
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft
File: CDAD8AE64850B7306026A1B46FF84D08284104C9.mft (raw, json)
Hash identifier: V1H2jIUZz0gF/BCFcSvTZ3llVcGWsGBKgYLmYXRG6g8=
Subject key identifier: C2:7B:B6:42:CE:60:8B:9E:87:85:89:AA:FE:08:03:14:69:45:CC:18
Authority key identifier: CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9
Certificate issuer: /CN=CDAD8AE64850B7306026A1B46FF84D08284104C9
Certificate serial: 517475B640090661D5619DBE4A37F03FC843F9F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:44:19 +0000
Manifest this update: Tue 12 May 2026 18:39:19 +0000
Manifest next update: Wed 13 May 2026 22:33:19 +0000
Files and hashes: 1: CDAD8AE64850B7306026A1B46FF84D08284104C9.crl (hash: ef25OiYDOeZPwkdH1ObH1ZPZAwi/TA+HG+cP4a5tMKc=)
2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: Rie1EWmYCW5AS7gherk1HJqeE5vY8I4Pjrh2HLZJQzM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl
rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:74:75:b6:40:09:06:61:d5:61:9d:be:4a:37:f0:3f:c8:43:f9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDAD8AE64850B7306026A1B46FF84D08284104C9
Validity
Not Before: May 12 18:39:19 2026 GMT
Not After : May 13 22:33:19 2026 GMT
Subject: CN=C27BB642CE608B9E878589AAFE0803146945CC18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b8:18:53:e2:9b:65:32:80:fc:78:f8:ea:94:
cb:68:8c:17:24:a5:7d:c5:1b:6a:bd:c6:39:de:65:
af:2d:d7:53:05:a1:09:db:79:d0:cb:ab:53:13:66:
08:62:dc:56:73:ee:cc:c1:2d:8e:9a:9d:7f:7a:82:
35:b4:8d:86:dc:d4:89:d2:6a:fe:9a:ec:87:69:ee:
2f:38:e9:09:ef:4b:4a:c1:24:36:cd:56:51:a4:ba:
b7:c4:ec:43:b0:74:c8:16:91:bd:6a:be:6d:22:ef:
cc:cd:a4:b3:1b:3f:4a:d2:a3:dd:03:d8:2e:ab:0e:
15:60:a5:7c:7c:3a:b4:3e:a7:fc:c8:49:9f:70:79:
db:5a:0e:3c:d6:e7:a2:64:71:c1:c8:da:02:b8:33:
33:19:cb:48:95:e4:1d:d2:05:0e:76:65:8d:9f:00:
af:21:ef:b0:c0:c0:2d:24:b5:c1:4b:22:bd:63:bb:
6a:4c:bc:04:c1:a9:18:23:17:ae:df:1e:99:80:04:
af:d1:7d:e6:24:5b:82:3b:0b:37:64:a1:59:f1:53:
c9:a4:2b:8b:37:78:aa:01:3f:e2:ef:b4:f0:ac:7a:
94:fe:f0:1f:f5:92:4b:ad:b3:8b:bd:2d:2c:e5:c6:
54:5a:85:d9:de:3e:67:61:7b:2d:54:93:c2:e4:46:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:B6:42:CE:60:8B:9E:87:85:89:AA:FE:08:03:14:69:45:CC:18
X509v3 Authority Key Identifier:
keyid:CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6a:8b:16:79:e9:0d:4f:55:5a:8f:b0:40:08:cd:25:46:6e:
e4:33:3c:96:f4:d7:c6:fe:53:32:71:d3:1b:7d:eb:7f:69:5e:
72:de:89:1d:6a:fb:db:57:df:df:50:db:eb:1d:68:fe:f6:41:
db:bf:76:8b:9b:38:60:5d:c0:06:ac:a1:2d:79:bb:45:a4:f8:
5b:f6:2e:5e:aa:43:78:06:5d:f0:44:77:c9:3a:ff:c8:b9:f2:
85:11:f6:18:c5:98:8b:d9:f6:30:29:c2:27:2b:c7:34:59:b4:
82:dd:45:82:d1:3b:14:f8:3e:5a:7a:80:18:2b:fb:7d:b8:a2:
78:85:52:f3:f2:a8:06:65:d8:b7:54:54:64:b3:4a:ec:33:b1:
e6:c3:97:86:64:9d:5f:ee:5d:db:2b:20:10:df:79:d2:6e:0e:
41:94:07:81:55:92:75:2b:00:a0:e1:ed:46:1a:32:f2:a8:2d:
d5:48:35:fe:de:e6:0e:79:03:11:b1:7e:0d:e3:92:92:72:38:
4c:f4:42:54:4a:14:99:89:06:ee:0a:66:a2:d3:78:08:f9:c0:
47:f6:90:79:4e:ac:1e:c2:c6:13:43:5f:97:81:a5:2f:0e:ba:
21:c9:a8:dc:ba:40:62:48:12:5b:44:21:a1:3e:76:6f:4a:1c:
67:ab:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:42 2026 by rpki-client