
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
File: 518CB795450041B0537FB0312901D771579DCEC4.mft (raw, json)
Hash identifier: G17frqbBGS9tdyXP/mX/M9yRczCgirZzner/D5WBA0Y=
Subject key identifier: 6E:83:65:2F:B1:1F:6B:48:3F:6B:0C:9B:A3:1C:45:C3:00:9E:7B:43
Authority key identifier: 51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4
Certificate issuer: /CN=518CB795450041B0537FB0312901D771579DCEC4
Certificate serial: 1A0F7DC6814DA8828EC7639C0028B346D873D888
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 00:03:25 +0000
Manifest this update: Tue 12 May 2026 23:58:25 +0000
Manifest next update: Thu 14 May 2026 00:55:25 +0000
Files and hashes: 1: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: iCJ8MTvJq5y1PpIDZMP2NlWvXH8yCPvTkvBM8kuoTNA=)
2: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: X+iPKuq3a//oKJcRH7RCMyPd3wqSs+gr09rlg8og0vI=)
3: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: GypeOWXaZk/hIkKcj8p9VzDp/KvisMSO2917iwkOduU=)
4: 518CB795450041B0537FB0312901D771579DCEC4.crl (hash: hiVEugg8BfY0fPaygvwHZaZWWkT43CTD9rT9zzsj5j4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl
rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:0f:7d:c6:81:4d:a8:82:8e:c7:63:9c:00:28:b3:46:d8:73:d8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518CB795450041B0537FB0312901D771579DCEC4
Validity
Not Before: May 12 23:58:25 2026 GMT
Not After : May 14 00:55:25 2026 GMT
Subject: CN=6E83652FB11F6B483F6B0C9BA31C45C3009E7B43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:7b:e3:a0:9d:55:f5:40:b9:f2:33:82:b4:
3e:88:d2:ef:82:81:6b:52:f4:34:27:c1:ad:6d:98:
7f:af:5e:29:9e:9f:ca:7b:46:ff:1f:ce:41:13:27:
5d:97:f2:bd:f5:ef:dc:44:78:e6:d9:bd:ad:49:05:
78:bb:30:44:d6:c7:3d:7d:7b:60:eb:8f:6c:70:df:
65:e3:6c:a3:66:43:64:08:27:cf:0a:6a:29:f0:3d:
13:6b:7b:0d:8f:a1:9b:e6:53:3d:25:70:e7:bb:05:
c6:b7:5b:8e:60:3e:f4:15:b9:be:94:4f:75:99:4c:
2c:2c:8d:27:3e:28:a7:de:82:5d:44:ac:99:22:54:
9c:b3:de:ae:4b:65:30:11:bc:46:13:2c:26:20:fd:
d9:18:d6:00:36:00:6b:74:4f:2b:48:06:cc:bb:7e:
5b:08:5a:86:07:dc:d8:92:3d:ee:92:df:ee:3c:fb:
b4:85:47:e5:b9:3c:64:c7:0c:0b:2d:b6:96:e3:13:
6a:e6:09:66:3f:d7:3a:e3:bd:a5:7b:1d:f5:13:3e:
c8:ed:71:02:02:ec:e3:e2:3a:13:79:06:40:5a:91:
24:3c:19:79:99:29:84:98:7b:9c:87:f9:e7:6a:6d:
95:b1:5b:2a:6d:2b:dd:e8:05:3d:0a:15:6c:32:e7:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:83:65:2F:B1:1F:6B:48:3F:6B:0C:9B:A3:1C:45:C3:00:9E:7B:43
X509v3 Authority Key Identifier:
keyid:51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:aa:e3:6a:5b:c5:3f:5c:4d:97:7c:d9:c8:40:3f:c8:c9:24:
