
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
File: ADF61245661464C6C8800AFF335206958F2DA807.mft (raw, json)
Hash identifier: nhZHCHAmZjVhhsHTrC0y6HGirQ8wmDAe2rWyqZOIvTg=
Subject key identifier: D7:D0:68:A2:09:F7:D4:B0:A6:52:48:6C:09:A0:03:FD:16:6B:EB:26
Authority key identifier: AD:F6:12:45:66:14:64:C6:C8:80:0A:FF:33:52:06:95:8F:2D:A8:07
Certificate issuer: /CN=ADF61245661464C6C8800AFF335206958F2DA807
Certificate serial: 1391137303C11F4FE8E2BC7D13AAC08BA9FB143C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF61245661464C6C8800AFF335206958F2DA807.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 19:54:11 +0000
Manifest this update: Tue 02 Jun 2026 19:49:11 +0000
Manifest next update: Wed 03 Jun 2026 22:32:11 +0000
Files and hashes: 1: 3130332e38392e3234322e302f32342d3234203d3e20313530393133.roa (hash: owSfTkypHLSK5DikAhWXjes3F0fNiVqc3tZbIOFlw4s=)
2: ADF61245661464C6C8800AFF335206958F2DA807.crl (hash: F94G93NV1pZ9aN5IkPC32f6wWp8GW+4NxzCBX6AXeSY=)
3: 3130332e38392e3234332e302f32342d3234203d3e20313530393133.roa (hash: mnmK9VjAzZX2nXMP/Hz0WV6eU5IRZ0uI7bQgiKIuUvQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.crl
rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF61245661464C6C8800AFF335206958F2DA807.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:91:13:73:03:c1:1f:4f:e8:e2:bc:7d:13:aa:c0:8b:a9:fb:14:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADF61245661464C6C8800AFF335206958F2DA807
Validity
Not Before: Jun 2 19:49:11 2026 GMT
Not After : Jun 3 22:32:11 2026 GMT
Subject: CN=D7D068A209F7D4B0A652486C09A003FD166BEB26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:67:4d:71:4e:d5:36:73:d2:73:29:6f:9d:ab:
f7:e3:5a:eb:77:de:fb:ce:89:61:b7:16:59:e2:93:
9f:dd:73:84:70:62:79:f5:c9:ca:f2:3c:0f:44:74:
d0:9c:03:17:85:e6:e6:a0:5d:20:c3:13:8a:85:13:
f9:1d:fe:1a:0d:fe:64:02:fd:5c:22:37:03:44:5c:
ba:39:e2:90:6d:23:9f:06:1e:25:85:a1:64:31:90:
3d:33:fb:25:a7:32:1d:e8:37:3c:f8:45:b5:46:b5:
2c:29:0d:79:60:e9:2e:17:43:a5:81:62:f3:72:33:
c6:3a:41:5c:07:30:66:32:44:47:ff:af:2b:54:d8:
26:58:ed:ab:ee:17:5a:6d:f1:9c:84:a2:41:58:60:
20:6b:d2:5a:df:49:5d:9a:48:91:30:18:16:80:ff:
d2:2a:e5:82:64:62:e9:56:3e:9a:3f:d8:61:57:c8:
51:ea:d2:9d:d1:3e:a2:df:2a:f1:8a:3e:c5:5c:7b:
a5:bf:ed:cd:7f:e1:c3:6c:3b:af:a9:ce:83:6f:d7:
92:ea:cd:6b:66:f6:28:52:91:26:ed:9a:0c:e3:20:
a1:d3:36:b0:ce:3d:e6:04:3f:93:3a:93:b6:40:13:
e2:dd:88:4d:13:82:72:58:8e:08:be:d9:0d:63:31:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D0:68:A2:09:F7:D4:B0:A6:52:48:6C:09:A0:03:FD:16:6B:EB:26
X509v3 Authority Key Identifier:
keyid:AD:F6:12:45:66:14:64:C6:C8:80:0A:FF:33:52:06:95:8F:2D:A8:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF61245661464C6C8800AFF335206958F2DA807.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:85:26:39:54:9a:ce:bc:31:b2:13:bf:fa:a5:a6:cf:6f:65:
0d:54:0b:f0:be:2a:21:a0:32:ec:67:de:25:8c:9e:f7:78:8d:
a4:0f:a5:03:8f:27:16:bb:c1:56:37:ce:47:e2:48:c1:38:20:
84:6c:f4:3c:36:6b:18:bc:8d:ec:a6:06:60:a7:df:14:44:b8:
c1:bc:e7:b5:74:11:a9:de:e4:3e:b6:ed:0b:87:ea:f6:71:b6:
61:64:5c:3d:e5:d6:fe:18:34:bf:69:6b:79:68:63:e8:9d:c3:
02:36:0c:18:2c:b0:af:f8:c0:86:5f:24:53:58:35:4c:f4:14:
f2:a5:33:cf:ed:f9:67:db:a6:17:d9:42:43:bf:44:ba:0e:47:
5a:ef:56:f1:f9:9c:94:76:95:71:f1:01:69:b2:a5:ef:4e:21:
ee:58:33:e0:f8:61:d8:3d:88:96:78:4d:fc:42:7a:eb:10:f9:
40:15:6d:21:ad:7c:02:27:56:44:2c:96:06:69:57:87:50:8a:
d1:6a:28:44:4d:55:3c:2b:eb:d3:4f:21:7c:89:40:90:d5:7f:
77:64:aa:66:24:83:a4:87:f8:59:26:22:e6:7d:41:8f:da:cc:
3f:4e:96:75:e8:ca:55:70:e0:34:6a:41:90:3a:7c:51:a8:b6:
f8:d2:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:15:55 2026 by rpki-client