
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft
File: AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft (raw, json)
Hash identifier: PpbYpy/HbDSrNaMt1bMLY7MjYe7ssIu4qhPaq0OG4DY=
Subject key identifier: 69:BC:11:0B:7F:B1:23:5B:93:7A:19:7D:B6:25:F5:91:D9:A7:0A:39
Authority key identifier: AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B
Certificate issuer: /CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B
Certificate serial: 14D3DB78771E721406A662958328FB96705F3C7F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:51:19 +0000
Manifest this update: Tue 12 May 2026 22:46:19 +0000
Manifest next update: Thu 14 May 2026 00:32:19 +0000
Files and hashes: 1: AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl (hash: qhEAvZIqt38kfojHit+IgeA8EgaeZKbYX8gs0kalk54=)
2: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (hash: mIxFRHOE8DmYRrXlDisTfwK6lb1/0VKqM0Rpgtaxvto=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl
rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d3:db:78:77:1e:72:14:06:a6:62:95:83:28:fb:96:70:5f:3c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B
Validity
Not Before: May 12 22:46:19 2026 GMT
Not After : May 14 00:32:19 2026 GMT
Subject: CN=69BC110B7FB1235B937A197DB625F591D9A70A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:80:c9:66:a2:70:65:8d:8b:bd:be:1c:c1:
e7:1d:0a:aa:04:3d:fc:ee:2b:06:a3:fa:28:0d:17:
a6:4f:5a:8d:05:df:a7:ac:49:bf:9b:4d:57:62:03:
c7:bc:f8:3e:f2:8a:c5:a1:88:24:da:f2:8e:f8:09:
17:a1:9b:18:e3:b0:81:9c:79:95:c4:08:0a:fb:18:
8b:67:2d:38:bd:89:cf:6b:ca:2e:90:a4:25:63:23:
d0:ae:07:3f:e2:08:82:3b:c4:01:12:b0:b1:8e:6d:
2c:1a:60:30:4d:91:03:80:72:4a:18:f5:c4:ba:c5:
58:f9:cd:8a:5e:8a:78:c5:da:1f:f4:6b:f3:cb:91:
75:77:5b:31:a7:00:ca:88:95:bd:9c:86:74:df:11:
6f:ea:5e:f7:48:bf:16:3b:49:34:48:b8:b0:22:9b:
09:e1:fb:8a:51:57:1e:2f:c4:5a:58:bf:1e:dd:c2:
9c:7d:3e:27:ef:d7:43:2c:80:9f:70:49:c1:75:9b:
4c:bd:be:2b:f8:b1:95:a8:4b:ea:11:d5:30:43:05:
7c:6c:ca:95:d6:a3:96:b9:c9:72:1c:b4:2d:34:af:
81:8e:e2:92:7a:06:54:17:41:41:f1:ff:f2:cd:6f:
2b:c3:45:df:1e:d0:ac:fd:cd:33:ea:21:a6:33:67:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BC:11:0B:7F:B1:23:5B:93:7A:19:7D:B6:25:F5:91:D9:A7:0A:39
X509v3 Authority Key Identifier:
keyid:AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d1:cc:1f:3c:2d:bd:79:26:ea:b2:ab:7c:7a:b1:5e:4e:6c:
54:16:e3:25:cf:ab:f3:92:8f:3e:0c:c5:7d:63:90:6c:60:73:
c9:be:70:2a:3c:4a:c0:bf:85:fe:e4:da:7e:c5:24:35:98:ef:
3f:41:3f:a8:9d:93:3a:08:31:7f:35:f1:8b:06:08:a3:03:1b:
af:5f:bb:87:14:c7:fd:87:5a:fd:f5:b2:d8:17:f1:3d:89:bb:
7c:dc:0e:22:4d:06:bf:c4:e5:dc:94:1d:1a:a7:76:22:ee:e8:
33:79:1d:23:8b:1d:4d:88:27:fc:52:84:3f:f2:de:c7:07:5d:
52:ac:3d:af:af:90:11:c9:b1:6f:cb:4e:a1:0a:a7:33:1b:e7:
5f:ed:07:03:b5:6d:37:da:d2:74:44:78:07:cc:12:7a:00:4d:
80:0c:5c:1b:b7:95:2e:f1:fe:17:fb:9e:8c:46:be:df:ac:6f:
69:26:3e:26:25:8a:ce:ab:33:55:61:9a:40:87:35:1d:93:b0:
4d:48:22:4c:d0:e8:36:69:9f:30:c9:22:27:ca:e1:c8:6d:35:
80:8c:93:a8:63:a6:bb:d0:b6:a0:54:2b:43:1d:30:f3:22:b5:
c4:66:1b:79:56:7c:d0:45:a4:89:2a:6d:d5:23:5d:39:0f:b2:
14:1a:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:04 2026 by rpki-client