
$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
File: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft (raw, json)
Hash identifier: uuT7/njfxyKvfNdAIZCxcuGzmc/bzQCcksT4GQ+jil8=
Subject key identifier: D9:D0:AC:2C:F5:44:26:C2:88:9F:F8:E9:D2:52:65:7E:52:49:8C:8D
Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
Certificate issuer: /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Certificate serial: 020FDA15B3DC5721385106F9CE58115B46EBD6AC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:10:44 +0000
Manifest this update: Tue 12 May 2026 16:05:44 +0000
Manifest next update: Wed 13 May 2026 16:23:44 +0000
Files and hashes: 1: 34332e3234332e3138342e302f32322d3232203d3e203633383237.roa (hash: MAEO7ACMQfPreayi5zBOy6AnAEF+RmZdQiFdMvjwjTI=)
2: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl (hash: x83BoEK2rLlop1QuRe/vHoYnlPlaacutCR6EFoWiUJY=)
3: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: NtkyFz71abqYBOulA/yf0usZVvUpaEttpy+f3u3kpp8=)
4: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: RlgIs0QjanrifNmC6pZ/6muj/iE2ejRnuLFDY7kN47g=)
5: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: jBX/qKx/JGa1Du2q2fgwV/fWVjEIgXCKAL9/GZt06jk=)
6: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: Yobd92nJofxIMDnwcBhGJ8U1ARrNN8Txd0D+kOpJodU=)
7: 34332e3234332e3138362e302f32332d3233203d3e203633383237.roa (hash: qqj+W0YE7lPcQQyjA0h+/ikJ5uDXNaW6laVzLp1Qk3I=)
8: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: hujlKc3DzwZfu+/QrUX39XVrQUFGamfbziw+u/7dNJ0=)
9: 3130332e33392e31342e302f32332d3233203d3e203633383237.roa (hash: Lahi4UMwkr7lfFz+tMIIfdkh1kxRlOqmv3Bjync9vmg=)
10: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: L1mfkBCHBmcBCuB53aap/zrreHda+IVKN915WxYStVY=)
11: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: CH+q+cxW04syGQTs2qRuGVzpDs6qixBBw3uVzFWNK2g=)
12: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: 4Q9iFO3TjE/l3D1QG4paADwmfWvHm0qtB66UILaf8Ho=)
13: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: fBaN9jIwXMILmSYsIQ3Ue7JGtw7WhLW8vbb21prGNGk=)
14: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: Z/jdDipYuv3lK5eimMJ72Z70XTynWpBlz182XUeNc+E=)
15: 3130332e33392e31322e302f32322d3232203d3e203633383237.roa (hash: 76gleer34esIgeXzP55Qltcq6KQymYiw2jWBaYJM1Rs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0f:da:15:b3:dc:57:21:38:51:06:f9:ce:58:11:5b:46:eb:d6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Validity
Not Before: May 12 16:05:44 2026 GMT
Not After : May 13 16:23:44 2026 GMT
Subject: CN=D9D0AC2CF54426C2889FF8E9D252657E52498C8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:5d:86:e9:a4:74:d2:ff:e5:3a:22:3b:b7:
41:6c:9e:7b:7e:73:c0:ba:e1:90:7d:b7:82:ed:56:
00:1e:d5:3a:28:47:e7:ee:fa:81:40:86:84:64:33:
61:a5:ab:27:03:00:84:03:c3:f3:7e:86:f7:ec:bf:
4a:02:1f:3f:60:35:b5:f4:a4:c3:c0:43:9b:4d:33:
10:d9:20:06:35:7e:a3:27:bf:38:a2:9b:02:93:da:
2e:94:0f:f7:35:59:03:e9:1f:38:08:5d:9b:0c:7b:
f2:09:2e:ef:62:25:16:28:e8:08:65:37:2f:53:df:
12:d3:88:85:b3:2f:5b:0b:0f:50:7d:7a:51:88:e2:
d6:4d:44:97:ae:58:b6:e1:0b:a8:85:8b:d0:51:c1:
e0:24:a6:6e:46:db:ca:4f:7c:9e:35:e6:8e:c4:87:
9c:c5:07:82:bc:a9:1b:02:30:a8:93:9f:44:fc:1f:
5c:f9:16:88:0e:8e:97:c4:d2:91:7f:e3:0a:47:31:
5a:df:0d:55:df:e5:e3:76:69:6f:e9:0b:67:63:26:
8d:5d:9f:38:57:0e:c4:95:70:a4:87:02:6c:83:d3:
c6:d7:28:c2:a4:df:9c:62:8f:57:c2:58:16:3b:9e:
fa:84:c6:2f:c4:97:c7:13:80:16:0f:f0:6b:8b:6b:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D0:AC:2C:F5:44:26:C2:88:9F:F8:E9:D2:52:65:7E:52:49:8C:8D
X509v3 Authority Key Identifier:
keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:67:a1:94:e2:51:9d:3a:d7:0c:97:ed:46:2d:99:a7:02:1f:
bb:48:2f:67:a3:f4:f2:7b:76:62:61:4a:8a:55:4c:60:8e:45:
f3:a6:1c:b0:c2:ee:d7:a6:7c:1c:1c:ab:d2:a4:a4:50:6f:4e:
66:b8:0b:42:3d:5b:41:75:b3:ba:d9:d9:dd:19:c8:d3:06:b5:
16:f0:7f:81:b1:1c:70:24:2e:9c:6c:50:44:1b:c4:91:cd:63:
97:6a:33:3a:b7:76:ad:9d:14:52:e1:27:2d:62:27:81:6f:9a:
bb:f6:6c:53:a0:24:54:e7:09:3d:27:45:54:20:15:1a:5f:b4:
95:2c:f8:68:cf:06:af:ac:db:b9:b4:72:9d:72:27:0d:73:2d:
4d:6e:29:df:ec:5a:5a:8b:07:48:df:8d:c3:d4:e8:b9:e2:25:
23:bc:e6:07:fe:02:8e:e0:7c:a4:5f:37:1b:f0:24:1b:20:7b:
7b:89:f0:b5:ba:88:ae:86:e5:93:d8:23:21:26:2a:91:32:f1:
c9:f0:02:78:65:2a:12:bd:40:6f:a5:83:62:f2:ec:bf:f3:c8:
41:e2:2a:57:d0:2d:81:9d:a9:26:01:6d:83:d9:dd:bb:d5:bd:
d6:e4:44:d1:83:81:3f:6a:77:46:c3:33:5a:b5:31:34:1e:2f:
f8:42:d3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:23 2026 by rpki-client