
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft
File: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft (raw, json)
Hash identifier: uUgfNsrZeBb7fXPyG/GjkEm06tLC3EAn4BvhnzQ+0Mk=
Subject key identifier: 58:C6:6A:9E:CA:B1:C4:81:0E:A5:3F:DF:9D:75:7B:2E:1A:6B:29:2E
Authority key identifier: C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC
Certificate issuer: /CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC
Certificate serial: 59A98BAF69A27C4BAEB9DC7BDE4B7B5158F1F3FB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 07:03:15 +0000
Manifest this update: Tue 12 May 2026 06:58:15 +0000
Manifest next update: Wed 13 May 2026 09:14:15 +0000
Files and hashes: 1: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl (hash: nOOa1ZAE4FdFLq4xSrajFakSWRkMX4MYGFu4ilnKTW0=)
2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: R6QK9+MoLmzsMre1Y9YXqP/L5rUmbxfvyX6TdZV81Yk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl
rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:14:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a9:8b:af:69:a2:7c:4b:ae:b9:dc:7b:de:4b:7b:51:58:f1:f3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC
Validity
Not Before: May 12 06:58:15 2026 GMT
Not After : May 13 09:14:15 2026 GMT
Subject: CN=58C66A9ECAB1C4810EA53FDF9D757B2E1A6B292E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:ae:ae:f1:42:eb:d2:f4:69:e1:64:f6:8b:
2b:3f:3b:91:76:9a:0f:5f:aa:53:b5:e5:69:5d:e5:
12:eb:d1:fd:8c:79:38:47:b5:94:bf:93:89:1f:99:
87:3c:62:6a:21:ea:21:20:31:be:bc:1d:29:bc:1b:
d1:e9:7e:1c:bd:01:60:42:80:81:87:6b:6d:77:8b:
c0:b2:38:db:de:d9:99:1f:ee:f9:6b:a2:13:81:cb:
75:aa:f4:a5:80:dd:7d:3e:b7:3a:c8:56:f9:8b:b6:
e1:d6:60:06:7f:45:b3:66:25:0c:51:92:b6:ef:65:
f9:e2:b0:4c:d6:48:8d:04:f8:f1:ab:75:95:0a:d9:
f0:dc:f9:a0:6b:87:95:22:07:93:ba:a2:ec:04:d4:
58:7d:50:50:39:95:e3:14:25:31:ea:2d:c2:2f:29:
55:ff:8c:0e:65:b4:d5:8a:18:81:5d:64:d0:7f:a0:
2a:64:1c:9d:03:fb:7f:56:86:a0:af:0a:59:ca:ea:
37:bc:27:cf:9b:2f:0b:9e:41:38:f5:af:84:31:8b:
aa:62:14:3f:0e:1c:64:2c:68:c6:69:94:bb:84:1a:
d3:3e:b0:01:67:a4:ac:a5:de:3f:e0:df:3d:93:60:
dc:c5:8a:2f:35:19:0a:b9:16:e9:e8:eb:42:c3:78:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C6:6A:9E:CA:B1:C4:81:0E:A5:3F:DF:9D:75:7B:2E:1A:6B:29:2E
X509v3 Authority Key Identifier:
keyid:C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a2:2d:9d:c8:fb:7a:8a:87:4f:cc:2e:07:aa:59:a3:c6:2e:
b9:92:b2:9e:ed:5e:70:fe:3a:00:55:cb:9a:bb:67:b9:bb:4a:
e5:a1:38:6a:14:35:3f:4e:ae:20:92:4a:fb:23:94:ed:5e:dd:
34:ed:53:ee:09:ba:32:7e:7b:be:72:01:04:2b:92:25:d5:86:
7a:c7:bb:1a:d5:92:87:de:db:a1:38:a4:09:fc:37:93:e2:ca:
16:cb:79:17:fe:67:29:ff:1a:9d:97:dd:8c:f1:c6:35:92:48:
69:d2:ac:99:97:75:32:09:28:2a:b1:39:04:62:f5:5f:67:64:
28:59:4b:93:65:b0:53:d1:1c:11:cf:8a:5d:1e:0d:25:75:59:
ac:b8:a2:aa:fb:d5:b5:c9:40:35:dc:f6:09:b4:25:f1:c7:6f:
f9:80:77:7e:e3:b2:0d:82:2f:d4:a2:f2:12:a7:0c:e4:e9:83:
a1:47:1f:8d:91:45:7b:1e:24:73:e3:8b:81:94:c7:96:a3:27:
f5:74:9c:d8:2f:b0:86:c0:ec:6e:8c:fd:fb:8a:5f:81:e8:1e:
d5:84:18:e4:dd:56:b7:cc:2e:09:8a:0d:a3:07:6a:02:3c:4c:
4a:1d:73:cd:3a:fd:3e:87:95:c5:07:a2:21:5a:e8:09:9e:dc:
99:f5:eb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:03 2026 by rpki-client