
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
File: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft (raw, json)
Hash identifier: Du03p91XzfBf+x70ayDaO4gvk+9Kxn2mKRk9siueCOs=
Subject key identifier: DE:62:50:DB:33:65:39:F7:00:75:14:AA:25:90:5A:CD:4D:13:F7:81
Authority key identifier: 95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36
Certificate issuer: /CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36
Certificate serial: 504AF8AF51C6B1BEF3B593F8FC6C81CF68519600
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:44:12 +0000
Manifest this update: Tue 12 May 2026 18:39:12 +0000
Manifest next update: Wed 13 May 2026 21:57:12 +0000
Files and hashes: 1: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: 0J9oKNbFkC4ek4+yIhYejI4HBbjKDbQ0B3Yfg4Dgqy4=)
2: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl (hash: l9zN8A48jmVuYiuvo8AYueV0tvd9RNLEmRVFTmkes9A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl
rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:4a:f8:af:51:c6:b1:be:f3:b5:93:f8:fc:6c:81:cf:68:51:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36
Validity
Not Before: May 12 18:39:12 2026 GMT
Not After : May 13 21:57:12 2026 GMT
Subject: CN=DE6250DB336539F7007514AA25905ACD4D13F781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:60:f8:19:1d:c4:fe:0a:fd:93:08:a3:15:
7b:5d:07:11:79:8f:db:f4:d8:80:98:1b:5b:33:aa:
a4:38:3b:20:03:0b:3d:ae:6a:ed:83:03:5f:5d:5d:
1e:d5:02:a9:78:8b:c1:f4:8c:3a:a7:36:9f:15:5a:
5d:7b:4f:73:90:dc:21:d6:13:1d:10:c2:43:63:5d:
d4:67:96:bf:22:31:d6:c9:9a:e6:35:73:b3:a2:78:
96:45:c1:92:cf:89:09:aa:22:d5:ad:bc:20:2e:5e:
d2:98:15:5f:81:95:75:91:11:87:42:ff:54:b6:1e:
df:5f:21:0b:e5:c3:46:3b:88:9f:b0:10:83:22:5e:
88:25:0f:d7:91:60:5a:68:0b:96:57:fa:de:7c:ed:
2f:f0:5b:3d:39:52:96:57:1c:c4:8f:a4:f9:97:6c:
92:4e:0b:3d:14:09:33:f1:85:62:3e:f9:21:dd:74:
27:a4:fd:f7:7c:a9:78:df:ac:60:04:65:0b:38:73:
c9:71:84:63:97:52:0c:d6:31:1a:72:1e:0b:e1:2f:
33:3d:75:29:5c:52:1f:0f:77:ee:4c:53:54:b1:b2:
4b:2b:ea:34:0c:42:e8:ad:72:96:cc:91:f4:74:d7:
81:7b:46:9f:b6:67:d7:93:a4:61:81:f8:a0:13:4d:
e8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:62:50:DB:33:65:39:F7:00:75:14:AA:25:90:5A:CD:4D:13:F7:81
X509v3 Authority Key Identifier:
keyid:95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:17:7f:66:63:e4:1a:44:6b:39:dc:e0:d7:ac:48:f1:45:e9:
96:ee:74:fe:45:24:a4:8a:c3:fb:ab:a9:01:47:45:2e:a8:28:
9d:9e:17:c3:7e:20:d8:9f:94:93:ba:fe:e8:81:7b:48:13:ad:
37:84:69:0c:6d:1b:b6:b1:b3:52:e4:29:f3:dc:7b:d1:42:6f:
43:16:c6:a1:17:10:b2:0f:21:71:e0:9b:db:c5:7d:1c:bb:45:
2d:b7:b4:e2:b9:44:33:f7:e8:9b:b0:79:5f:2c:e4:30:90:3c:
88:c8:9e:a7:75:e1:06:38:88:ab:a9:78:47:65:ca:a3:ce:96:
b1:53:fd:c3:56:57:03:31:18:df:a3:75:61:96:f4:13:03:1b:
1b:f4:fe:18:81:47:f4:45:cc:45:b0:ae:63:f4:32:c8:4e:29:
dd:16:35:ac:1f:60:8f:54:15:e3:5c:ec:ec:df:87:74:f9:96:
0e:2c:8e:7d:4c:36:2d:09:3d:ee:91:62:c7:79:47:44:21:ed:
88:36:e3:58:08:4e:7c:b1:19:63:9f:24:62:b9:8a:fd:1a:05:
c4:9b:ef:61:6b:1e:a0:57:ec:e6:64:6a:81:2b:09:f8:b7:20:
31:ea:62:ba:79:e2:cd:f8:62:7d:fc:b2:6a:1f:aa:60:67:9d:
62:4a:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:20:15 2026 by rpki-client