
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft
File: 95C0FEDF4348635C616CCD76866299FFF41521C1.mft (raw, json)
Hash identifier: xBKWx8K0mrLPUnWVDVbstShFTcFHjqRLjiLddGavigQ=
Subject key identifier: 90:22:DE:A2:F6:DF:38:0A:47:2E:F0:3B:C5:83:51:11:E4:F8:3E:3B
Authority key identifier: 95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1
Certificate issuer: /CN=95C0FEDF4348635C616CCD76866299FFF41521C1
Certificate serial: 2FAA546939E7DD28F5E658FA360ABAA8C2CD0E3A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:27:23 +0000
Manifest this update: Tue 12 May 2026 20:22:23 +0000
Manifest next update: Wed 13 May 2026 21:08:23 +0000
Files and hashes: 1: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: nctWeqdG+C+yzM3us3hfFDeGU29WHbKA/XQo+aeaR/w=)
2: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: h+0fD6qzNLY/87deDA6R1jRhs0ceFeWyvO6Ew7fmyvY=)
3: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: O1v/bS1Rz6LYE4uphPLJ6skO/weLSpE9O9uIKbdx440=)
4: 95C0FEDF4348635C616CCD76866299FFF41521C1.crl (hash: T9rQ2YW29za09e+9fQda5A5KTlLBdQLA6b1N7FxsvUQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl
rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:aa:54:69:39:e7:dd:28:f5:e6:58:fa:36:0a:ba:a8:c2:cd:0e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95C0FEDF4348635C616CCD76866299FFF41521C1
Validity
Not Before: May 12 20:22:23 2026 GMT
Not After : May 13 21:08:23 2026 GMT
Subject: CN=9022DEA2F6DF380A472EF03BC5835111E4F83E3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:43:b2:42:07:90:69:99:86:3d:37:66:33:
ea:3b:ad:d0:38:f8:f8:4a:14:f4:41:6e:3c:de:85:
bf:5b:5d:8f:cc:34:02:1b:7c:50:33:86:c9:a1:b7:
f7:78:13:85:22:5f:b0:73:2f:22:a7:31:d1:eb:f5:
80:87:ac:05:f5:27:95:7e:0f:96:29:e5:03:82:83:
85:cd:b2:f9:a5:3a:e6:f2:9c:93:bb:70:04:d8:15:
83:c9:e5:03:31:d6:3b:35:53:96:d9:b0:c3:4e:36:
80:8f:73:de:d6:fc:a6:fe:60:65:ac:1f:6b:c8:f4:
72:44:03:77:f3:2c:14:e1:fb:18:04:29:0f:6c:8d:
cf:40:12:d0:16:87:b8:72:bf:ba:99:bc:09:13:6f:
92:74:5a:25:d3:61:8e:73:95:6b:e3:db:82:6d:2e:
34:b7:5f:a0:ba:55:37:f9:2d:f3:cf:14:67:68:d7:
9e:03:6f:22:a3:2f:a2:d6:46:4e:0d:66:e3:82:36:
df:d3:40:e6:f2:ea:39:98:1b:2a:ae:f2:4d:be:42:
a8:7e:72:a8:88:00:bd:33:18:6e:f5:f0:d9:b9:9f:
32:50:97:43:41:30:ab:75:db:71:a5:ed:ef:e3:87:
3b:c7:09:9a:a9:55:18:bf:53:f5:c9:2d:29:a0:3f:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:22:DE:A2:F6:DF:38:0A:47:2E:F0:3B:C5:83:51:11:E4:F8:3E:3B
X509v3 Authority Key Identifier:
keyid:95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:55:a3:16:b2:78:ac:c0:58:b7:35:c1:3c:48:a5:2e:82:d2:
76:c5:cb:07:a3:01:bf:18:c2:17:ae:f2:f0:dc:50:eb:31:8f:
40:26:aa:ff:70:75:b5:da:07:fe:0b:b7:31:6f:18:e5:7a:ed:
dc:cb:09:41:76:6c:db:7a:f4:1c:3c:82:dd:e3:1c:63:01:ef:
d1:bd:78:0b:23:5c:46:d2:55:1c:f4:02:7b:c6:b2:9a:fd:d6:
27:33:4d:17:94:e5:00:bc:1d:da:6d:76:58:8d:bc:ab:ec:31:
56:de:a7:10:8b:ce:9a:fa:c3:78:6a:5c:69:2c:5e:49:3f:a1:
f9:7d:2d:ef:be:c1:99:af:83:d3:60:29:2e:99:67:39:da:84:
30:5f:2c:bc:62:bc:c6:5e:ef:4b:95:a6:51:c7:04:fb:69:c5:
74:96:f7:bd:1b:5b:05:32:80:34:f0:7c:d4:b7:a0:78:18:e3:
d8:1f:df:e7:51:f0:2c:44:13:2d:a7:3e:e6:4f:0b:39:1c:76:
ac:b7:c2:59:78:dc:0e:a0:2e:a3:8a:28:f4:76:51:70:e3:18:
7a:a3:27:be:9b:6b:b7:74:dd:31:1a:40:fb:5e:0c:a9:56:da:
42:23:1e:d7:37:cd:f3:c0:c0:e1:67:85:13:4b:ef:ce:ac:55:
56:bf:42:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:30 2026 by rpki-client