
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft
File: 10305EB1D756B8E205948FA9D96C07D30D5559C6.mft (raw, json)
Hash identifier: bxvycT7hgNTCpURvJ/ubqTaDIc2eE2v3PPtg3Swh7OY=
Subject key identifier: B1:CC:78:76:BD:CD:66:A4:43:A6:76:40:CA:8F:AC:43:F7:48:73:CA
Authority key identifier: 10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6
Certificate issuer: /CN=10305EB1D756B8E205948FA9D96C07D30D5559C6
Certificate serial: 56D6B1554FA029C16296183DC75F2570A607AF28
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 02:21:23 +0000
Manifest this update: Wed 13 May 2026 02:16:23 +0000
Manifest next update: Thu 14 May 2026 05:53:23 +0000
Files and hashes: 1: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: G6PGQreB8GGiXWbjNuIkvOBqamEXNRruYXzWZ5ntbWM=)
2: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: w+xTBuxDVGZDvJln2gWD2TMLIgtp2a/JxAVQQSe/MJc=)
3: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: xg8S5Jz4WdUD3Z66GOwGk02Rpx5TvYnlOCLFL6/urQw=)
4: 10305EB1D756B8E205948FA9D96C07D30D5559C6.crl (hash: PzvBrFsDh3aEzpIi7L1p91L7Ca53eHKKajaIBPBiK2Y=)
5: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: wzVp735bfnp8XDnpMDExEB2u8d/EmF9ou01fz223/d4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl
rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d6:b1:55:4f:a0:29:c1:62:96:18:3d:c7:5f:25:70:a6:07:af:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10305EB1D756B8E205948FA9D96C07D30D5559C6
Validity
Not Before: May 13 02:16:23 2026 GMT
Not After : May 14 05:53:23 2026 GMT
Subject: CN=B1CC7876BDCD66A443A67640CA8FAC43F74873CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:66:91:ab:a6:4c:23:64:ae:4f:e3:6b:b7:
16:4e:65:47:53:e9:88:e8:f8:5f:8f:f7:4e:08:64:
75:c3:d1:de:23:a6:a4:13:78:6d:33:94:3d:76:2d:
22:7b:24:88:ad:38:90:4b:2c:2a:ba:b9:68:25:ce:
50:92:0a:23:61:01:17:e1:a0:a6:45:a5:94:79:0b:
e9:08:3e:53:77:4b:38:26:86:4f:72:dd:ce:9c:79:
ba:1b:79:64:fb:cc:55:72:95:ca:80:73:a3:82:a3:
7a:51:85:3e:0e:6b:83:4e:55:42:f9:ee:f5:a1:74:
61:a0:b6:2e:df:c8:c0:61:22:60:7b:16:a5:94:de:
d8:da:47:f6:05:53:a3:75:ae:f3:66:35:57:7f:97:
6c:0f:4b:24:fb:a2:e9:3a:ed:d5:af:8f:0b:0d:ca:
34:d0:4d:9e:0a:8a:79:a1:09:fd:fa:51:4c:d6:bc:
a8:aa:84:dd:fe:5e:c2:1f:20:d1:9d:a1:e9:6f:f1:
4f:10:55:c5:9d:26:dd:f3:89:d0:6a:a4:cd:eb:74:
70:22:0a:72:de:28:a2:95:7d:73:f0:aa:e3:58:7e:
67:b6:fa:c0:71:32:01:38:4b:68:04:41:d9:21:10:
b4:1b:ed:ee:80:55:93:c5:4c:a0:2f:a8:ff:b0:bc:
11:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CC:78:76:BD:CD:66:A4:43:A6:76:40:CA:8F:AC:43:F7:48:73:CA
X509v3 Authority Key Identifier:
