
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft
File: 82619591421B67CACDA4E6A0B166011B7E6D1D21.mft (raw, json)
Hash identifier: DO9OVCgKPYzjMQRsbpHLkbl32GkCrD0Xlqj0Cpzl9lU=
Subject key identifier: 20:42:78:62:12:AA:E9:09:E8:CE:3B:19:BE:ED:08:FB:2E:3D:F0:2E
Authority key identifier: 82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21
Certificate issuer: /CN=82619591421B67CACDA4E6A0B166011B7E6D1D21
Certificate serial: 41DD74F77ABAE56EC67F0890755F1C8E1421FE0A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 05:36:03 +0000
Manifest this update: Tue 12 May 2026 05:31:03 +0000
Manifest next update: Wed 13 May 2026 08:10:03 +0000
Files and hashes: 1: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: g/f5oiN6iiOkoRtweFIMN236eVeurXuFpLSe3yBaq5U=)
2: 82619591421B67CACDA4E6A0B166011B7E6D1D21.crl (hash: gMY5VhDzl8iV6oMIVJ+aWKqPV51Jv+sXDWL9NpdyufE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl
rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:dd:74:f7:7a:ba:e5:6e:c6:7f:08:90:75:5f:1c:8e:14:21:fe:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82619591421B67CACDA4E6A0B166011B7E6D1D21
Validity
Not Before: May 12 05:31:03 2026 GMT
Not After : May 13 08:10:03 2026 GMT
Subject: CN=2042786212AAE909E8CE3B19BEED08FB2E3DF02E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:51:ee:32:8b:6a:ec:09:b0:e1:d3:06:75:
a7:0a:80:28:ee:d4:95:2b:5f:3a:2c:38:05:2c:2d:
df:e3:dc:7c:d4:45:b7:e6:47:89:83:ee:45:b5:c1:
76:8b:0b:31:be:9d:29:73:f0:a5:8d:d1:3e:aa:72:
9f:94:e0:2b:81:00:32:94:01:dd:6b:e9:d1:2c:32:
f4:6c:07:3e:27:54:05:b6:34:49:97:f7:c2:08:7a:
8f:97:fc:8f:9e:01:59:70:8d:69:09:9f:dc:f2:1a:
96:57:63:9e:d5:0c:89:5a:56:5a:d2:2d:4a:cf:48:
d9:7a:1a:08:95:86:5e:63:e9:79:37:19:12:3a:f4:
90:af:da:e7:de:09:2f:a1:1f:62:92:08:b8:9b:50:
b0:78:27:d5:d1:a1:be:9c:4a:8c:32:e3:da:ae:08:
a0:a6:72:26:95:7a:14:3d:9a:b4:f8:f7:96:59:99:
a7:e4:14:67:1e:71:9e:63:9d:ac:c5:19:d5:7e:45:
b7:82:cb:51:62:1e:96:bd:c9:3a:65:93:cc:63:ee:
bb:a6:54:d9:09:ef:83:cd:94:66:62:ae:66:10:e9:
0e:75:06:2b:d1:f9:1d:10:a1:c2:5c:96:c6:b8:f3:
8a:c2:d5:4d:24:b1:2e:45:6f:60:4f:fe:ed:74:8d:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:42:78:62:12:AA:E9:09:E8:CE:3B:19:BE:ED:08:FB:2E:3D:F0:2E
X509v3 Authority Key Identifier:
keyid:82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ce:a5:b3:7f:fe:29:12:e0:65:5c:d0:66:47:0f:b6:91:c1:
05:14:e5:59:9b:e8:bf:b2:15:de:be:fc:0c:35:03:7b:88:1e:
