
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft
File: D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft (raw, json)
Hash identifier: DvjmxDJ6F2OdyiWskE2hE7pSIely9Vyym/AdpVffPtU=
Subject key identifier: E8:AE:A1:A4:76:5F:A2:2B:FF:44:D8:C5:9F:9D:E9:F8:D2:65:AB:AE
Authority key identifier: D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05
Certificate issuer: /CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105
Certificate serial: 7D77A39BAF047EB2DCB0B6063B687BC953190A06
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 02:25:39 +0000
Manifest this update: Tue 12 May 2026 02:20:39 +0000
Manifest next update: Wed 13 May 2026 03:46:39 +0000
Files and hashes: 1: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: z0PNiSkl97AAkKJELLOVf430z2bBk4x4W6fIOoHOGmo=)
2: D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl (hash: hHiCX72q9BEUiEc1ZpVffEFTvW4nJSlFpnEvfw8sTlg=)
3: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: N+OTkKCrsA8j5gwyH0Mpha31q8YHuNMGpdCuA0VgWcY=)
4: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: TWEuLcbFsQpYWxLsu1a0ItVks1vfqJFaCCURAAEUNEI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl
rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 03:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:77:a3:9b:af:04:7e:b2:dc:b0:b6:06:3b:68:7b:c9:53:19:0a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105
Validity
Not Before: May 12 02:20:39 2026 GMT
Not After : May 13 03:46:39 2026 GMT
Subject: CN=E8AEA1A4765FA22BFF44D8C59F9DE9F8D265ABAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:83:c7:6e:e7:94:d2:67:15:eb:22:a1:1e:
ee:5f:3e:7c:00:21:18:18:84:5e:15:49:dc:d1:fc:
c5:87:71:22:cd:5d:de:c6:05:a1:ba:7a:ff:11:a4:
49:47:38:67:c3:8d:7f:2e:42:ea:f1:d6:6b:b9:e4:
aa:32:58:f7:1b:76:4b:be:c9:8e:b5:53:97:c0:91:
0d:ae:8c:64:b6:36:bb:5c:17:c9:fa:3e:d8:7e:3f:
14:c8:31:d8:f5:7d:51:fa:11:fa:9f:35:6f:de:e2:
75:70:27:a2:f0:93:51:79:1e:44:31:e1:9a:cc:60:
06:08:3f:c1:5e:ba:57:2b:09:48:74:db:4a:03:17:
80:70:97:a8:bc:07:cc:a1:3e:45:e2:af:11:15:97:
88:af:4a:f2:13:5f:5a:1c:17:14:f9:62:2a:f7:b2:
7d:1c:98:92:00:7a:85:6c:b2:a2:b7:91:e6:0e:13:
b5:8e:f9:c6:4a:c4:8a:9e:a2:cf:7e:bd:00:6c:a8:
41:15:3f:d0:9b:d6:36:da:d6:6f:77:e7:5f:fb:37:
d2:49:01:9a:3f:45:5e:05:c2:33:65:01:86:c6:50:
c7:0a:ab:d2:b9:16:2e:5b:af:13:1c:91:f0:2d:5c:
11:96:ef:06:d5:83:4a:64:cf:e9:1f:36:fb:e2:b6:
af:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AE:A1:A4:76:5F:A2:2B:FF:44:D8:C5:9F:9D:E9:F8:D2:65:AB:AE
X509v3 Authority Key Identifier:
keyid:D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:43:75:51:ec:3b:e4:7e:48:70:c0:86:40:f1:a6:ad:23:b7:
92:c4:f8:3e:3f:be:7c:c3:af:eb:2f:2c:fd:3a:5f:88:19:cf:
04:ae:09:16:ba:d8:1b:d1:c6:e8:70:9e:81:37:21:6d:ce:67:
75:f1:0c:1c:52:58:b4:c9:73:f4:4d:51:60:5c:c7:fe:70:de:
69:8c:44:84:ba:e4:8c:3a:30:4d:c3:83:82:75:ff:3d:5e:53:
37:1a:21:09:8b:c6:67:a6:f1:7b:c4:9f:01:da:6e:97:e4:79:
19:6d:57:2a:ba:bf:e9:66:96:fb:7f:c7:59:80:1d:0f:82:df:
42:94:1d:f9:ba:4e:53:b2:6f:73:b2:5c:bb:c1:57:ea:92:3f:
24:11:bd:0b:97:4c:30:5e:aa:d2:25:41:03:38:fc:a1:13:f1:
43:80:91:45:e8:7a:86:9f:a5:bf:8a:bf:b2:65:c2:a1:dd:3c:
6c:28:2f:dd:4c:40:7d:89:b5:7b:4d:cb:13:ed:9f:08:be:49:
05:2e:45:57:61:b3:3c:df:6d:a3:a1:6a:d9:0f:3e:e1:f7:ec:
3f:e8:09:87:e7:4c:23:7c:22:9c:07:50:88:44:d8:a5:08:78:
02:38:02:8f:ef:83:a2:91:3a:83:d0:a1:11:c1:fc:96:63:c4:
1d:c0:4d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:30 2026 by rpki-client