
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
File: 11FFFA845980AD12347D7297657117A393722635.mft (raw, json)
Hash identifier: NhIfZg0xuI8o1hWcIdqecTpvL3pwP6aG7T/M6Xt+t9E=
Subject key identifier: 20:36:22:8E:E0:14:10:B3:2E:AB:19:6C:FD:06:05:55:87:98:05:CC
Authority key identifier: 11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35
Certificate issuer: /CN=11FFFA845980AD12347D7297657117A393722635
Certificate serial: 34F7D6E0208CB9C3058779517D91918682EE3D27
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 09:15:40 +0000
Manifest this update: Tue 12 May 2026 09:10:40 +0000
Manifest next update: Wed 13 May 2026 11:13:40 +0000
Files and hashes: 1: 11FFFA845980AD12347D7297657117A393722635.crl (hash: kY9x/LOJCzNTB+I1EajaCps51Xga7kjxIBuKFsJzz1w=)
2: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: lcXF2ukAyeD79WJ/+d/LiALmLjnDTwGdGGkGmI9GuQ8=)
3: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: 1j1MwArF7+GiMoyA2GSO7NK/M/081FoP97bqeWhfFHU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl
rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f7:d6:e0:20:8c:b9:c3:05:87:79:51:7d:91:91:86:82:ee:3d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11FFFA845980AD12347D7297657117A393722635
Validity
Not Before: May 12 09:10:40 2026 GMT
Not After : May 13 11:13:40 2026 GMT
Subject: CN=2036228EE01410B32EAB196CFD060555879805CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:dd:93:0a:53:b6:13:b5:15:3f:f5:45:64:
ca:b9:c9:ff:2d:e5:68:9f:f6:75:62:bb:a6:8f:25:
c4:01:51:40:93:60:eb:51:1e:b7:49:6f:1f:7b:69:
97:bd:0c:e8:58:39:27:9e:74:35:cb:83:21:b6:81:
c2:21:5d:03:cc:90:c8:c0:fa:52:34:f6:32:18:93:
7b:6b:40:87:37:61:d9:1c:e1:8b:27:d7:18:21:1b:
12:c8:58:0a:61:e9:7f:d7:79:32:0a:20:40:c6:fa:
99:1c:48:a6:c4:10:83:e9:3c:be:42:f5:80:a1:28:
92:38:1e:be:b2:77:b9:9f:60:b5:5d:89:94:b6:74:
0b:4f:e9:2a:71:f9:74:3e:3b:18:d2:23:c9:2a:5e:
13:57:d7:6f:ea:6e:16:6e:19:02:78:d4:4c:7b:c4:
d1:70:c3:d6:5e:c8:a8:6c:31:f9:ca:ce:46:ef:5e:
27:08:cb:1c:63:27:9e:64:88:da:02:1c:c0:be:ef:
3a:1a:46:27:73:82:7b:63:9e:82:60:50:17:f5:5a:
e7:b5:dd:a7:3b:86:82:e2:3e:e9:df:e2:6c:f3:b7:
7b:04:ec:f8:02:15:6e:b7:b1:cf:54:39:fe:8c:44:
21:5b:80:99:b7:04:25:2a:1b:3e:a1:e8:45:74:8a:
90:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:22:8E:E0:14:10:B3:2E:AB:19:6C:FD:06:05:55:87:98:05:CC
X509v3 Authority Key Identifier:
keyid:11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:02:1a:08:a6:9f:c1:3d:bd:26:93:ed:86:67:ec:93:6d:d4:
