
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
File: 94036675301DBECEA598F27C69DCB2391E3C2886.mft (raw, json)
Hash identifier: qZfQeqaOIDbyXH7H3Ds26G2Iylk/PiBJnNOvX73Pa6E=
Subject key identifier: 17:DD:AC:22:A2:74:BC:E3:AA:00:C1:3F:B3:5E:6B:21:FD:0F:F0:42
Authority key identifier: 94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
Certificate issuer: /CN=94036675301DBECEA598F27C69DCB2391E3C2886
Certificate serial: 5FE25B941677CE60E748C984C9DA3949A8A59414
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 12:12:38 +0000
Manifest this update: Tue 12 May 2026 12:07:38 +0000
Manifest next update: Wed 13 May 2026 15:46:38 +0000
Files and hashes: 1: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: /165UFjNpwWW+EZFcjl+71+ujJPspyfJC04aoRjZsKo=)
2: 94036675301DBECEA598F27C69DCB2391E3C2886.crl (hash: bospYs70l1SOXaUQ8CU5XEAFzdWkk++uJgaBH17rAHw=)
3: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: 63RFUP20PHT95cd0UVwx1h2yICgt0oulTqYaR5p2Hfk=)
4: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: Ll1O0jrLBRiezZCuRZRt8vBzf1LiXokuLQkKXN01bA8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e2:5b:94:16:77:ce:60:e7:48:c9:84:c9:da:39:49:a8:a5:94:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94036675301DBECEA598F27C69DCB2391E3C2886
Validity
Not Before: May 12 12:07:38 2026 GMT
Not After : May 13 15:46:38 2026 GMT
Subject: CN=17DDAC22A274BCE3AA00C13FB35E6B21FD0FF042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:8e:27:80:b1:3c:5c:9a:6e:50:03:1c:87:
03:22:c9:52:53:39:e8:63:22:e5:c5:ac:03:4e:a6:
f3:46:6c:93:cd:09:60:2c:94:b1:51:9b:de:66:21:
d1:10:7a:07:82:e3:d1:93:95:12:49:6a:c4:42:30:
4c:26:f4:9e:d5:2b:6f:8e:b0:8c:96:ba:ba:ec:fa:
ff:b5:06:45:66:f1:f6:a8:cf:9a:e3:2d:9a:fe:7b:
92:34:61:12:59:9a:03:29:fa:64:0b:f4:47:f6:1e:
74:e8:c6:e0:4d:10:6c:88:27:e8:e0:eb:c5:27:4e:
90:fa:42:29:58:1e:51:29:2e:e3:5b:2c:eb:a9:d9:
6e:ea:10:78:33:2e:f7:31:37:8a:06:5b:00:00:3c:
15:7f:a4:a5:2e:e8:2c:75:07:f7:3d:f3:c4:cd:23:
56:6d:24:af:29:a8:71:ba:20:12:3e:5c:21:c7:dc:
7e:ad:26:6c:88:6a:c2:13:8e:be:96:16:08:d7:1f:
4e:20:ec:b7:42:b0:d7:aa:32:22:8d:f9:84:d4:e0:
e5:a0:90:29:d4:e9:73:eb:4c:3b:83:36:62:fd:0b:
76:4e:7b:8c:4d:a5:8c:e5:ed:74:56:13:3a:15:43:
6e:d9:5a:04:dc:ed:8f:39:42:83:c7:80:2d:93:18:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DD:AC:22:A2:74:BC:E3:AA:00:C1:3F:B3:5E:6B:21:FD:0F:F0:42
X509v3 Authority Key Identifier:
keyid:94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2a:2a:db:1c:9c:5c:3c:29:6d:28:91:e0:9e:0f:dc:ed:4c:
