
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
File: D59D3CB80F39720CC6378798AF38E978ACC61169.mft (raw, json)
Hash identifier: 8n72R3wBxGmCZI/TOKYKSZfYBPlrfSNgv1SVC6IUSuE=
Subject key identifier: E2:BA:AB:1F:16:39:0F:91:B4:DA:7E:01:39:1B:E2:49:D6:11:4A:2D
Authority key identifier: D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69
Certificate issuer: /CN=D59D3CB80F39720CC6378798AF38E978ACC61169
Certificate serial: 61179CDBB3B3C1ECB35A80C9CB7AA33341A7F25E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
Manifest number: DC
Signing time: Tue 13 Oct 2026 20:41:25 +0000
Manifest this update: Tue 13 Oct 2026 20:36:25 +0000
Manifest next update: Wed 14 Oct 2026 21:53:25 +0000
Files and hashes: 1: D59D3CB80F39720CC6378798AF38E978ACC61169.crl (hash: hxVPCL4uceH+zHsKATPSN1AKGB9L03wu95S4pdBtB0E=)
2: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: xDMl4fVPq1KOh6yEyAaFX1Ne1uCSqYoqoG2DK9eXVJc=)
3: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: TyeS6OFp+eX9ORLvbkAk7IV44ZT6uQE45kxcvU/K/wA=)
4: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: NXjXH8bagUMJQqwbA86uVF5uVlgJU27CgQDeHpB6ITQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl
rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 21:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:17:9c:db:b3:b3:c1:ec:b3:5a:80:c9:cb:7a:a3:33:41:a7:f2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D59D3CB80F39720CC6378798AF38E978ACC61169
Validity
Not Before: Oct 13 20:36:25 2026 GMT
Not After : Oct 14 21:53:25 2026 GMT
Subject: CN=E2BAAB1F16390F91B4DA7E01391BE249D6114A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:43:ac:ac:a2:0f:2b:78:75:ae:a5:aa:a3:
1e:9a:84:4d:2b:f3:d6:65:d1:ea:12:ce:71:ac:43:
5f:33:de:0a:0c:78:3c:5a:2e:1f:8d:29:a9:48:97:
2f:5d:1f:56:f7:1d:71:ca:90:df:99:37:d9:75:36:
9e:6d:77:51:07:4b:82:0e:5a:9c:75:d4:72:2d:e3:
c2:89:f1:57:ef:24:0a:5c:d5:01:0b:69:9c:1a:42:
d6:bf:56:09:6e:ee:09:3f:fd:27:dd:18:2e:c1:ab:
5e:51:02:83:0e:1a:df:7d:9a:f3:e1:c4:96:42:08:
70:a8:98:6a:b0:8a:31:0f:8c:17:53:82:26:55:2f:
fa:6e:de:d2:1f:bf:3f:22:d2:d0:40:4c:63:6d:6f:
41:92:e1:cb:d2:7f:4e:69:63:06:f5:2f:80:f0:b5:
32:e8:f4:50:7e:ca:aa:da:27:17:d0:0d:16:de:a6:
b6:34:4f:e7:8f:8d:cf:9e:f6:15:d7:7b:38:d3:90:
79:c1:23:16:52:5b:ff:4f:c6:0a:14:4b:49:8d:11:
e6:09:bd:7f:b6:40:5f:26:dc:75:0d:31:10:d8:d1:
99:82:5c:96:ce:f2:1d:5b:81:f8:bc:33:e8:12:37:
9b:8a:5a:68:23:94:98:b3:56:26:6b:03:7b:ce:33:
fe:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BA:AB:1F:16:39:0F:91:B4:DA:7E:01:39:1B:E2:49:D6:11:4A:2D
X509v3 Authority Key Identifier:
keyid:D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2a:a6:df:c6:2f:45:ff:8a:a5:85:3e:6b:d8:fe:89:a8:84:
f7:96:dd:17:82:a8:08:8b:1a:53:75:ea:64:1d:34:71:83:34:
77:be:25:62:8d:61:dd:2c:36:fc:a4:52:53:84:7e:47:a4:bf:
75:77:26:68:e1:dd:5a:39:00:9d:1f:12:1e:d7:c6:60:28:d4:
5d:bb:b5:2e:42:7f:3f:d6:66:74:80:9f:4a:29:0a:3b:c4:d4:
c5:f9:f8:60:c6:64:3b:da:ab:4e:4a:0e:dd:df:2a:9f:b3:dd:
09:3f:b2:9d:f6:79:9c:f0:ab:03:25:ac:bf:be:ea:13:57:ff:
6e:00:64:a4:b2:a2:f7:a2:78:ae:5c:21:f9:ec:8b:87:42:79:
31:11:bd:c0:b1:46:c1:3d:d8:aa:b5:52:f7:5c:43:78:cc:4b:
5e:35:a8:09:ad:5b:b3:6c:71:38:0f:87:1e:4e:b7:d3:04:da:
ba:5f:1f:0d:63:32:78:7c:ce:3f:e3:73:8c:42:68:21:18:45:
65:56:24:25:46:21:dd:34:2c:d2:65:04:d8:db:0e:7c:f2:48:
07:64:09:16:11:51:2d:e2:4f:8b:e4:86:5d:68:12:17:87:77:
26:c0:16:4b:e5:05:78:67:82:93:dd:98:30:a0:8c:4b:7d:0a:
7b:b7:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:44:13 2026 by rpki-client