ec:33:8a:cd:a9:93:97:d4:ca:ba:5f:bc:91:de:91:a2:eb:88:
3e:d6:bb:f5:cc:32:7d:5c:35:2f:19:7f:15:c0:30:e5:47:92:
e0:06:e2:99:40:5c:d6:4c:7d:ad:fa:ad:ec:c4:84:89:58:1a:
33:97:9a:52:f2:55:e9:6a:2c:14:59:af:05:a9:69:b7:76:7a:
7e:7d:a7:3b:cf:3e:36:f8:d2:cd:e7:48:1f:a8:f7:9d:be:2d:
df:a0:62:dc:dd:4a:b3:1d:ef:c5:ec:2c:b6:e1:8e:4e:44:25:
c4:6e:b4:98:8e:8f:b0:ee:9c:9f:b0:18:39:c1:ff:fb:b7:b0:
dd:be:0f:a4:97:69:85:c6:da:40:ea:12:20:20:38:ae:f4:4a:
94:c8:fd:cf:0f:0a:5a:16:0b:af:5a:96:77:40:f0:93:d9:df:
ff:f4:5c:ac:78:e9:8e:e4:ae:0e:c6:dc:b2:6f:04:4b:ab:ac:
f8:42:5d:ca:80:34:12:94:b2:9b:b0:1e:a6:c9:9a:3b:b0:d6:
b4:ec:0f:ae:1d:ce:76:f3:5e:3c:80:a0:19:01:54:8e:f9:86:
c0:b1:67:5d:6f:66:e4:b4:91:ed:a1:52:a8:89:61:02:e6:7f:
90:f8:a6:74
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNPfW4CCMucMFh3lRfZGRhoLuPScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGRkZBODQ1OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3QTM5
MzcyMjYzNTAeFw0yNjA1MTIwOTEwNDBaFw0yNjA1MTMxMTEzNDBaMDMxMTAvBgNV
BAMTKDIwMzYyMjhFRTAxNDEwQjMyRUFCMTk2Q0ZEMDYwNTU1ODc5ODA1Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe5d2TClO2E7UVP/VFZMq5yf8t
5Wif9nViu6aPJcQBUUCTYOtRHrdJbx97aZe9DOhYOSeedDXLgyG2gcIhXQPMkMjA
+lI09jIYk3trQIc3Ydkc4Ysn1xghGxLIWAph6X/XeTIKIEDG+pkcSKbEEIPpPL5C
9YChKJI4Hr6yd7mfYLVdiZS2dAtP6Spx+XQ+OxjSI8kqXhNX12/qbhZuGQJ41Ex7
xNFww9ZeyKhsMfnKzkbvXicIyxxjJ55kiNoCHMC+7zoaRidzgntjnoJgUBf1Wue1
3ac7hoLiPunf4mzzt3sE7PgCFW63sc9UOf6MRCFbgJm3BCUqGz6h6EV0ipAtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIDYijuAUELMuqxls/QYFVYeYBcwwHwYDVR0j
BBgwFoAUEf/6hFmArRI0fXKXZXEXo5NyJjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDRiNGZiODgtOGY0Mi00N2YyLWJlODAtMDllNDM1NjBkZGRmLzAvMTFGRkZBODQ1
OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3QTM5MzcyMjYzNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMUZGRkE4NDU5ODBBRDEyMzQ3RDcyOTc2NTcxMTdBMzkzNzIy
NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl
ODAtMDllNDM1NjBkZGRmLzAvMTFGRkZBODQ1OTgwQUQxMjM0N0Q3Mjk3NjU3MTE3
QTM5MzcyMjYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI0CGgimn8E9vSaT7YZn7JNt1Owzis2pk5fU
yrpfvJHekaLriD7Wu/XMMn1cNS8ZfxXAMOVHkuAG4plAXNZMfa36rezEhIlYGjOX
mlLyVelqLBRZrwWpabd2en59pzvPPjb40s3nSB+o952+Ld+gYtzdSrMd78XsLLbh
jk5EJcRutJiOj7DunJ+wGDnB//u3sN2+D6SXaYXG2kDqEiAgOK70SpTI/c8PCloW
C69alndA8JPZ3//0XKx46Y7krg7G3LJvBEurrPhCXcqANBKUspuwHqbJmjuw1rTs
D64dznbzXjyAoBkBVI75hsCxZ11vZuS0ke2hUqiJYQLmf5D4pnQ=
-----END CERTIFICATE-----
Generated at Wed May 13 02:11:59 2026 by rpki-client