
$ rpki-client -vvf rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
File: AD19D226489003F092B69D57F2AEE4849BC2F21F.mft (raw, json)
Hash identifier: GG9Nji8VqJ4/apRngvLsBYpqFDfmW9oCswLTMn2NBs0=
Subject key identifier: 47:C6:AB:8A:0E:D9:3A:FB:01:79:F5:F6:9A:01:86:6E:35:53:B4:50
Authority key identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F
Certificate issuer: /CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
Certificate serial: 4795ADE9CC66C7A9565F24AD186CA891465DAE30
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 14:59:37 +0000
Manifest this update: Tue 12 May 2026 14:54:37 +0000
Manifest next update: Wed 13 May 2026 17:30:37 +0000
Files and hashes: 1: AD19D226489003F092B69D57F2AEE4849BC2F21F.crl (hash: bG44R2i1GrBwXCzqTbjf5riVPmYosD339lt0mr/KtG4=)
2: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: tfGxZeg6G3RP30OjCg19bX3KZubf0o0VM47f34HE4/Q=)
3: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: YkRgmQFG0awSR2V4EqFn99OnF2XHm125JZP/mEf4NVk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl
rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:95:ad:e9:cc:66:c7:a9:56:5f:24:ad:18:6c:a8:91:46:5d:ae:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
Validity
Not Before: May 12 14:54:37 2026 GMT
Not After : May 13 17:30:37 2026 GMT
Subject: CN=47C6AB8A0ED93AFB0179F5F69A01866E3553B450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:5a:4c:68:ca:06:62:74:93:b7:c1:5f:f0:
ca:3a:44:b1:08:c7:a8:20:f7:f2:3c:78:8f:ed:1a:
2a:13:4c:e9:cc:bb:e3:6f:79:18:6e:a0:f7:e6:0a:
de:a2:4e:76:ec:91:0a:f3:58:02:83:34:87:e6:b9:
d1:09:60:6a:81:1b:be:d9:0a:7c:1a:bd:f3:d5:fd:
db:1f:96:f5:fe:ed:13:e6:97:fb:c4:34:2e:62:11:
fa:5f:ed:de:8d:b9:83:1e:f1:38:ca:e4:13:df:16:
b9:fb:82:b8:2d:a1:43:17:e9:45:fc:bd:da:80:81:
ba:73:68:9f:a8:fb:bb:10:c5:75:c4:66:65:91:f4:
f9:01:c2:8a:fe:94:9c:c6:bb:3d:88:5b:71:58:b8:
88:82:62:85:68:23:56:23:df:a7:87:3b:3b:51:db:
9e:10:f8:14:fb:0a:9b:f9:1e:ca:42:01:e7:b9:b1:
5a:b3:3a:b8:e5:57:b0:f6:a5:89:dc:6c:47:6f:07:
2c:44:f7:b0:44:a9:2c:07:81:03:ff:a1:8b:3e:c2:
41:d0:4b:0d:a0:e5:55:32:56:6b:01:9f:4d:0a:e3:
0f:d3:dc:f2:6d:0c:50:55:62:13:f2:b8:d2:34:2a:
7e:91:b9:8d:d5:39:2d:e2:55:dc:01:03:36:bd:a9:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C6:AB:8A:0E:D9:3A:FB:01:79:F5:F6:9A:01:86:6E:35:53:B4:50
X509v3 Authority Key Identifier:
keyid:AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:31:de:86:20:16:cc:28:c3:6f:62:5c:42:5d:fd:f8:d7:dd:
02:61:6b:37:80:8c:5b:f8:62:3f:df:a0:ba:f6:84:85:41:2e:
43:45:ef:66:db:2a:19:b8:c2:9c:c8:e7:29:26:f3:ec:b3:02:
f3:8d:95:29:75:fa:11:0f:4d:99:34:8e:45:00:25:85:20:39:
5f:3c:fb:a2:e7:fd:cd:a0:af:d5:11:be:17:f0:21:c4:a8:51:
13:f1:be:41:c8:45:b4:c2:6f:b9:50:19:18:04:15:d6:8f:61:
e8:9d:cc:e7:4a:52:49:60:76:d2:79:64:d6:f8:5e:1c:43:b1:
bc:6e:24:9f:b7:a4:51:29:ae:54:68:0c:59:39:b9:d7:7e:e1:
61:b8:a5:63:fb:eb:a5:52:47:e6:7e:b5:65:82:c8:27:09:01:
da:ad:f8:89:27:1f:f6:a7:f6:d7:a0:c2:42:32:12:23:4a:fb:
e8:12:1a:e6:8c:19:3f:a9:0a:9c:e2:96:44:a7:57:34:a1:00:
7c:de:2c:19:14:71:a6:47:7b:05:30:c7:c2:21:6a:9d:b1:e0:
1b:35:e5:22:b0:89:a0:5b:64:8c:1c:fc:93:dc:72:b3:0a:3a:
be:d0:b7:44:c1:58:d1:36:ca:f3:f4:45:b3:c0:02:a8:ec:ad:
73:62:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:59 2026 by rpki-client