
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
File: D626CC25972BF9948C6B3BDE4E354C71F2570880.mft (raw, json)
Hash identifier: c8B/tiXRfSVASPXuhpycGvhB//xuB9SHhVepCgtPldA=
Subject key identifier: 38:EC:50:38:FD:D7:CC:C8:3D:42:18:18:16:62:D8:01:A4:87:F8:F8
Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
Certificate issuer: /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Certificate serial: 21A2224307D4906B2CAC15F1C8628E9C62151BAF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 23:01:46 +0000
Manifest this update: Tue 12 May 2026 22:56:46 +0000
Manifest next update: Thu 14 May 2026 00:50:46 +0000
Files and hashes: 1: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: jRI7u+pgcEtmrDDRmjulrcR4SRRZM/aGtsQfGUXuJ24=)
2: D626CC25972BF9948C6B3BDE4E354C71F2570880.crl (hash: 6cx//cG/TW4zG8XRuAT6n8kT2X0BzLQG80R+/5NvQcI=)
3: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: nb8z2N9rnH96t5B0H624NhPlR7I0KYPMhvCR0O/fhs4=)
4: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: 0aDHxXMr4KUimzxt4JkDC404Ezku76mxRU40fEJqQUU=)
5: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: +bc1aSBLcX6ZQm4jECmlMCivSavxhqXkBTLrz820pWg=)
6: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: yo9Rg0RIu4bi5AvFSf1HgeoEO2ptRcGKCjbNNgnoU1A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a2:22:43:07:d4:90:6b:2c:ac:15:f1:c8:62:8e:9c:62:15:1b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Validity
Not Before: May 12 22:56:46 2026 GMT
Not After : May 14 00:50:46 2026 GMT
Subject: CN=38EC5038FDD7CCC83D4218181662D801A487F8F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:51:ee:54:0b:08:40:5a:0c:65:3a:2e:7a:28:
70:97:4a:15:a5:fb:68:ed:c0:5b:62:56:a1:87:0e:
9e:62:f1:cb:43:da:ba:fa:5b:31:a3:68:c1:d3:db:
53:e0:e2:33:09:36:d6:f4:1c:3b:a8:e9:90:03:9b:
1b:87:17:a2:e1:93:3b:6f:66:35:7e:c2:5e:13:f0:
6a:32:82:3f:fa:2b:74:18:c9:5d:ed:d8:d0:ca:9e:
26:b9:d1:a4:80:45:ab:31:50:74:db:09:1f:8f:12:
7f:2c:66:27:98:e8:07:e3:c2:39:63:ac:69:84:40:
6c:78:03:07:80:56:f6:9f:ce:61:04:0d:39:7f:fc:
24:36:0f:b4:95:fb:56:7e:41:9f:32:26:c6:f3:8b:
62:a6:50:52:34:34:8e:0b:e7:af:d2:24:74:88:ef:
03:a8:93:c3:87:12:14:cd:2f:5a:11:80:b2:89:0a:
ed:1f:74:a5:69:03:28:1a:30:94:2d:57:37:82:55:
4f:e4:5c:58:b0:a0:f7:f4:91:64:d6:72:7c:28:76:
0c:05:05:d0:b8:96:7b:10:5e:e9:80:36:fe:d0:49:
02:7c:15:cd:bd:ee:3e:53:22:cc:8d:0d:82:bf:63:
ad:ec:fb:3a:88:07:8e:9e:16:75:b6:3f:06:89:aa:
17:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EC:50:38:FD:D7:CC:C8:3D:42:18:18:16:62:D8:01:A4:87:F8:F8
X509v3 Authority Key Identifier:
keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8c:0a:d2:19:a3:c0:43:dc:cf:f0:55:5c:00:c9:91:d3:58:
4b:8e:c2:7a:55:47:c2:1b:62:f6:34:7c:10:9b:3e:a7:a7:0e:
2b:23:9b:91:fb:ec:21:83:3b:5a:0f:5b:d2:aa:d5:7a:67:0f:
0c:68:bf:0c:84:03:de:54:a1:07:cb:e6:41:52:54:f4:69:df:
84:63:3d:7e:0c:00:49:e2:05:6a:db:06:6a:e6:7b:b7:6d:b2:
c8:65:60:28:eb:f3:a1:a8:b3:a1:16:04:9c:41:91:ff:31:50:
73:bd:55:1d:9c:21:ce:69:9f:6b:b1:26:56:c2:1c:e9:a0:a7:
86:f2:0a:9b:58:7f:d9:be:48:a8:d5:53:f1:fa:d0:c5:94:39:
48:76:25:d4:af:5f:60:86:03:27:ed:f3:b1:4a:92:f9:f6:b7:
99:75:06:4d:c9:cc:6b:97:f9:b8:6c:02:b9:37:41:69:0c:b6:
89:88:a6:cb:ab:24:81:4d:96:08:18:1c:6d:a2:21:33:8f:0a:
14:0b:27:55:75:57:d4:f8:b2:80:45:22:e2:0d:0b:f8:28:c3:
ca:07:57:b6:e7:f0:75:3d:da:f2:51:d1:e3:18:42:58:ca:95:
27:1c:a3:bc:0f:fb:f6:ad:b0:ab:d4:8f:ce:16:cf:78:45:6c:
9c:bf:77:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:28 2026 by rpki-client