
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft
File: 328533C99D9FDEAA8F1418F15BD32B96BC206058.mft (raw, json)
Hash identifier: 1W4lqjOVwMMEE1Lr7/yedZEJSRTi99/gkiGsJwzLzG8=
Subject key identifier: 31:62:4D:62:FB:E2:AA:7B:A8:A0:59:8A:08:44:11:A3:4C:D0:96:58
Authority key identifier: 32:85:33:C9:9D:9F:DE:AA:8F:14:18:F1:5B:D3:2B:96:BC:20:60:58
Certificate issuer: /CN=328533C99D9FDEAA8F1418F15BD32B96BC206058
Certificate serial: 5AE11D1395A84694B2ED92F81F6C0D0C7D65088A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 23:01:31 +0000
Manifest this update: Wed 02 Sep 2026 22:56:31 +0000
Manifest next update: Fri 04 Sep 2026 01:13:31 +0000
Files and hashes: 1: 328533C99D9FDEAA8F1418F15BD32B96BC206058.crl (hash: lJ1VPGP7y5nzFTlT+rKebXnFrUZWzcUM5gMN2nq/gFI=)
2: 3130332e3231392e362e302f32342d3234203d3e203338313537.roa (hash: WdtifxvKK3KsxSLiwEXLWrNPcTtmbGv7tQrCl/tBPS8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.crl
rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e1:1d:13:95:a8:46:94:b2:ed:92:f8:1f:6c:0d:0c:7d:65:08:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328533C99D9FDEAA8F1418F15BD32B96BC206058
Validity
Not Before: Sep 2 22:56:31 2026 GMT
Not After : Sep 4 01:13:31 2026 GMT
Subject: CN=31624D62FBE2AA7BA8A0598A084411A34CD09658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:b5:13:e3:c5:dc:72:1e:ad:2a:e5:ef:d3:
8c:c6:81:e8:32:b5:2e:12:10:04:8f:f2:ae:c9:ec:
b4:1b:b5:f5:e2:c3:39:d2:ee:94:b3:91:41:b0:71:
31:77:a1:1e:6b:2f:64:5e:0c:c1:1b:2b:a1:e4:69:
4d:60:aa:a6:82:da:8c:3a:05:a9:96:5a:92:45:3c:
af:0b:31:7a:7d:10:b6:ff:63:61:f4:dd:f6:79:05:
c8:0d:be:84:69:46:e9:1e:2e:28:c1:aa:51:60:b0:
ff:fb:78:13:e2:a9:6d:93:76:e7:94:f7:ba:28:9c:
60:36:07:3f:f8:9a:c7:d2:97:fb:51:df:a5:8c:6e:
d3:34:fc:b8:6c:7d:8e:09:a4:d4:ec:d4:13:5b:70:
44:4b:23:7e:5e:c2:ee:cd:f7:9d:c1:2b:f3:ca:73:
d3:23:af:ec:52:1e:0e:81:1d:dc:44:fa:3a:bc:d0:
9f:4e:a0:8c:f2:88:cb:14:59:ed:39:89:5c:2b:45:
a0:aa:72:e4:71:2e:48:71:4f:b8:71:8c:dc:a7:98:
b7:6f:48:4d:f3:90:2f:15:d1:a1:77:93:e3:eb:a6:
a6:35:6e:dd:bf:50:b2:58:06:4b:3e:1d:9c:47:31:
d8:e4:3e:41:0f:6d:d2:a9:6e:ff:e0:9a:fc:62:6f:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:62:4D:62:FB:E2:AA:7B:A8:A0:59:8A:08:44:11:A3:4C:D0:96:58
X509v3 Authority Key Identifier:
keyid:32:85:33:C9:9D:9F:DE:AA:8F:14:18:F1:5B:D3:2B:96:BC:20:60:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:56:49:2b:f1:fd:c7:d4:08:1e:33:19:7e:f0:cc:46:7d:ae:
