
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft
File: 0D2802EC43905EEA387602B994B8B579041C8507.mft (raw, json)
Hash identifier: WKfW/nNOpTHWJ6cKtdqWA/d50tf5TUqAlzps9l1aFRc=
Subject key identifier: 39:20:F5:39:24:73:6A:6E:ED:8D:49:1F:7D:14:FC:78:9B:A2:EF:D1
Authority key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07
Certificate issuer: /CN=0D2802EC43905EEA387602B994B8B579041C8507
Certificate serial: 4878F6AF0D3802C559B93A30FE642B295F71998A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 05:46:19 +0000
Manifest this update: Tue 12 May 2026 05:41:19 +0000
Manifest next update: Wed 13 May 2026 07:43:19 +0000
Files and hashes: 1: 3130332e3133372e33382e302f32332d3233203d3e20313534343130.roa (hash: vSt0O12iEjIfejoamLvxd1FSHE5umSqpwwku+iFtKN4=)
2: 0D2802EC43905EEA387602B994B8B579041C8507.crl (hash: mGLYTUndc7le5rxLJ0RH2CFkPh1Fv1iAcDJ+MDpkKz0=)
3: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: reeIiuxuHqr4MgHpxEsClw20lXN/gmt1yXdlXdiGltI=)
4: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: qd7L3Ietl/ythiF1v/evymxuReB0q3gMulxwNnwRr60=)
5: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: cszw5piIkmysL+SZS8lElBtByo5QIz3Wp1PoZt/A7vY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl
rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:78:f6:af:0d:38:02:c5:59:b9:3a:30:fe:64:2b:29:5f:71:99:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D2802EC43905EEA387602B994B8B579041C8507
Validity
Not Before: May 12 05:41:19 2026 GMT
Not After : May 13 07:43:19 2026 GMT
Subject: CN=3920F53924736A6EED8D491F7D14FC789BA2EFD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:e7:b5:e7:25:68:ea:aa:c2:90:35:46:60:
72:e6:77:de:6f:ef:b2:01:3f:95:85:6c:89:75:58:
00:3e:97:de:f4:ab:8f:6c:ce:56:eb:57:5e:ba:7d:
6b:d5:09:b3:11:b4:a0:dd:34:13:3b:ae:12:65:f3:
c5:6a:67:76:d2:67:5c:3c:60:31:e6:e3:f8:09:71:
0c:35:c1:85:aa:15:30:f7:3b:b3:63:e6:b2:45:85:
d5:ec:69:52:a0:31:ef:ec:51:2b:7e:00:08:77:60:
ac:b6:4e:d1:02:eb:39:a2:58:ef:11:74:e1:2b:31:
1c:8e:f1:69:fc:9f:96:8f:6b:ea:29:82:c7:49:54:
91:fd:75:2f:a8:c8:0e:09:e1:4c:83:8f:ac:1a:e1:
eb:cc:c5:97:c4:a0:b5:21:74:12:a0:63:01:81:2c:
52:9c:c0:d5:8a:cc:4a:ab:fb:fa:81:76:86:46:9c:
ee:33:6e:2a:91:88:1e:6e:4b:95:8b:03:06:0b:3a:
c9:c7:8a:6e:e0:dc:8f:c4:77:3b:7e:86:94:31:92:
ff:58:30:95:91:7d:f9:07:eb:31:f5:0e:cd:92:3f:
37:75:70:0d:64:f5:b4:03:6f:08:b0:3b:ef:a5:32:
04:dd:56:65:ee:65:96:dd:bd:6b:26:a8:18:23:0f:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:20:F5:39:24:73:6A:6E:ED:8D:49:1F:7D:14:FC:78:9B:A2:EF:D1
X509v3 Authority Key Identifier:
keyid:0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6b:8d:54:d1:a1:07:a8:f8:97:f5:aa:50:38:07:d4:c5:ad:
92:14:4f:82:13:cd:91:a7:c9:f9:f0:be:f5:58:95:8d:fb:db:
46:a0:16:c6:ac:83:2c:83:80:73:47:31:26:ee:57:3d:bd:82:
c3:64:f1:6c:8e:55:4c:eb:63:fa:1a:db:d6:5e:f8:31:ef:49:
c4:0e:86:66:f0:5e:de:0a:4b:ae:56:5b:11:19:d3:51:2a:16:
2c:da:15:78:94:28:e4:5e:4e:c0:75:5a:17:59:47:df:8d:32:
ea:1f:7f:02:10:45:c2:90:32:35:8f:3c:1f:2c:60:b8:c8:94:
b6:ec:2d:e5:d7:33:97:d4:be:c4:eb:7f:21:f4:9c:1c:27:7b:
b2:ef:05:c4:6a:dc:db:05:69:62:1e:24:8e:1a:ea:2b:c6:8e:
da:e0:cc:c9:9b:f6:b8:7a:46:a6:ee:9f:1e:6a:db:a6:8c:a4:
3b:c4:6d:d7:ed:a4:b3:c0:8e:8e:bd:58:01:53:46:e5:41:41:
93:7e:e2:d7:95:40:37:04:1b:45:41:b8:08:af:18:06:f3:5b:
ee:4e:f5:7c:3f:5f:48:94:b9:fe:8b:c5:bd:ab:ac:76:c6:a8:
69:a9:1b:da:51:cc:56:ef:5b:68:a3:3f:2a:5c:08:c0:d4:e8:
a9:3c:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:38 2026 by rpki-client