCD3B1B65E68751DA3E87B1057C
Validity
Not Before: May 12 18:49:28 2026 GMT
Not After : May 13 18:56:28 2026 GMT
Subject: CN=D89F3D3631C67001D9DA9E1F2098FFBAFA2162FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:55:fd:34:91:09:72:cc:27:b6:57:f0:46:
d8:b8:e4:b6:dd:47:f1:20:04:57:13:5f:74:25:99:
87:d5:ee:1b:92:b7:d2:19:6f:0c:86:bc:2d:36:7c:
c0:e3:a5:5d:ff:7c:76:70:fb:a5:f4:e4:de:44:06:
35:06:2d:95:0b:65:63:70:b1:5f:3c:c9:1c:0a:b2:
b1:9e:26:68:4b:1a:4e:b0:3b:41:74:3e:f1:02:f6:
35:73:27:ec:d8:bb:70:c0:65:af:bc:3d:8a:73:b9:
e0:69:c7:85:07:3e:7a:87:5c:02:8e:24:5c:30:cc:
1a:f0:82:ae:cb:37:e4:52:5c:1c:03:db:ff:60:14:
a0:39:d4:46:3c:71:02:78:32:59:c8:34:8b:f2:40:
0c:27:ad:1b:4d:75:94:78:f2:4a:72:9d:6a:72:04:
20:44:1e:7e:85:ca:3c:ab:95:ca:37:60:c8:17:5d:
ab:7b:22:4a:8d:92:ec:fb:cd:1e:19:c9:71:8a:29:
14:59:38:29:44:b8:8f:12:7a:5c:e2:1a:d0:1f:be:
d6:28:4f:a2:8e:b4:f7:b7:59:02:11:97:1f:a6:c0:
77:b0:aa:a0:5d:6c:ff:ce:12:98:bc:f1:b0:db:9c:
aa:0f:15:a1:9a:48:bc:71:17:8c:27:92:42:4d:bf:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9F:3D:36:31:C6:70:01:D9:DA:9E:1F:20:98:FF:BA:FA:21:62:FA
X509v3 Authority Key Identifier:
keyid:93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bf:f5:d0:2c:fa:db:b0:8b:9e:b9:d5:0f:f9:df:07:e3:1c:
99:79:c4:cf:48:35:49:2e:09:c1:74:62:dd:2b:83:d3:86:02:
43:7d:98:aa:f3:74:7c:13:18:f2:40:dd:9e:32:dd:a6:dd:a7:
2c:19:ec:c4:53:73:26:e1:28:92:ce:22:3b:26:15:1e:ec:09:
31:57:ec:cc:71:b3:b3:3b:fc:fb:d9:86:32:5b:60:e9:8c:66:
8b:85:fb:19:29:af:3a:6f:ca:88:39:e9:e0:19:4d:54:14:8e:
0f:90:39:a6:7b:a3:e7:0f:96:c2:b7:32:5d:e8:e2:bc:26:27:
f8:5d:49:df:9d:52:e0:d8:d3:be:b1:aa:bb:d2:1b:38:1a:af:
60:b0:dd:ad:ad:cf:5d:e9:bb:20:1c:fc:47:d4:2f:ed:8e:fb:
59:be:0e:a6:92:6d:fc:63:4c:b5:d1:65:c2:69:83:cf:ab:a7:
bd:c9:36:eb:c7:f0:f3:60:3b:a8:37:18:81:a3:26:5b:cd:3c:
af:cf:65:4e:cc:1b:d2:5b:ff:ae:f7:69:87:52:59:dc:4a:b5:
37:b5:2e:19:10:4d:60:fb:18:dc:30:c9:61:1c:aa:17:cb:5e:
ff:7d:6f:d9:70:a1:93:28:30:fd:0f:4a:cc:08:6e:86:5f:e0:
2c:ee:5b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:53 2026 by rpki-client