f9:3b:b4:78:e5:1e:82:c2:85:31:be:31:3b:e3:3e:74:4c:3a:
07:f1:1d:9f:58:5b:0d:b0:d6:91:56:3e:1c:d0:39:55:70:23:
7a:09:81:62:fc:ec:dd:3f:06:08:e8:f0:d8:b2:38:e7:4a:f3:
07:30:e7:11:76:c5:2e:18:a0:dd:5b:60:08:39:d6:e1:b5:37:
e4:36:2d:43:9b:ef:dd:12:80:a3:22:aa:7f:11:51:04:a4:32:
55:36:10:3d:17:35:c7:a5:f5:21:d4:6a:d1:f0:c6:8e:31:69:
54:d4:c9:50:27:6d:11:b2:a2:31:a2:04:0b:5b:b6:6a:0d:c5:
03:c9:75:2b:0c:94:4b:bd:b5:6a:6f:e8:dd:95:5f:40:2d:2a:
76:8a:60:a1:32:94:99:9f:a9:d1:94:4c:f5:2d:a9:9f:57:4d:
3e:58:3b:58:4c:a8:ef:b8:a0:0d:84:e9:45:b4:3d:5e:6c:77:
2a:b3:05:e6:69:dd:46:22:95:23:e5:46:58:84:7f:69:16:7c:
4b:1c:e7:ef:b2:3c:fd:36:59:5e:74:12:a7:78:e6:37:49:43:
45:af:c1:f8:ca:4c:4f:e6:c7:c5:4f:6e:67:68:95:f7:ed:5d:
95:ab:16:8f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWuEdE5WoRpSy7ZL4H2wNDH1lCIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI4NTMzQzk5RDlGREVBQThGMTQxOEYxNUJEMzJCOTZC
QzIwNjA1ODAeFw0yNjA5MDIyMjU2MzFaFw0yNjA5MDQwMTEzMzFaMDMxMTAvBgNV
BAMTKDMxNjI0RDYyRkJFMkFBN0JBOEEwNTk4QTA4NDQxMUEzNENEMDk2NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5w7UT48Xcch6tKuXv04zGgegy
tS4SEASP8q7J7LQbtfXiwznS7pSzkUGwcTF3oR5rL2ReDMEbK6HkaU1gqqaC2ow6
BamWWpJFPK8LMXp9ELb/Y2H03fZ5BcgNvoRpRukeLijBqlFgsP/7eBPiqW2TdueU
97oonGA2Bz/4msfSl/tR36WMbtM0/LhsfY4JpNTs1BNbcERLI35ewu7N953BK/PK
c9Mjr+xSHg6BHdxE+jq80J9OoIzyiMsUWe05iVwrRaCqcuRxLkhxT7hxjNynmLdv
SE3zkC8V0aF3k+PrpqY1bt2/ULJYBks+HZxHMdjkPkEPbdKpbv/gmvxib5AzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMWJNYvviqnuooFmKCEQRo0zQllgwHwYDVR0j
BBgwFoAUMoUzyZ2f3qqPFBjxW9MrlrwgYFgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjAyMWVlNzYtYTlmZi00YmZhLTgyMjMtOTQ2ZWVjY2NmMDM2LzAvMzI4NTMzQzk5
RDlGREVBQThGMTQxOEYxNUJEMzJCOTZCQzIwNjA1OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zMjg1MzNDOTlEOUZERUFBOEYxNDE4RjE1QkQzMkI5NkJDMjA2
MDU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAyMWVlNzYtYTlmZi00YmZhLTgy
MjMtOTQ2ZWVjY2NmMDM2LzAvMzI4NTMzQzk5RDlGREVBQThGMTQxOEYxNUJEMzJC
OTZCQzIwNjA1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD5WSSvx/cfUCB4zGX7wzEZ9rvk7tHjlHoLC
hTG+MTvjPnRMOgfxHZ9YWw2w1pFWPhzQOVVwI3oJgWL87N0/Bgjo8NiyOOdK8wcw
5xF2xS4YoN1bYAg51uG1N+Q2LUOb790SgKMiqn8RUQSkMlU2ED0XNcel9SHUatHw
xo4xaVTUyVAnbRGyojGiBAtbtmoNxQPJdSsMlEu9tWpv6N2VX0AtKnaKYKEylJmf
qdGUTPUtqZ9XTT5YO1hMqO+4oA2E6UW0PV5sdyqzBeZp3UYilSPlRliEf2kWfEsc
5++yPP02WV50Eqd45jdJQ0WvwfjKTE/mx8VPbmdolfftXZWrFo8=
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:00:51 2026 by rpki-client