
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft
File: D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft (raw, json)
Hash identifier: gTbx/VdSu2qryguWGECu8JEqvp7IuVJHXzrBXqbDj+I=
Subject key identifier: 6C:6C:D8:BB:59:21:AC:39:09:21:34:04:94:E7:49:5F:1A:C5:4D:75
Authority key identifier: D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0
Certificate issuer: /CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0
Certificate serial: 18E90523CC8BD5616B9DF8D356C91AF815F59CC0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 06:58:01 +0000
Manifest this update: Tue 12 May 2026 06:53:01 +0000
Manifest next update: Wed 13 May 2026 10:49:01 +0000
Files and hashes: 1: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: Mz/HLsc5z0NW9is9cK/jPV/c2edacNGieAld99v6XRg=)
2: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: nih8Qs0LKBkZCWGMFeuGnh3q/46VGBkvPVPuLWWc1eE=)
3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: tYzh/ONrnE/vB4p4w+wsr7jUrg+O1DSqJcNbYqdE1O4=)
4: D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl (hash: QIoACr0UmvZsocEh94SdFRQNGLf7Es40DXFTxsKWFKI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl
rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e9:05:23:cc:8b:d5:61:6b:9d:f8:d3:56:c9:1a:f8:15:f5:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0
Validity
Not Before: May 12 06:53:01 2026 GMT
Not After : May 13 10:49:01 2026 GMT
Subject: CN=6C6CD8BB5921AC390921340494E7495F1AC54D75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:fc:e2:50:7f:09:4f:14:bd:76:6e:0c:e7:
c4:14:59:96:eb:a5:70:31:51:31:85:64:e0:7d:3b:
ac:84:65:35:60:29:4b:7a:9c:9b:86:6b:f9:e6:e3:
8e:90:46:ed:80:7e:af:10:2c:70:cd:1d:8c:e9:53:
51:d5:d2:1a:c8:73:d3:53:ab:a7:93:0f:f2:ab:ea:
16:46:cc:35:85:5f:60:89:b3:14:74:a0:ab:92:8f:
e8:a6:79:0f:ff:6a:a5:38:d8:88:1d:f3:db:da:43:
76:ad:f8:b9:68:3c:14:b5:1a:5b:ef:9b:ae:03:b7:
21:11:4d:d5:a1:c9:11:55:82:dd:d8:4b:4c:51:0b:
a9:b4:51:7b:71:e4:e3:15:f9:b9:ec:10:2e:97:52:
da:8e:4c:a4:c3:e4:57:17:b7:4c:6c:d1:76:94:a3:
3f:d9:d7:7f:b3:a6:b6:04:67:5c:49:b5:63:2c:91:
d8:ab:46:0f:50:a6:7a:6a:ff:b7:bd:f8:f5:ba:a1:
a8:94:e6:ae:5a:e6:6a:93:76:52:ad:ae:a6:39:3e:
8e:ad:48:1d:94:bc:85:6c:7a:c3:0b:8b:83:11:79:
4f:4e:0f:85:af:38:6d:a2:6c:9f:23:8d:ef:93:08:
04:eb:36:43:37:d8:e4:b4:5f:69:f0:0b:b8:26:71:
07:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6C:D8:BB:59:21:AC:39:09:21:34:04:94:E7:49:5F:1A:C5:4D:75
X509v3 Authority Key Identifier:
keyid:D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d0:0a:6f:cf:63:9b:8f:e5:0f:6b:94:ea:82:bc:ed:9e:c4:
86:27:e3:fa:18:1b:0d:29:31:7c:1f:fc:89:95:8e:47:77:b0:
47:67:25:06:19:87:c3:bc:75:e8:c6:ce:d5:a4:04:cf:d1:d1:
db:5c:5b:4f:ac:97:b4:95:cc:2a:8b:3a:1a:fd:5a:1a:ce:eb:
7f:5e:0c:7b:35:7a:d2:0a:c9:98:a5:94:39:56:f5:d3:62:27:
c1:42:6b:4c:ee:9f:69:ac:79:c6:26:c4:2c:ae:ae:f2:0a:22:
45:26:7f:fb:0f:cb:07:ed:2d:06:91:1e:2b:eb:50:9f:58:56:
6b:0c:2d:e7:fd:94:28:87:a2:fd:39:92:e7:0c:fa:30:82:60:
5e:54:eb:4a:76:b5:5c:2d:d0:30:e0:ea:d4:b5:49:a6:eb:bb:
32:41:fa:38:dd:3f:c3:4f:c6:53:4b:47:12:76:24:02:5a:81:
91:fa:1e:2b:2d:40:50:e2:23:57:21:10:67:e3:c4:c5:67:cb:
ff:bf:f6:34:89:dd:71:34:73:65:52:81:81:a3:e0:42:05:c3:
75:cc:58:13:f9:1f:a5:fb:17:62:07:60:24:ba:c4:df:74:e3:
2f:68:1b:d1:96:5e:d4:aa:85:c7:fb:f2:d1:fd:85:64:98:13:
99:e0:e7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:19 2026 by rpki-client