
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
File: D59D3CB80F39720CC6378798AF38E978ACC61169.mft (raw, json)
Hash identifier: UJxkygAsdQNDqf9BvB2ehq42Y8FMNlF8fYi+v5Oo7Bo=
Subject key identifier: 3D:37:9D:17:5C:57:A0:8C:7B:44:99:F4:38:03:3D:69:F3:E6:B1:A0
Authority key identifier: D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69
Certificate issuer: /CN=D59D3CB80F39720CC6378798AF38E978ACC61169
Certificate serial: 3FE3CBA1798688266E1EB8B2AF397B4BA2A37A42
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
Manifest number: 55
Signing time: Sat 04 Jul 2026 15:41:16 +0000
Manifest this update: Sat 04 Jul 2026 15:36:16 +0000
Manifest next update: Sun 05 Jul 2026 18:27:16 +0000
Files and hashes: 1: D59D3CB80F39720CC6378798AF38E978ACC61169.crl (hash: MwwfyGJQILH5Hp5EA56MBHJG9o25ubh8/uliO70111Y=)
2: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: xDMl4fVPq1KOh6yEyAaFX1Ne1uCSqYoqoG2DK9eXVJc=)
3: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: TyeS6OFp+eX9ORLvbkAk7IV44ZT6uQE45kxcvU/K/wA=)
4: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: NXjXH8bagUMJQqwbA86uVF5uVlgJU27CgQDeHpB6ITQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl
rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Jul 2026 05:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e3:cb:a1:79:86:88:26:6e:1e:b8:b2:af:39:7b:4b:a2:a3:7a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D59D3CB80F39720CC6378798AF38E978ACC61169
Validity
Not Before: Jul 4 15:36:16 2026 GMT
Not After : Jul 5 18:27:16 2026 GMT
Subject: CN=3D379D175C57A08C7B4499F438033D69F3E6B1A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5a:d0:a9:ee:ee:74:5d:14:33:46:7d:2f:4e:
54:48:55:0e:3d:1a:3e:38:ef:1f:e1:98:ea:2f:3b:
6c:57:0f:8f:f7:99:62:43:c3:68:6b:d6:3f:02:41:
43:bd:76:d4:79:92:1c:de:b7:26:94:fd:e5:f2:25:
8e:90:8d:84:25:14:93:b1:2b:63:f0:ed:21:ee:e5:
6c:7d:4c:28:44:09:87:f7:5a:5b:3e:39:00:c1:b0:
ec:46:14:6e:64:26:ed:a0:66:76:b7:75:33:71:3a:
98:a4:d7:46:b1:17:ca:5b:68:0d:19:35:24:3c:31:
9a:54:2e:98:aa:86:8a:b0:07:39:e5:7c:86:ab:69:
cf:9f:f0:6b:28:f8:e8:0a:65:34:5a:3c:82:18:c2:
19:72:f7:32:45:c8:62:e3:cd:89:70:b7:0f:b9:3e:
0f:e5:45:47:89:1a:42:47:ce:b9:aa:6a:d3:8a:3d:
a2:f7:1e:13:d9:c3:c5:50:29:56:2e:53:38:94:f1:
57:e6:20:1e:a2:b7:4d:39:db:f8:74:46:13:45:4b:
b3:13:83:cb:a1:fb:3a:1a:2b:b6:0a:c7:cb:ec:18:
33:fb:da:b2:37:87:25:42:61:6f:28:02:12:14:8b:
31:56:bb:4e:72:08:ac:8d:9c:fc:3f:8c:ed:80:77:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:37:9D:17:5C:57:A0:8C:7B:44:99:F4:38:03:3D:69:F3:E6:B1:A0
X509v3 Authority Key Identifier:
keyid:D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e6:45:87:07:1e:67:76:5d:86:f4:0d:89:96:96:37:2c:90:
e5:bb:1d:31:00:32:14:55:15:83:e3:f5:56:50:87:82:af:ac:
3e:8b:c5:f4:4b:66:11:81:e7:4b:49:6a:4d:68:a3:dc:bd:65:
0a:5e:4c:1d:27:6b:6b:fe:2e:c5:c1:6e:e3:99:ac:06:5b:7d:
02:ec:7d:7c:b3:d7:63:a0:d2:d1:94:2a:52:6a:5e:8c:c2:ec:
24:9b:54:12:b6:79:75:a3:d5:61:99:98:2a:c2:97:97:81:0c:
3a:22:29:39:7d:05:90:ea:a6:75:f6:42:0f:f5:b0:be:3b:da:
24:50:51:c4:47:39:d9:6f:38:2b:22:e3:33:a3:6d:d6:c1:f2:
0e:f0:c3:53:c8:1f:1d:04:49:97:48:c8:36:79:cc:da:1e:d9:
59:f7:c3:10:b0:c9:6f:ef:eb:0f:42:e6:13:fb:c9:d0:5b:c7:
4d:fe:60:65:84:1a:53:29:fb:6a:53:88:77:a2:ea:d5:92:c5:
26:f1:7d:50:4e:f3:10:32:90:33:9f:51:aa:c2:d1:56:58:5a:
59:0f:e3:26:88:63:b2:12:ac:4b:fc:a6:56:3c:67:34:45:25:
3d:f8:92:1a:ba:93:1c:95:db:fb:63:ad:2d:75:0f:2b:d3:94:
45:8b:bc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 20:26:47 2026 by rpki-client