23:c5:89:25:a1:82:a6:27:d9:46:be:42:de:7a:63:ce:a3:39:
0a:f8:ef:3d:96:58:5c:6a:3d:d7:31:c7:59:65:50:ad:d0:90:
ea:21:e1:d9:e9:f5:93:f9:f3:4d:83:98:bd:4d:c1:57:ce:7c:
a1:0c:46:61:9b:ef:f6:83:ef:82:19:83:5d:92:0d:ca:e2:41:
ce:0d:7e:9c:e6:51:3a:9c:53:09:75:19:1e:12:3c:43:ab:84:
c5:86:ea:05:70:ee:fa:77:89:19:b2:aa:88:fe:4e:c2:0b:2d:
35:87:bf:9a:63:a7:c3:8e:10:bb:89:a6:b7:36:56:64:05:1f:
71:b4:7f:a4:bb:0d:4f:2b:cd:f5:26:ea:ea:d0:bf:68:73:34:
c0:30:82:e0:f5:e5:90:f1:d4:4a:2e:fb:4f:b2:b1:a7:0b:8c:
09:aa:b8:1b:bd:6f:e8:e5:20:1c:8d:3a:b2:2e:90:f9:78:5a:
15:5b:83:b2:70:d2:71:2a:ab:da:05:ac:80:6d:79:ce:cd:ae:
7e:dc:8a:1f:d5:4e:60:f3:40:f1:ec:8b:d8:76:38:67:f1:e6:
ff:a5:69:be:da:ff:bd:dd:d2:c1:40:76:92:48:3e:07:7f:ec:
f3:27:d8:a2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUX+JblBZ3zmDnSMmEydo5SaillBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQwMzY2NzUzMDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkx
RTNDMjg4NjAeFw0yNjA1MTIxMjA3MzhaFw0yNjA1MTMxNTQ2MzhaMDMxMTAvBgNV
BAMTKDE3RERBQzIyQTI3NEJDRTNBQTAwQzEzRkIzNUU2QjIxRkQwRkYwNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJo4ngLE8XJpuUAMchwMiyVJT
OehjIuXFrANOpvNGbJPNCWAslLFRm95mIdEQegeC49GTlRJJasRCMEwm9J7VK2+O
sIyWurrs+v+1BkVm8faoz5rjLZr+e5I0YRJZmgMp+mQL9Ef2HnToxuBNEGyIJ+jg
68UnTpD6QilYHlEpLuNbLOup2W7qEHgzLvcxN4oGWwAAPBV/pKUu6Cx1B/c988TN
I1ZtJK8pqHG6IBI+XCHH3H6tJmyIasITjr6WFgjXH04g7LdCsNeqMiKN+YTU4OWg
kCnU6XPrTDuDNmL9C3ZOe4xNpYzl7XRWEzoVQ27ZWgTc7Y85QoPHgC2TGPcZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUF92sIqJ0vOOqAME/s15rIf0P8EIwHwYDVR0j
BBgwFoAUlANmdTAdvs6lmPJ8adyyOR48KIYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTE3NTk4ZTQtMjA2NC00ZWNiLTk4ZjYtYjI1OWE3NDk5NmExLzAvOTQwMzY2NzUz
MDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkxRTNDMjg4Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NDAzNjY3NTMwMURCRUNFQTU5OEYyN0M2OURDQjIzOTFFM0My
ODg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4
ZjYtYjI1OWE3NDk5NmExLzAvOTQwMzY2NzUzMDFEQkVDRUE1OThGMjdDNjlEQ0Iy
MzkxRTNDMjg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADwqKtscnFw8KW0okeCeD9ztTCPFiSWhgqYn
2Ua+Qt56Y86jOQr47z2WWFxqPdcxx1llUK3QkOoh4dnp9ZP5802DmL1NwVfOfKEM
RmGb7/aD74IZg12SDcriQc4NfpzmUTqcUwl1GR4SPEOrhMWG6gVw7vp3iRmyqoj+
TsILLTWHv5pjp8OOELuJprc2VmQFH3G0f6S7DU8rzfUm6urQv2hzNMAwguD15ZDx
1Eou+0+ysacLjAmquBu9b+jlIByNOrIukPl4WhVbg7Jw0nEqq9oFrIBtec7Nrn7c
ih/VTmDzQPHsi9h2OGfx5v+lab7a/73d0sFAdpJIPgd/7PMn2KI=
-----END CERTIFICATE-----
Generated at Wed May 13 00:13:51 2026 by rpki-client