
$ rpki-client -vvf rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
File: F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft (raw, json)
Hash identifier: xk4auUiWlWylHV2WCmW1rlr8ixPa6/iOmz/R+wcPYU4=
Subject key identifier: 1A:7D:C7:FB:4E:A8:BA:B8:51:B5:74:F7:BF:0F:8C:C8:1F:49:23:38
Authority key identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF
Certificate issuer: /CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
Certificate serial: 0E16A7D55A99EBBD9CE0D35D3571341C172E82FC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 14:27:44 +0000
Manifest this update: Tue 02 Jun 2026 14:22:44 +0000
Manifest next update: Wed 03 Jun 2026 16:10:44 +0000
Files and hashes: 1: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: rEzu4P6oExwIZaANS5DV2R8BJmVkjCXI7g7sPguv5ho=)
2: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: 5CWw2ztPAElFuqMvrZ+eExbk4B2mKb785wpbROO/cwI=)
3: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: RCVkQO3x+P4RF48TeYaUmpS+R/Zp+Q7sEuYMIANrgmM=)
4: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: C2/pGzPkMt5Vzcyvrqnbj1Bb56h29NNTc3/kAwJYyFk=)
5: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: DQ6rpEJu+zPKG4c6tffclYxCxiCj2KQBdnnwehsPRoM=)
6: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: JVzJjBAyxQLaPhKhqz1LXrJdrQUjLBthYVZyc/xVxg0=)
7: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: 64HGWL2CzebN7GmYL8lPadZ2nwJ3zX055oQRPQondo0=)
8: F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl (hash: RUbTD7SYcc3COyJSQhAPTyKlvw269WGtpDZnuXXXBGA=)
9: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: c0E9xb18G6dDWSOYbp1L8pfGiJXjXDV9gaUGsFzHbYc=)
10: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: PHP1IFXfqbi+BOlMH5y7xyleYHrhQYI+Lt+NZxh64LQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl
rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 16:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:16:a7:d5:5a:99:eb:bd:9c:e0:d3:5d:35:71:34:1c:17:2e:82:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
Validity
Not Before: Jun 2 14:22:44 2026 GMT
Not After : Jun 3 16:10:44 2026 GMT
Subject: CN=1A7DC7FB4EA8BAB851B574F7BF0F8CC81F492338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:f3:89:60:57:d3:bc:c2:fb:d8:35:06:b6:
09:74:af:55:71:09:f8:b8:e5:af:86:54:92:d9:83:
e6:e2:8f:fb:8b:96:01:3d:02:62:3c:fd:be:a7:a4:
d9:80:59:e9:8f:7b:18:86:11:a3:b9:c2:fc:09:bd:
5b:ec:56:83:be:04:e4:ee:47:4e:c2:57:9c:cf:a2:
58:a9:4d:3d:b1:aa:34:98:38:fd:64:81:11:ca:7d:
39:e3:3a:53:5c:32:ba:14:69:e2:ee:7f:12:0c:cb:
a0:03:d5:45:75:20:2f:5f:b1:d7:72:09:26:48:a1:
07:1c:00:5d:b5:b9:15:8c:d9:19:23:04:3b:e5:75:
b0:1f:50:77:1f:72:a7:f3:5f:70:f9:c1:39:58:cb:
dd:00:6c:5b:17:fd:ec:f5:78:03:dd:dd:d8:a5:7d:
8c:b4:ef:4f:c5:ce:91:0f:27:0d:1c:db:c1:3b:d2:
4a:39:59:8b:18:63:bd:01:38:97:90:30:d0:ad:24:
d9:a5:74:c1:53:9a:9b:9b:fa:a0:fa:d8:ec:a2:86:
