
$ rpki-client -vvf rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft
File: 822159966075595E4F7698AB063AA58F2CE6EFF6.mft (raw, json)
Hash identifier: OGD6tOo8TS6gbjxrU0SUQAkUaZTynzodidpjBvAsSwI=
Subject key identifier: 13:F0:9C:6D:2A:20:31:72:8F:DB:7B:9A:EE:E6:E6:7F:4C:A0:BB:A3
Authority key identifier: 82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6
Certificate issuer: /CN=822159966075595E4F7698AB063AA58F2CE6EFF6
Certificate serial: 795960C700CBE2F1F95F4018EDC9AD07A3C13B5F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:22:09 +0000
Manifest this update: Tue 12 May 2026 17:17:09 +0000
Manifest next update: Wed 13 May 2026 21:07:09 +0000
Files and hashes: 1: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: zEzn+j/oAs9F4CAyeoPk5AtHjPA5M7d6z/EhlMBHp5M=)
2: 822159966075595E4F7698AB063AA58F2CE6EFF6.crl (hash: f1KfIP7C0WaxBbk05lHpPsBOH4ZZiuWs1NlJim7XDOc=)
3: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: g2Try/rsWXQysWh1yUTGg946lXBgye9fJxj3oMw4maU=)
4: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: SnoqKOK1pYK0zjgd+NMH20h/jENOjT9uDC1vLmu5Vt0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl
rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:59:60:c7:00:cb:e2:f1:f9:5f:40:18:ed:c9:ad:07:a3:c1:3b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822159966075595E4F7698AB063AA58F2CE6EFF6
Validity
Not Before: May 12 17:17:09 2026 GMT
Not After : May 13 21:07:09 2026 GMT
Subject: CN=13F09C6D2A2031728FDB7B9AEEE6E67F4CA0BBA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:39:86:ac:68:f3:77:3d:e0:7d:ae:af:93:
40:9c:d2:35:25:35:9b:1d:74:b1:21:e4:9c:9b:a9:
05:93:db:d2:53:01:c0:76:e5:b7:71:8e:a5:40:7f:
b9:d0:09:2b:fe:c5:3c:c6:fd:3d:97:31:4c:d9:43:
14:52:72:a2:1e:75:82:0e:e1:4a:44:c7:38:cd:bb:
ad:6e:a2:89:74:0b:cc:c8:15:9f:59:55:30:81:03:
82:cf:a3:39:10:aa:af:1c:43:1c:59:a5:f9:82:84:
28:1b:15:75:f5:79:22:ee:47:ad:95:73:4d:05:61:
f0:c5:35:6d:34:74:14:e1:ac:fd:a7:ef:7f:1a:ba:
4f:f2:46:6c:9e:03:27:a9:6a:16:b6:9b:92:81:39:
18:66:82:02:7c:80:bf:a7:eb:7b:3a:10:70:25:1c:
72:e0:ae:54:96:06:9a:16:68:bd:0a:0e:bf:2f:a0:
4a:0e:7a:73:f2:7d:09:0a:7d:16:84:78:8d:0c:7a:
84:52:73:79:12:84:1e:c7:d2:8d:df:2a:3b:16:98:
ea:46:05:a3:c8:cb:70:fc:f7:5a:ff:bd:32:b2:b9:
63:78:b9:b1:cb:1d:ed:78:67:6c:54:17:0d:d6:3c:
2e:b5:9c:6f:0a:87:b7:8c:0d:90:9a:85:ab:af:e2:
d9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F0:9C:6D:2A:20:31:72:8F:DB:7B:9A:EE:E6:E6:7F:4C:A0:BB:A3
X509v3 Authority Key Identifier:
keyid:82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:40:2e:34:ad:ab:c2:f8:36:24:fe:9a:c4:bd:56:ab:6e:7a:
9b:06:c8:0c:4f:5c:0d:35:11:3d:f8:4c:f6:0c:9c:99:ad:3a:
7e:be:ae:53:36:a2:a0:b0:0a:65:72:58:de:55:97:69:31:28:
58:cc:47:99:a0:a3:6a:5e:d7:67:f1:2f:c9:77:84:90:83:74:
74:bd:74:6d:99:37:e1:06:39:ff:a7:65:66:37:06:ba:60:ce:
6c:da:e7:f2:12:09:59:b2:05:a5:74:85:c5:3a:18:0e:06:ea:
43:04:08:bb:b3:dd:ae:ab:e3:fe:29:3f:d1:64:fe:ea:e1:f3:
b3:74:9f:0c:8b:1d:b9:8a:db:83:99:4e:c2:a2:18:9e:9f:4f:
aa:b2:4a:fa:dc:40:32:15:45:b1:ea:86:ff:e2:29:1f:ab:97:
fe:3b:54:9f:6a:99:a6:9c:31:87:47:f9:d8:c6:86:9b:40:9a:
6f:fc:15:64:e8:fb:b3:f2:33:b8:5b:13:29:26:e2:b4:cf:c1:
7e:68:f5:24:5d:13:44:c6:d4:24:a2:ae:51:e0:51:5e:1d:c4:
12:b5:b3:90:58:37:9b:6f:18:a3:c8:19:36:8e:75:9c:54:1a:
b1:2c:3e:06:93:bd:66:94:41:07:31:69:42:cf:67:c2:d3:2f:
ba:71:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:01 2026 by rpki-client