44:4f:f0:32:b6:d8:d3:89:38:6d:06:a9:29:19:25:34:3a:42:
d9:0c:e5:8a:80:80:bb:07:98:a0:5a:b0:3f:b8:0d:33:44:ec:
ea:7a:bc:f2:e8:ca:8c:66:6b:44:59:3f:90:f1:71:62:18:ae:
39:68:29:dc:9b:ce:da:af:a3:ff:ff:6f:c6:92:21:28:32:68:
82:f5:0f:cb:9e:99:10:7f:94:da:00:d8:e4:45:6f:53:4a:d0:
59:50:7c:2e:4f:f9:51:6b:a6:d9:17:24:63:ba:a1:6c:f1:10:
22:2f:a7:99:5a:fa:de:36:3d:e0:dd:52:c9:42:ac:c0:c9:ef:
87:34:15:78:2a:dc:6a:70:10:ef:a0:7e:ea:0c:f3:c4:5a:0e:
9c:36:c9:07:8e:39:7a:41:82:02:3a:af:10:84:1c:d5:fb:9e:
41:b4:12:b2:99:1c:cb:6d:25:8c:8e:8b:c6:c9:57:86:0c:1e:
5e:f4:0d:fc:24:6f:0e:3e:ed:ab:e8:7f:ac:2f:7c:54:1a:38:
42:44:f0:3d:7a:f7:24:2f:31:a1:ce:7c:ef:73:47:f2:11:90:
43:78:32:cf
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQd1093q65W7GfwiQdV8cjhQh/gowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI2MTk1OTE0MjFCNjdDQUNEQTRFNkEwQjE2NjAxMUI3
RTZEMUQyMTAeFw0yNjA1MTIwNTMxMDNaFw0yNjA1MTMwODEwMDNaMDMxMTAvBgNV
BAMTKDIwNDI3ODYyMTJBQUU5MDlFOENFM0IxOUJFRUQwOEZCMkUzREYwMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxlHuMotq7Amw4dMGdacKgCju
1JUrXzosOAUsLd/j3HzURbfmR4mD7kW1wXaLCzG+nSlz8KWN0T6qcp+U4CuBADKU
Ad1r6dEsMvRsBz4nVAW2NEmX98IIeo+X/I+eAVlwjWkJn9zyGpZXY57VDIlaVlrS
LUrPSNl6GgiVhl5j6Xk3GRI69JCv2ufeCS+hH2KSCLibULB4J9XRob6cSowy49qu
CKCmciaVehQ9mrT495ZZmafkFGcecZ5jnazFGdV+RbeCy1FiHpa9yTplk8xj7rum
VNkJ74PNlGZirmYQ6Q51BivR+R0QocJclsa484rC1U0ksS5Fb2BP/u10jdaFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIEJ4YhKq6QnozjsZvu0I+y498C4wHwYDVR0j
BBgwFoAUgmGVkUIbZ8rNpOagsWYBG35tHSEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTBmNzhiZDQtYzE5Yi00ZDQwLWFhNTQtZWQ4ZDdiYzc3MmNhLzAvODI2MTk1OTE0
MjFCNjdDQUNEQTRFNkEwQjE2NjAxMUI3RTZEMUQyMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC84MjYxOTU5MTQyMUI2N0NBQ0RBNEU2QTBCMTY2MDExQjdFNkQx
RDIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh
NTQtZWQ4ZDdiYzc3MmNhLzAvODI2MTk1OTE0MjFCNjdDQUNEQTRFNkEwQjE2NjAx
MUI3RTZEMUQyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHrOpbN//ikS4GVc0GZHD7aRwQUU5Vmb6L+y
Fd6+/Aw1A3uIHkRP8DK22NOJOG0GqSkZJTQ6QtkM5YqAgLsHmKBasD+4DTNE7Op6
vPLoyoxma0RZP5DxcWIYrjloKdybztqvo///b8aSISgyaIL1D8uemRB/lNoA2ORF
b1NK0FlQfC5P+VFrptkXJGO6oWzxECIvp5la+t42PeDdUslCrMDJ74c0FXgq3Gpw
EO+gfuoM88RaDpw2yQeOOXpBggI6rxCEHNX7nkG0ErKZHMttJYyOi8bJV4YMHl70
Dfwkbw4+7avof6wvfFQaOEJE8D169yQvMaHOfO9zR/IRkEN4Ms8=
-----END CERTIFICATE-----
Generated at Wed May 13 00:45:14 2026 by rpki-client