
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft
File: 0FA563F934776139827AEC94F0EABC66549ABEA7.mft (raw, json)
Hash identifier: HvIZ0c+6KMgMlGhGJXgfPtuAl8HFkuVxTZ8BVqBuwRY=
Subject key identifier: DF:F9:44:6C:00:68:4A:69:CD:91:B0:BF:C8:78:D3:6C:09:C0:B3:C7
Authority key identifier: 0F:A5:63:F9:34:77:61:39:82:7A:EC:94:F0:EA:BC:66:54:9A:BE:A7
Certificate issuer: /CN=0FA563F934776139827AEC94F0EABC66549ABEA7
Certificate serial: 729F498CF6515E705EA753A292AF7FE2EB27F66F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 13:58:56 +0000
Manifest this update: Tue 12 May 2026 13:53:56 +0000
Manifest next update: Wed 13 May 2026 14:41:56 +0000
Files and hashes: 1: 0FA563F934776139827AEC94F0EABC66549ABEA7.crl (hash: cW49RcqwwsHtnA6KX6C0gs9ngOVwMiWNRk7iHet3tmI=)
2: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: hKgJQ4xI+aCZdi0ilafubxO/sGeJ6q34TucNQfy4ilQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.crl
rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:9f:49:8c:f6:51:5e:70:5e:a7:53:a2:92:af:7f:e2:eb:27:f6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FA563F934776139827AEC94F0EABC66549ABEA7
Validity
Not Before: May 12 13:53:56 2026 GMT
Not After : May 13 14:41:56 2026 GMT
Subject: CN=DFF9446C00684A69CD91B0BFC878D36C09C0B3C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:ba:75:f3:36:03:2e:2d:0e:cc:2f:46:6c:
e4:96:eb:60:f2:b7:36:49:a9:a0:84:cc:14:db:14:
ef:f3:a5:a9:3f:a8:f4:91:28:78:c3:14:91:3a:d8:
73:57:9d:e1:25:f4:0c:74:29:4b:2e:e6:3e:81:2c:
bf:1d:9b:9a:c3:5e:b5:3c:e8:bf:02:65:3f:bd:90:
83:ca:ba:bc:c3:c6:02:49:f0:ae:dd:cf:65:d0:11:
85:94:fa:c3:d2:2c:0b:de:7e:46:04:c5:7e:4d:06:
23:d4:60:5e:b9:90:69:7d:1a:1e:39:f0:0f:60:71:
db:9f:e7:40:5d:43:f0:b4:08:f1:e6:63:ca:99:b4:
e8:aa:fb:f8:db:14:e4:e8:bd:11:35:41:ee:38:aa:
b9:7f:b8:94:4c:d7:d6:8b:61:f3:eb:d7:dc:ba:bb:
d1:14:6c:5c:06:da:62:cc:ca:ab:40:5f:89:8a:9d:
1d:cd:fc:1d:f1:a8:92:15:53:5b:9f:5a:99:1a:da:
7b:8d:6b:42:98:0b:5f:31:b7:d5:ad:ec:d2:d5:c3:
5e:b9:aa:06:88:38:55:d5:de:01:10:10:b0:55:60:
fc:a2:b1:d9:d4:5e:51:a4:a4:8c:3d:4c:4d:c0:59:
95:9f:66:86:3e:f9:e0:d5:76:9a:02:7a:7c:84:47:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F9:44:6C:00:68:4A:69:CD:91:B0:BF:C8:78:D3:6C:09:C0:B3:C7
X509v3 Authority Key Identifier:
keyid:0F:A5:63:F9:34:77:61:39:82:7A:EC:94:F0:EA:BC:66:54:9A:BE:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e6:d8:34:b1:52:cf:f2:e7:e8:16:ff:85:7a:c8:fb:95:8c:
