
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
File: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft (raw, json)
Hash identifier: 78iHjLPBry0d/7lY/yBpk+4F0tjiZPR9AVw9y1Fg6Zw=
Subject key identifier: 2C:3F:D7:81:81:25:9B:88:58:59:9E:28:FA:26:1C:21:85:18:BD:C5
Authority key identifier: 88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53
Certificate issuer: /CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53
Certificate serial: 6659F0B817AFC988EAFBAFFC28A8AE4F3ABAE4E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 03:32:46 +0000
Manifest this update: Tue 12 May 2026 03:27:46 +0000
Manifest next update: Wed 13 May 2026 05:24:46 +0000
Files and hashes: 1: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl (hash: Iuja3LA64mfICUYLVUnf6fH3FWw/dPQiCQpCgPX4JoI=)
2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: wyx8uHuSuItOBpo5Sy4M68blXovUWUC/+3CgkbnFTv8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl
rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 05:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:59:f0:b8:17:af:c9:88:ea:fb:af:fc:28:a8:ae:4f:3a:ba:e4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53
Validity
Not Before: May 12 03:27:46 2026 GMT
Not After : May 13 05:24:46 2026 GMT
Subject: CN=2C3FD78181259B8858599E28FA261C218518BDC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:aa:51:81:a2:96:3d:eb:b6:ca:37:3d:c2:
d1:de:fa:55:41:93:a0:c3:c6:a2:38:94:c5:8c:de:
5d:97:74:f5:1b:fc:fd:57:0b:b1:b9:e2:ca:dd:92:
29:21:4c:64:07:32:b4:47:ad:7a:db:67:53:1a:13:
7c:5e:43:1c:bc:00:11:77:05:4f:ef:03:7c:77:d1:
3e:61:53:81:7c:ba:16:c6:6e:1c:0d:cd:1d:fd:90:
06:c9:c5:21:6d:d7:82:97:cc:72:57:5b:e7:ab:63:
39:be:da:2a:25:e8:34:9a:84:ba:7a:cf:b2:02:52:
a5:f8:0e:72:49:26:ce:41:93:98:63:db:48:3c:52:
17:ca:ea:e9:9c:bd:a5:1c:16:72:dd:7f:24:24:b1:
f1:1a:2b:26:3c:18:1b:22:f3:25:83:fc:3e:d0:3e:
66:1c:09:7e:4e:e7:26:89:fd:0d:c7:0f:63:e1:01:
c4:f2:2c:29:fd:79:1a:37:3f:e9:c6:9e:e7:d3:58:
97:41:e6:70:3b:f0:54:b2:45:61:02:3e:47:58:83:
d3:8a:0f:86:4f:0c:de:f9:eb:66:73:3e:78:62:c8:
eb:75:90:62:bb:da:e7:d9:bf:51:83:08:a4:8e:21:
21:d4:ff:94:d1:57:d5:e5:17:76:d6:a5:d0:73:9d:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3F:D7:81:81:25:9B:88:58:59:9E:28:FA:26:1C:21:85:18:BD:C5
X509v3 Authority Key Identifier:
keyid:88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:64:08:80:64:7c:17:fe:f4:fb:1f:1a:57:81:b9:5a:3e:01:
c9:81:b8:1c:35:ea:34:7d:e9:43:df:b6:ab:3e:1e:da:fc:1d:
2a:42:36:0e:88:9c:1f:21:2a:c0:d5:72:32:0c:ad:a7:aa:cc:
32:ea:d8:18:a5:8b:9a:a0:e9:cd:84:5a:76:4d:e6:62:ba:26:
1a:b5:a2:28:bd:7b:da:50:08:89:90:78:de:17:76:d4:f3:f4:
b8:91:4a:3e:c1:a6:c9:90:b5:f9:9d:d8:08:9c:b8:69:9a:1e:
08:54:c4:76:3c:81:ad:0c:74:ff:dd:40:f2:f2:a5:dc:3a:cd:
a2:1e:78:10:4b:08:06:88:1d:96:4d:2d:da:ff:9d:7a:9f:26:
8e:77:72:a3:81:6f:7d:8f:a9:7e:e0:2b:c4:18:51:24:50:72:
62:2b:a5:c8:e6:90:86:e3:72:a4:ab:5f:0c:50:c9:7a:f0:90:
22:77:4a:f9:93:e7:0d:48:4c:7b:23:a5:0b:54:98:04:02:8b:
d7:12:20:0e:cf:c0:8e:1c:58:3b:4e:c8:1e:a8:02:04:be:3c:
6c:15:7f:b5:bb:87:6b:0e:7a:31:07:2e:3e:bc:91:7a:20:c1:
06:78:81:6c:46:a3:a5:e7:e2:ad:39:40:b8:32:fd:dc:e0:59:
8d:1c:57:b4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZlnwuBevyYjq+6/8KKiuTzq65OIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5
MEVGREY1MzAeFw0yNjA1MTIwMzI3NDZaFw0yNjA1MTMwNTI0NDZaMDMxMTAvBgNV
BAMTKDJDM0ZENzgxODEyNTlCODg1ODU5OUUyOEZBMjYxQzIxODUxOEJEQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp96pRgaKWPeu2yjc9wtHe+lVB
k6DDxqI4lMWM3l2XdPUb/P1XC7G54srdkikhTGQHMrRHrXrbZ1MaE3xeQxy8ABF3
BU/vA3x30T5hU4F8uhbGbhwNzR39kAbJxSFt14KXzHJXW+erYzm+2iol6DSahLp6
z7ICUqX4DnJJJs5Bk5hj20g8UhfK6umcvaUcFnLdfyQksfEaKyY8GBsi8yWD/D7Q
PmYcCX5O5yaJ/Q3HD2PhAcTyLCn9eRo3P+nGnufTWJdB5nA78FSyRWECPkdYg9OK
D4ZPDN7562ZzPnhiyOt1kGK72ufZv1GDCKSOISHU/5TRV9XlF3bWpdBznciPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULD/XgYElm4hYWZ4o+iYcIYUYvcUwHwYDVR0j
BBgwFoAUiEeP3KwWWxWepa/f1cCtgJDv31MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGZiNDY2YzYtMzc0My00OTVmLWIxYTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENB
QzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5MEVGREY1My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC84ODQ3OEZEQ0FDMTY1QjE1OUVBNUFGREZENUMwQUQ4MDkwRUZE
RjUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx
YTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFE
ODA5MEVGREY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG1kCIBkfBf+9PsfGleBuVo+AcmBuBw16jR9
6UPftqs+Htr8HSpCNg6InB8hKsDVcjIMraeqzDLq2Bili5qg6c2EWnZN5mK6Jhq1
oii9e9pQCImQeN4XdtTz9LiRSj7BpsmQtfmd2AicuGmaHghUxHY8ga0MdP/dQPLy
pdw6zaIeeBBLCAaIHZZNLdr/nXqfJo53cqOBb32PqX7gK8QYUSRQcmIrpcjmkIbj
cqSrXwxQyXrwkCJ3SvmT5w1ITHsjpQtUmAQCi9cSIA7PwI4cWDtOyB6oAgS+PGwV
f7W7h2sOejEHLj68kXogwQZ4gWxGo6Xn4q05QLgy/dzgWY0cV7Q=
-----END CERTIFICATE-----
Generated at Tue May 12 22:49:52 2026 by rpki-client