7f:89:5f:45:5c:e4:c0:e7:94:e5:ec:b2:2e:a0:61:
33:2d:5e:73:c8:c5:17:c3:8e:a8:51:0f:36:5f:6a:
a2:99:64:e4:ed:90:e9:d1:07:5b:77:28:2d:12:5f:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7D:C7:FB:4E:A8:BA:B8:51:B5:74:F7:BF:0F:8C:C8:1F:49:23:38
X509v3 Authority Key Identifier:
keyid:F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:52:cc:d5:e9:0a:1c:e2:4c:e6:55:7a:c5:12:71:3f:fe:62:
3b:32:33:6d:4a:5c:fc:1b:29:6b:ba:39:8c:da:e9:6a:cb:94:
a4:8a:57:00:7c:fa:a2:18:90:84:c2:9b:a4:93:83:b4:3b:67:
f1:e9:67:aa:b2:89:55:eb:ae:a7:34:da:c3:da:9c:db:46:47:
c8:fb:ff:9f:69:92:40:9e:42:ac:ef:15:4e:26:32:fb:7e:71:
e4:9e:a7:90:c6:04:19:4f:09:40:bf:9e:3f:45:37:91:e5:d9:
a9:d8:ba:fe:30:1f:a2:2d:a7:04:44:28:23:8b:cc:f1:00:5c:
62:f8:2d:7c:be:f2:be:d9:0b:d1:c3:e1:6d:7d:ad:f9:59:f2:
cc:6f:ec:92:54:5b:80:8b:56:a7:08:79:80:a2:15:75:87:51:
22:a2:9b:af:4b:ff:54:cd:9c:6a:f9:1c:92:e9:23:7d:14:37:
da:2c:47:72:de:d2:c9:d1:5c:2a:ce:22:71:2b:7e:fd:ea:9f:
a3:da:72:68:b1:2e:e9:ff:cf:ef:ec:a2:79:27:38:98:bd:11:
09:ff:84:3a:cd:e5:84:35:98:39:18:2a:6e:10:20:14:9f:14:
f8:92:e5:3c:1a:cd:b5:85:8f:07:c2:b9:08:13:76:81:16:83:
cf:20:8a:8f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDhan1VqZ672c4NNdNXE0HBcugvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA3REUyQTYwNDFDNENDREY0MjRENEZFMjk5QjU4NkRB
QkEyMkNBRjAeFw0yNjA2MDIxNDIyNDRaFw0yNjA2MDMxNjEwNDRaMDMxMTAvBgNV
BAMTKDFBN0RDN0ZCNEVBOEJBQjg1MUI1NzRGN0JGMEY4Q0M4MUY0OTIzMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcSfOJYFfTvML72DUGtgl0r1Vx
Cfi45a+GVJLZg+bij/uLlgE9AmI8/b6npNmAWemPexiGEaO5wvwJvVvsVoO+BOTu
R07CV5zPolipTT2xqjSYOP1kgRHKfTnjOlNcMroUaeLufxIMy6AD1UV1IC9fsddy
CSZIoQccAF21uRWM2RkjBDvldbAfUHcfcqfzX3D5wTlYy90AbFsX/ez1eAPd3dil
fYy070/FzpEPJw0c28E70ko5WYsYY70BOJeQMNCtJNmldMFTmpub+qD62Oyihn+J
X0Vc5MDnlOXssi6gYTMtXnPIxRfDjqhRDzZfaqKZZOTtkOnRB1t3KC0SXwJrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGn3H+06ourhRtXT3vw+MyB9JIzgwHwYDVR0j
BBgwFoAU8H3ipgQcTM30JNT+KZtYbauiLK8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTU3YjBkN2UtZWFkZS00MzE4LWFiMjAtOGM3ZjJkNWJlNjlmLzAvRjA3REUyQTYw
NDFDNENDREY0MjRENEZFMjk5QjU4NkRBQkEyMkNBRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMDdERTJBNjA0MUM0Q0NERjQyNEQ0RkUyOTlCNTg2REFCQTIy
Q0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi
MjAtOGM3ZjJkNWJlNjlmLzAvRjA3REUyQTYwNDFDNENDREY0MjRENEZFMjk5QjU4
NkRBQkEyMkNBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAChSzNXpChziTOZVesUScT/+YjsyM21KXPwb
KWu6OYza6WrLlKSKVwB8+qIYkITCm6STg7Q7Z/HpZ6qyiVXrrqc02sPanNtGR8j7
/59pkkCeQqzvFU4mMvt+ceSep5DGBBlPCUC/nj9FN5Hl2anYuv4wH6ItpwREKCOL
zPEAXGL4LXy+8r7ZC9HD4W19rflZ8sxv7JJUW4CLVqcIeYCiFXWHUSKim69L/1TN
nGr5HJLpI30UN9osR3Le0snRXCrOInErfv3qn6PacmixLun/z+/sonknOJi9EQn/
hDrN5YQ1mDkYKm4QIBSfFPiS5TwazbWFjwfCuQgTdoEWg88gio8=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:40:48 2026 by rpki-client