b2:c7:78:94:4e:19:be:97:53:da:4f:1b:fc:9e:65:e1:d8:e5:
23:72:48:e9:d2:9e:5a:1a:70:f9:9c:c5:05:f1:be:8a:97:8c:
45:fa:ad:fb:0d:e1:27:6e:84:f2:53:8b:8e:35:bb:2d:4c:05:
27:b4:a3:f8:95:43:dc:85:48:c6:2b:4b:2e:9d:40:3f:24:57:
b6:69:aa:db:ea:3b:57:9b:cd:21:e3:a2:ec:22:1a:9a:78:66:
b7:2e:d4:72:2e:4e:09:c1:ba:fb:16:d8:da:e8:18:86:c4:6b:
29:e4:5c:a9:c0:50:48:76:83:9d:62:e2:d5:85:e9:38:52:69:
03:f6:ba:24:49:79:e1:c2:3e:6c:82:e1:b8:14:fe:fe:83:3f:
8b:bd:88:1f:e0:57:2a:37:c0:e2:4b:99:64:27:ae:ef:9c:06:
cb:1d:bf:d7:7f:63:33:df:ab:fe:70:6b:16:d0:50:7c:c8:d5:
c7:0b:0c:f9:4c:c8:3a:d9:12:0a:eb:68:16:60:ca:fd:dc:a0:
06:89:74:a1:0b:75:97:3f:84:12:85:b0:16:06:f2:8f:15:6f:
e7:db:8c:1c:6e:6f:e9:14:51:94:56:d8:67:72:c8:60:2c:fc:
15:e5:4a:c4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcp9JjPZRXnBep1Oikq9/4usn9m8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZBNTYzRjkzNDc3NjEzOTgyN0FFQzk0RjBFQUJDNjY1
NDlBQkVBNzAeFw0yNjA1MTIxMzUzNTZaFw0yNjA1MTMxNDQxNTZaMDMxMTAvBgNV
BAMTKERGRjk0NDZDMDA2ODRBNjlDRDkxQjBCRkM4NzhEMzZDMDlDMEIzQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC487p18zYDLi0OzC9GbOSW62Dy
tzZJqaCEzBTbFO/zpak/qPSRKHjDFJE62HNXneEl9Ax0KUsu5j6BLL8dm5rDXrU8
6L8CZT+9kIPKurzDxgJJ8K7dz2XQEYWU+sPSLAvefkYExX5NBiPUYF65kGl9Gh45
8A9gcduf50BdQ/C0CPHmY8qZtOiq+/jbFOTovRE1Qe44qrl/uJRM19aLYfPr19y6
u9EUbFwG2mLMyqtAX4mKnR3N/B3xqJIVU1ufWpka2nuNa0KYC18xt9Wt7NLVw165
qgaIOFXV3gEQELBVYPyisdnUXlGkpIw9TE3AWZWfZoY++eDVdpoCenyERw6NAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3/lEbABoSmnNkbC/yHjTbAnAs8cwHwYDVR0j
BBgwFoAUD6Vj+TR3YTmCeuyU8Oq8ZlSavqcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWJiNDNlYzgtZjU4Mi00MDI1LThmMzYtM2NlYTUzOWQwYjA5LzAvMEZBNTYzRjkz
NDc3NjEzOTgyN0FFQzk0RjBFQUJDNjY1NDlBQkVBNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wRkE1NjNGOTM0Nzc2MTM5ODI3QUVDOTRGMEVBQkM2NjU0OUFC
RUE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm
MzYtM2NlYTUzOWQwYjA5LzAvMEZBNTYzRjkzNDc3NjEzOTgyN0FFQzk0RjBFQUJD
NjY1NDlBQkVBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD3m2DSxUs/y5+gW/4V6yPuVjLLHeJROGb6X
U9pPG/yeZeHY5SNySOnSnloacPmcxQXxvoqXjEX6rfsN4SduhPJTi441uy1MBSe0
o/iVQ9yFSMYrSy6dQD8kV7ZpqtvqO1ebzSHjouwiGpp4Zrcu1HIuTgnBuvsW2Nro
GIbEaynkXKnAUEh2g51i4tWF6ThSaQP2uiRJeeHCPmyC4bgU/v6DP4u9iB/gVyo3
wOJLmWQnru+cBssdv9d/YzPfq/5waxbQUHzI1ccLDPlMyDrZEgrraBZgyv3coAaJ
dKELdZc/hBKFsBYG8o8Vb+fbjBxub+kUUZRW2GdyyGAs/BXlSsQ=
-----END CERTIFICATE-----
Generated at Wed May 13 09:11:54 2026 by rpki-client