
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
File: D54419983140D3CB73E625681538225CB12E5424.mft (raw, json)
Hash identifier: KqhGZh3C4jQqr7EoT3xDvDxK8pzcGgx9vTJ3ls9xkN0=
Subject key identifier: EE:73:3A:14:05:D1:BB:18:5C:05:BF:9A:5A:73:BC:59:16:2D:E7:3C
Authority key identifier: D5:44:19:98:31:40:D3:CB:73:E6:25:68:15:38:22:5C:B1:2E:54:24
Certificate issuer: /CN=D54419983140D3CB73E625681538225CB12E5424
Certificate serial: 23F6C3EDB7A82BE304A673B6E741F926AFD09E45
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 00:44:31 +0000
Manifest this update: Wed 13 May 2026 00:39:31 +0000
Manifest next update: Thu 14 May 2026 02:08:31 +0000
Files and hashes: 1: 3135372e32302e3130302e302f32342d3234203d3e20313532343235.roa (hash: SzOCWedu7Qhh9QrHie1gNK2ZtR2GDQm9yZncMipwLrI=)
2: D54419983140D3CB73E625681538225CB12E5424.crl (hash: qxgS1ONEeiRLINOJDjP+nP22juBRg3eBUuQia0pJKmg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.crl
rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f6:c3:ed:b7:a8:2b:e3:04:a6:73:b6:e7:41:f9:26:af:d0:9e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D54419983140D3CB73E625681538225CB12E5424
Validity
Not Before: May 13 00:39:31 2026 GMT
Not After : May 14 02:08:31 2026 GMT
Subject: CN=EE733A1405D1BB185C05BF9A5A73BC59162DE73C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:aa:43:30:d2:94:31:89:a0:ce:7d:2b:f6:
58:37:41:7b:48:18:03:17:51:99:a0:bd:b0:b7:81:
c3:c3:31:b2:fd:56:c2:90:02:02:2c:07:8b:5f:ef:
ec:b4:d1:aa:cf:ea:cf:a5:6b:d1:54:d9:d6:b9:23:
0a:80:8a:e5:45:70:fa:80:c6:e4:b6:ec:29:f1:99:
28:10:e3:94:53:07:aa:cf:06:31:35:9f:af:aa:5f:
2a:b9:97:f3:37:ec:23:3e:65:5b:72:f0:e3:77:92:
6a:0a:7d:27:1d:d7:73:82:cd:83:2d:fb:11:13:c9:
92:4d:40:a4:d8:c1:ea:61:81:d2:b7:e2:22:47:e7:
99:e3:e8:a3:1c:3d:68:9c:1f:d5:8b:62:54:b3:fa:
51:78:35:c1:7d:2c:19:94:b4:13:26:8b:c3:a6:57:
45:0e:ea:8a:9b:c4:a1:8c:57:f5:3f:df:09:83:4c:
5b:07:0c:cc:51:a2:d2:32:dc:3b:ab:e1:1d:b8:cb:
75:eb:75:c2:15:94:f5:18:59:d4:9f:78:b4:67:44:
17:f0:78:1d:d4:f0:7f:84:ad:19:08:27:e1:bf:e6:
4f:7a:d0:bc:7e:b6:87:3c:2f:ea:ec:2c:93:ec:16:
c1:8f:2d:76:ff:c0:c7:f6:2e:db:3b:1b:93:b4:1d:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:73:3A:14:05:D1:BB:18:5C:05:BF:9A:5A:73:BC:59:16:2D:E7:3C
X509v3 Authority Key Identifier:
keyid:D5:44:19:98:31:40:D3:CB:73:E6:25:68:15:38:22:5C:B1:2E:54:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e2:e4:53:e0:83:4f:43:4d:75:b0:de:a2:e2:bf:63:ff:12:
cc:f2:c2:a7:7d:83:c3:d1:b2:61:5d:fd:71:54:d0:ba:4b:70:
cb:27:e6:6a:3f:4b:fc:b0:8f:41:7b:da:e5:0f:c2:83:34:97:
f7:8e:53:80:e5:80:4e:40:44:26:16:90:5d:43:43:23:1c:15:
b8:a2:13:06:ac:c1:55:50:1a:32:78:77:64:4c:d3:e8:5c:03:
ff:c7:aa:cd:17:cf:f8:f5:42:70:7d:c1:17:c7:4d:88:94:0e:
c5:94:52:06:b0:35:09:16:a4:4a:fc:37:70:17:1f:dc:33:2d:
eb:a0:13:55:a2:c5:97:d5:27:e8:d3:bc:cf:44:63:58:43:6d:
67:03:e0:e0:d7:54:a8:ca:6c:38:f9:fb:5f:b8:44:ca:3c:ef:
0c:3b:3b:f5:04:71:49:b5:1d:f7:7c:6c:96:e0:57:ed:29:4d:
71:52:71:90:ba:88:ae:0f:f4:17:de:b1:a7:fd:98:96:da:4d:
56:73:e9:7c:14:ef:38:10:a9:25:8a:f5:b4:30:4e:8f:c0:19:
80:9d:46:1a:5e:12:4c:55:37:52:03:f5:a3:c6:64:b3:b0:70:
80:70:e4:45:10:21:b5:04:de:4a:0e:ea:4b:bd:67:90:52:b7:
4b:48:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:27 2026 by rpki-client