
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft
File: B07262415656C2D65AF1FB6B516A57353FEA8D40.mft (raw, json)
Hash identifier: /9mOVSnFKhj/3oWbltpVGJSkn/giyHYyO0etnn3M5w0=
Subject key identifier: 21:5C:E5:DF:86:BC:B4:E2:62:2E:1A:38:A6:5E:DE:F4:3B:3A:D0:DE
Authority key identifier: B0:72:62:41:56:56:C2:D6:5A:F1:FB:6B:51:6A:57:35:3F:EA:8D:40
Certificate issuer: /CN=B07262415656C2D65AF1FB6B516A57353FEA8D40
Certificate serial: 03E5FFA6E5DBF0549A373A3D9FC94E504D1FE0C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:51:17 +0000
Manifest this update: Tue 12 May 2026 19:46:17 +0000
Manifest next update: Wed 13 May 2026 23:02:17 +0000
Files and hashes: 1: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: HMulnii/HDUOgXgEUkM8p+8sNcb96i7rF2Rlq6FbVIs=)
2: B07262415656C2D65AF1FB6B516A57353FEA8D40.crl (hash: HV1UOHAZ1hahS5g71Yv/OgxK97A29kVKSVqiaS6//3k=)
3: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: 5+QjDX8KG0DdCRMLkCdouqkAivuUBYGCvdZURD0Juiw=)
4: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: TU34W0uej+lBgrEZ9f3pjCsz5qnJOOeLATUQpCTCETg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.crl
rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e5:ff:a6:e5:db:f0:54:9a:37:3a:3d:9f:c9:4e:50:4d:1f:e0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B07262415656C2D65AF1FB6B516A57353FEA8D40
Validity
Not Before: May 12 19:46:17 2026 GMT
Not After : May 13 23:02:17 2026 GMT
Subject: CN=215CE5DF86BCB4E2622E1A38A65EDEF43B3AD0DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:f1:13:b2:f2:05:05:e2:0d:92:ae:82:95:
21:eb:ca:aa:86:b0:9d:80:87:aa:e6:84:0f:1a:ce:
47:8f:8a:30:e7:a1:40:cd:b9:56:6c:00:3f:7d:e0:
52:a7:b4:3b:d6:96:21:ea:8c:b3:40:ff:58:0f:92:
37:67:de:14:29:b1:28:60:81:d3:fe:15:3d:9b:36:
11:b3:f5:d8:e5:62:a9:b0:b6:c1:a9:f5:a1:8d:89:
c4:24:3d:d2:79:23:da:46:e7:1c:8c:95:f8:46:80:
42:b8:29:ae:d4:39:52:60:9d:27:9f:44:2b:0d:64:
3e:4a:01:b3:71:20:e7:fb:3c:c4:91:28:e1:89:ed:
8a:4a:6b:5f:e7:36:2e:68:c0:94:7b:52:4b:96:e5:
8b:1b:af:1d:4f:7b:51:68:23:84:10:1d:69:a8:8f:
f8:44:a2:7c:1f:56:da:97:cd:19:d5:ff:b5:0e:48:
be:52:f9:63:37:c9:56:fd:74:3c:ed:ad:8d:aa:18:
7b:fd:7c:e9:d3:71:60:0a:70:80:3f:03:bb:ac:8f:
11:81:6d:4b:14:26:e9:58:e6:a1:7d:4f:b7:96:41:
46:43:94:78:45:00:a0:aa:94:52:ca:fc:87:13:70:
03:e9:c8:98:ec:1b:4e:e5:09:11:55:1a:cd:c9:64:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5C:E5:DF:86:BC:B4:E2:62:2E:1A:38:A6:5E:DE:F4:3B:3A:D0:DE
X509v3 Authority Key Identifier:
keyid:B0:72:62:41:56:56:C2:D6:5A:F1:FB:6B:51:6A:57:35:3F:EA:8D:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6a:bc:26:76:05:a7:13:9f:d5:46:e0:5c:14:98:5a:31:65:
f5:cb:3e:3a:4d:52:5a:72:83:59:ae:2a:f3:8e:37:bb:63:16:
5f:b6:3b:bb:04:45:5c:c1:a8:28:d9:7e:28:2f:0f:f9:45:e6:
47:87:9d:d3:61:c7:c8:9a:b7:5f:3e:9c:75:78:08:6f:fc:99:
15:1d:01:a9:92:c3:75:49:14:ee:97:f3:cc:94:3b:d6:4e:98:
ee:ea:b6:3f:be:9b:1b:26:0a:53:af:86:11:2b:5a:64:01:4d:
5c:4f:14:ca:68:1d:19:cb:de:09:3f:44:62:92:30:9f:66:32:
df:8f:47:6a:25:c0:11:15:16:6c:f4:bf:90:d7:6d:ef:aa:d7:
29:ca:7d:93:9a:9c:94:09:be:7e:fc:61:50:b2:17:31:a5:55:
2b:8c:72:54:38:95:e3:1f:4c:9b:ef:a0:21:30:e4:35:13:39:
06:76:e0:0a:0f:e9:b4:e7:37:c1:72:63:99:6e:77:7e:c2:00:
3f:a2:12:e8:a5:7b:0f:e8:99:da:77:0c:c0:a7:d4:05:61:6a:
1e:da:bb:58:7e:6c:e4:65:09:80:3a:1b:2f:3d:fa:d3:20:d2:
42:8d:32:f0:0f:57:52:34:b8:df:c7:2e:b3:be:81:74:10:4b:
63:15:9e:cc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUA+X/puXb8FSaNzo9n8lOUE0f4McwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA3MjYyNDE1NjU2QzJENjVBRjFGQjZCNTE2QTU3MzUz
RkVBOEQ0MDAeFw0yNjA1MTIxOTQ2MTdaFw0yNjA1MTMyMzAyMTdaMDMxMTAvBgNV
BAMTKDIxNUNFNURGODZCQ0I0RTI2MjJFMUEzOEE2NUVERUY0M0IzQUQwREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1v/ETsvIFBeINkq6ClSHryqqG
sJ2Ah6rmhA8azkePijDnoUDNuVZsAD994FKntDvWliHqjLNA/1gPkjdn3hQpsShg
gdP+FT2bNhGz9djlYqmwtsGp9aGNicQkPdJ5I9pG5xyMlfhGgEK4Ka7UOVJgnSef
RCsNZD5KAbNxIOf7PMSRKOGJ7YpKa1/nNi5owJR7UkuW5Ysbrx1Pe1FoI4QQHWmo
j/hEonwfVtqXzRnV/7UOSL5S+WM3yVb9dDztrY2qGHv9fOnTcWAKcIA/A7usjxGB
bUsUJulY5qF9T7eWQUZDlHhFAKCqlFLK/IcTcAPpyJjsG07lCRFVGs3JZI25AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIVzl34a8tOJiLho4pl7e9Ds60N4wHwYDVR0j
BBgwFoAUsHJiQVZWwtZa8ftrUWpXNT/qjUAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTU5NWI3ZDQtM2FhYi00YjgzLTk0YjItYzQyNjdiMmFlMGEwLzAvQjA3MjYyNDE1
NjU2QzJENjVBRjFGQjZCNTE2QTU3MzUzRkVBOEQ0MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMDcyNjI0MTU2NTZDMkQ2NUFGMUZCNkI1MTZBNTczNTNGRUE4
RDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU5NWI3ZDQtM2FhYi00YjgzLTk0
YjItYzQyNjdiMmFlMGEwLzAvQjA3MjYyNDE1NjU2QzJENjVBRjFGQjZCNTE2QTU3
MzUzRkVBOEQ0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADdqvCZ2BacTn9VG4FwUmFoxZfXLPjpNUlpy
g1muKvOON7tjFl+2O7sERVzBqCjZfigvD/lF5keHndNhx8iat18+nHV4CG/8mRUd
AamSw3VJFO6X88yUO9ZOmO7qtj++mxsmClOvhhErWmQBTVxPFMpoHRnL3gk/RGKS
MJ9mMt+PR2olwBEVFmz0v5DXbe+q1ynKfZOanJQJvn78YVCyFzGlVSuMclQ4leMf
TJvvoCEw5DUTOQZ24AoP6bTnN8FyY5lud37CAD+iEuilew/omdp3DMCn1AVhah7a
u1h+bORlCYA6Gy89+tMg0kKNMvAPV1I0uN/HLrO+gXQQS2MVnsw=
-----END CERTIFICATE-----
Generated at Wed May 13 00:21:44 2026 by rpki-client