53:61:89:07:97:3d:ca:54:bc:06:36:f5:b1:c3:35:51:ba:28:
5d:3e:9e:77:7b:87:d1:a7:2d:bf:e4:60:08:1f:49:9d:dd:b0:
d0:f1:4b:9a:86:29:11:34:fe:67:3a:d0:ae:2b:b6:1f:77:15:
e8:8f:9c:89:72:fd:1f:f7:9a:95:7f:f4:85:99:6b:74:7c:98:
03:a5:c2:bf:4a:f8:b2:7a:80:b0:cc:12:15:b6:c8:9b:fc:1b:
95:b7:30:1d:3e:a3:6c:8e:ea:6b:e0:b9:c8:8a:4a:e6:c0:bc:
32:6f:6d:a9:de:fe:30:c1:f4:9f:87:95:29:db:cf:b3:b9:b3:
41:eb:f2:be:72:1b:75:ac:de:ad:c4:d5:ea:9e:7d:b9:e2:a6:
98:36:01:4b:04:a4:b6:9c:62:62:6f:09:8d:89:94:9a:91:c9:
d7:cc:82:3c:96:dc:db:fe:37:a7:f0:9e:27:7d:84:65:f6:d5:
49:ab:ec:09:71:c7:d3:01:df:2e:c7:6d:66:7f:5b:4b:e6:6b:
5c:8b:8a:6a:eb:9d:f3:de:18:68:ac:7e:1b:04:01:32:14:06:
e9:64:a7:b2:0a:6a:6c:34:9d:b4:bb:00:c7:99:49:9c:94:a4:
5c:15:d2:fb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGg99xoFNqIKOx2OcACizRthz2IgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE4Q0I3OTU0NTAwNDFCMDUzN0ZCMDMxMjkwMUQ3NzE1
NzlEQ0VDNDAeFw0yNjA1MTIyMzU4MjVaFw0yNjA1MTQwMDU1MjVaMDMxMTAvBgNV
BAMTKDZFODM2NTJGQjExRjZCNDgzRjZCMEM5QkEzMUM0NUMzMDA5RTdCNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3XvjoJ1V9UC58jOCtD6I0u+C
gWtS9DQnwa1tmH+vXimen8p7Rv8fzkETJ12X8r3179xEeObZva1JBXi7METWxz19
e2Drj2xw32XjbKNmQ2QIJ88KainwPRNrew2PoZvmUz0lcOe7Bca3W45gPvQVub6U
T3WZTCwsjSc+KKfegl1ErJkiVJyz3q5LZTARvEYTLCYg/dkY1gA2AGt0TytIBsy7
flsIWoYH3NiSPe6S3+48+7SFR+W5PGTHDAsttpbjE2rmCWY/1zrjvaV7HfUTPsjt
cQIC7OPiOhN5BkBakSQ8GXmZKYSYe5yH+edqbZWxWyptK93oBT0KFWwy544NAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUboNlL7Efa0g/awyboxxFwwCee0MwHwYDVR0j
BBgwFoAUUYy3lUUAQbBTf7AxKQHXcVedzsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjcwMzY5NzQtODEzMS00NWFmLTk0Y2UtZjQ5YjQ4MTFjMTczLzAvNTE4Q0I3OTU0
NTAwNDFCMDUzN0ZCMDMxMjkwMUQ3NzE1NzlEQ0VDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MThDQjc5NTQ1MDA0MUIwNTM3RkIwMzEyOTAxRDc3MTU3OURD
RUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjcwMzY5NzQtODEzMS00NWFmLTk0
Y2UtZjQ5YjQ4MTFjMTczLzAvNTE4Q0I3OTU0NTAwNDFCMDUzN0ZCMDMxMjkwMUQ3
NzE1NzlEQ0VDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGCq42pbxT9cTZd82chAP8jJJFNhiQeXPcpU
vAY29bHDNVG6KF0+nnd7h9GnLb/kYAgfSZ3dsNDxS5qGKRE0/mc60K4rth93FeiP
nIly/R/3mpV/9IWZa3R8mAOlwr9K+LJ6gLDMEhW2yJv8G5W3MB0+o2yO6mvguciK
SubAvDJvbane/jDB9J+HlSnbz7O5s0Hr8r5yG3Ws3q3E1eqefbnippg2AUsEpLac
YmJvCY2JlJqRydfMgjyW3Nv+N6fwnid9hGX21Umr7Alxx9MB3y7HbWZ/W0vma1yL
imrrnfPeGGisfhsEATIUBulkp7IKamw0nbS7AMeZSZyUpFwV0vs=
-----END CERTIFICATE-----
Generated at Wed May 13 14:33:39 2026 by rpki-client