
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
File: 6372758CCA381920292B5E0D338ECF89D0000FEE.mft (raw, json)
Hash identifier: QdRyzM5K2FncNePMdVoEsqfdPGtpNId/dKM4VYJaV+U=
Subject key identifier: 1A:97:88:B9:B9:60:BF:D7:FC:EB:11:B3:5A:73:19:F8:FB:34:FC:6F
Authority key identifier: 63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE
Certificate issuer: /CN=6372758CCA381920292B5E0D338ECF89D0000FEE
Certificate serial: 3C2BAB17BFB7FE22E73F8DB1E4F0A5C2939D2CB6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 09:25:49 +0000
Manifest this update: Tue 12 May 2026 09:20:49 +0000
Manifest next update: Wed 13 May 2026 13:11:49 +0000
Files and hashes: 1: 3130332e35332e302e302f32322d3234203d3e203633383733.roa (hash: mNLYMhzy89PxQTAE+kur6oFEKDHuq9q324ipGGtSuR0=)
2: 34352e3131352e3133362e302f32322d3234203d3e203633383733.roa (hash: ZBadKIUk/3x1VD+iY8T20vrwwxnWCyDi/bgS1szA1DA=)
3: 6372758CCA381920292B5E0D338ECF89D0000FEE.crl (hash: VcepEYs2urBw6TPGuJVx4i40+7IdBpf5UMhEiYVXG2U=)
4: 323430323a323638303a3a2f33322d3438203d3e203633383733.roa (hash: qVD+Jwv4pLsFsaxaJgqqF4GhPj5gMv8oiQOKOq7eBlk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl
rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:2b:ab:17:bf:b7:fe:22:e7:3f:8d:b1:e4:f0:a5:c2:93:9d:2c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6372758CCA381920292B5E0D338ECF89D0000FEE
Validity
Not Before: May 12 09:20:49 2026 GMT
Not After : May 13 13:11:49 2026 GMT
Subject: CN=1A9788B9B960BFD7FCEB11B35A7319F8FB34FC6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:97:f2:62:d9:1f:a7:3a:db:a9:4b:52:fa:
b8:c6:3d:72:37:3c:9e:63:99:64:1c:87:ed:3f:7d:
69:29:12:78:7f:45:ed:4c:00:28:72:44:79:ff:28:
14:0a:1c:99:79:9b:bc:14:9b:6e:dd:d6:a8:c0:59:
0f:88:9c:ef:75:3a:a9:9e:2e:6b:81:ec:09:72:6e:
5d:4f:ea:66:10:aa:97:1b:d4:c5:80:48:a6:d8:0e:
8d:e7:7f:fe:4d:e8:f9:30:3a:9c:e8:ec:7c:72:a2:
b2:44:d9:37:6f:98:6c:42:ae:8f:40:05:ce:df:6e:
b7:73:a1:f0:52:99:5b:59:77:ed:5d:a6:54:ea:4e:
38:18:8b:a6:69:34:e0:5b:e3:79:36:46:2c:10:03:
62:e2:b7:3d:c3:10:33:67:30:38:f0:22:2d:96:27:
7a:1f:17:12:fd:cc:6d:98:f6:da:2c:e7:09:b8:b3:
a4:26:c6:11:80:ab:3d:69:82:46:c4:90:35:94:8d:
a6:d3:a9:f5:95:86:df:ab:ff:2d:71:69:2f:21:9a:
ec:cb:7b:e6:38:af:5a:76:c8:d7:49:b0:88:57:10:
e9:c1:4f:c0:e5:1a:d6:0f:fd:d7:cf:30:2e:23:c3:
06:e0:a7:eb:a2:51:0c:41:71:d9:93:41:8e:5f:ad:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:97:88:B9:B9:60:BF:D7:FC:EB:11:B3:5A:73:19:F8:FB:34:FC:6F
X509v3 Authority Key Identifier:
keyid:63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:41:3c:17:12:cb:56:2f:9f:88:1a:52:89:e0:92:28:61:ff:
59:9d:a8:08:8b:f8:36:88:d3:15:91:b6:cb:eb:bb:2f:cc:41:
48:02:ad:d2:65:a4:1c:a8:e0:63:17:e1:d1:b8:a0:ad:94:9e:
32:bf:a5:be:d6:5b:53:5d:e1:f2:d0:a8:ee:51:5b:a4:bc:72:
39:a1:2f:f4:f0:30:c5:9b:9c:e9:e2:37:16:ef:db:f4:0c:70:
37:0c:0e:61:e1:a7:5b:93:42:c4:c8:f9:02:24:95:6e:19:7d:
1e:cd:0d:3f:cb:e2:06:8d:d1:6b:b4:30:86:7d:38:0e:a3:51:
71:db:da:e4:7d:be:24:9b:74:c9:db:af:95:6d:70:3c:cf:12:
04:dc:5a:70:d4:65:8a:d6:89:31:42:f0:a8:ba:0d:88:5c:94:
ba:fd:6f:7f:86:6d:71:d4:f7:30:92:43:18:86:34:14:e8:d6:
b0:8d:f9:14:fb:96:f4:6c:96:27:8a:5d:29:14:f2:86:36:ed:
e1:d4:9a:81:e7:7f:a4:66:7b:57:82:b5:10:63:be:85:63:a7:
10:7e:a2:3f:14:51:29:79:f1:34:40:bd:66:36:32:73:1c:e7:
5e:54:b1:8d:76:de:3a:31:5f:c5:e6:f8:ae:1e:f0:6d:b6:47:
d6:1d:d5:e5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPCurF7+3/iLnP42x5PClwpOdLLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM3Mjc1OENDQTM4MTkyMDI5MkI1RTBEMzM4RUNGODlE
MDAwMEZFRTAeFw0yNjA1MTIwOTIwNDlaFw0yNjA1MTMxMzExNDlaMDMxMTAvBgNV
BAMTKDFBOTc4OEI5Qjk2MEJGRDdGQ0VCMTFCMzVBNzMxOUY4RkIzNEZDNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1NpfyYtkfpzrbqUtS+rjGPXI3
PJ5jmWQch+0/fWkpEnh/Re1MAChyRHn/KBQKHJl5m7wUm27d1qjAWQ+InO91Oqme
LmuB7Alybl1P6mYQqpcb1MWASKbYDo3nf/5N6PkwOpzo7HxyorJE2TdvmGxCro9A
Bc7fbrdzofBSmVtZd+1dplTqTjgYi6ZpNOBb43k2RiwQA2Litz3DEDNnMDjwIi2W
J3ofFxL9zG2Y9tos5wm4s6QmxhGAqz1pgkbEkDWUjabTqfWVht+r/y1xaS8hmuzL
e+Y4r1p2yNdJsIhXEOnBT8DlGtYP/dfPMC4jwwbgp+uiUQxBcdmTQY5frWihAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGpeIublgv9f86xGzWnMZ+Ps0/G8wHwYDVR0j
BBgwFoAUY3J1jMo4GSApK14NM47PidAAD+4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWM1MWU3YWItYTYzOC00ZmEwLWJiY2MtYjBmODU2YThhMTU3LzAvNjM3Mjc1OEND
QTM4MTkyMDI5MkI1RTBEMzM4RUNGODlEMDAwMEZFRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82MzcyNzU4Q0NBMzgxOTIwMjkyQjVFMEQzMzhFQ0Y4OUQwMDAw
RkVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM1MWU3YWItYTYzOC00ZmEwLWJi
Y2MtYjBmODU2YThhMTU3LzAvNjM3Mjc1OENDQTM4MTkyMDI5MkI1RTBEMzM4RUNG
ODlEMDAwMEZFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFhBPBcSy1Yvn4gaUongkihh/1mdqAiL+DaI
0xWRtsvruy/MQUgCrdJlpByo4GMX4dG4oK2UnjK/pb7WW1Nd4fLQqO5RW6S8cjmh
L/TwMMWbnOniNxbv2/QMcDcMDmHhp1uTQsTI+QIklW4ZfR7NDT/L4gaN0Wu0MIZ9
OA6jUXHb2uR9viSbdMnbr5VtcDzPEgTcWnDUZYrWiTFC8Ki6DYhclLr9b3+GbXHU
9zCSQxiGNBTo1rCN+RT7lvRslieKXSkU8oY27eHUmoHnf6Rme1eCtRBjvoVjpxB+
oj8UUSl58TRAvWY2MnMc515UsY123joxX8Xm+K4e8G22R9Yd1eU=
-----END CERTIFICATE-----
Generated at Tue May 12 22:13:26 2026 by rpki-client