keyid:10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:79:16:ac:26:73:1a:62:e4:c2:b1:a4:99:f2:40:4a:0e:06:
d8:3c:72:a4:59:54:24:98:57:17:32:e8:85:65:e9:5c:18:f1:
0a:92:76:02:f0:3a:54:7c:27:3d:51:13:7d:62:db:04:67:b6:
ae:aa:96:55:84:f6:f7:da:00:5a:b7:a0:2b:2f:90:94:14:2c:
2b:95:6f:7c:3d:af:7c:f3:80:d1:b8:31:8e:8d:cc:04:51:09:
b3:0d:46:a7:e8:4f:59:0f:ba:57:a6:1c:af:3f:42:88:76:cc:
ec:24:82:ca:38:e2:62:a3:41:a2:05:b9:7a:3f:6b:f0:77:93:
06:ec:97:e2:89:47:d7:83:4a:bb:d7:66:78:f9:6d:82:0b:76:
c1:37:84:59:2a:ba:60:a2:79:b7:8d:77:20:58:5f:68:83:b9:
cd:6a:41:c6:8d:4a:43:60:36:f5:4e:77:8b:38:7a:6f:e7:54:
e3:31:65:eb:5c:6e:30:76:2c:0e:c5:14:28:4b:ea:56:dd:3d:
65:0e:0d:ee:c4:eb:62:b5:4c:70:38:9e:b1:08:77:76:b9:f1:
e8:de:49:34:48:54:05:e4:a9:f2:8d:ad:fa:8a:24:46:9b:16:
47:0e:3f:5d:69:d4:af:f9:1a:fd:12:6b:91:63:06:bc:27:fc:
c6:66:b2:d4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVtaxVU+gKcFilhg9x18lcKYHrygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMw
RDU1NTlDNjAeFw0yNjA1MTMwMjE2MjNaFw0yNjA1MTQwNTUzMjNaMDMxMTAvBgNV
BAMTKEIxQ0M3ODc2QkRDRDY2QTQ0M0E2NzY0MENBOEZBQzQzRjc0ODczQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbl2aRq6ZMI2SuT+NrtxZOZUdT
6Yjo+F+P904IZHXD0d4jpqQTeG0zlD12LSJ7JIitOJBLLCq6uWglzlCSCiNhARfh
oKZFpZR5C+kIPlN3Szgmhk9y3c6cebobeWT7zFVylcqAc6OCo3pRhT4Oa4NOVUL5
7vWhdGGgti7fyMBhImB7FqWU3tjaR/YFU6N1rvNmNVd/l2wPSyT7ouk67dWvjwsN
yjTQTZ4KinmhCf36UUzWvKiqhN3+XsIfINGdoelv8U8QVcWdJt3zidBqpM3rdHAi
CnLeKKKVfXPwquNYfme2+sBxMgE4S2gEQdkhELQb7e6AVZPFTKAvqP+wvBGNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUscx4dr3NZqRDpnZAyo+sQ/dIc8owHwYDVR0j
BBgwFoAUEDBesddWuOIFlI+p2WwH0w1VWcYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDM5MjUzODgtMzVjNi00MWQ3LTlkYzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFE
NzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMwRDU1NTlDNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDMwNUVCMUQ3NTZCOEUyMDU5NDhGQTlEOTZDMDdEMzBENTU1
OUM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk
YzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3
RDMwRDU1NTlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGl5Fqwmcxpi5MKxpJnyQEoOBtg8cqRZVCSY
Vxcy6IVl6VwY8QqSdgLwOlR8Jz1RE31i2wRntq6qllWE9vfaAFq3oCsvkJQULCuV
b3w9r3zzgNG4MY6NzARRCbMNRqfoT1kPulemHK8/Qoh2zOwkgso44mKjQaIFuXo/
a/B3kwbsl+KJR9eDSrvXZnj5bYILdsE3hFkqumCiebeNdyBYX2iDuc1qQcaNSkNg
NvVOd4s4em/nVOMxZetcbjB2LA7FFChL6lbdPWUODe7E62K1THA4nrEId3a58eje
STRIVAXkqfKNrfqKJEabFkcOP11p1K/5Gv0Sa5FjBrwn/MZmstQ=
-----END CERTIFICATE-----
Generated at Wed May 13 06:27:05 2026 by rpki-client