
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
File: 59A9AB370F753D82771987E2FD7CA19578E11D07.mft (raw, json)
Hash identifier: syvlwvG03aQpwkaa7B/F+wjoypiYhEb4oylfOnYvIms=
Subject key identifier: 49:92:CE:18:0F:EF:36:96:CE:1B:42:DC:C9:CC:3B:67:19:D0:29:77
Authority key identifier: 59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07
Certificate issuer: /CN=59A9AB370F753D82771987E2FD7CA19578E11D07
Certificate serial: 359C263F27ACAC77757A46CA1033691D438150E4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 18:37:33 +0000
Manifest this update: Tue 02 Jun 2026 18:32:33 +0000
Manifest next update: Wed 03 Jun 2026 22:32:33 +0000
Files and hashes: 1: 59A9AB370F753D82771987E2FD7CA19578E11D07.crl (hash: ewoAZIsis5dEm0mFfeuxBD5/ChKpGPn8RRUa8m5RZFo=)
2: 3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa (hash: 97CqSuEAmLm9b7GhTnzhH7E+h2iIk2MyDfPBWHarXus=)
3: 3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa (hash: fcfvoG+f+IeB/aOvvSuH4jigNm/P9oaHKcA8ozVTJ2c=)
4: 3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (hash: UPB/qBUFP9GqScWdxOKoCFaWZdy0EEvs2yjoMI9jaZ0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl
rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:9c:26:3f:27:ac:ac:77:75:7a:46:ca:10:33:69:1d:43:81:50:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59A9AB370F753D82771987E2FD7CA19578E11D07
Validity
Not Before: Jun 2 18:32:33 2026 GMT
Not After : Jun 3 22:32:33 2026 GMT
Subject: CN=4992CE180FEF3696CE1B42DCC9CC3B6719D02977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fc:c4:a6:6d:43:95:24:f2:e7:a5:76:ec:f8:
54:fb:5a:76:3d:65:de:6d:e5:47:1a:b8:81:11:55:
c5:96:28:06:92:47:ec:e8:e6:1b:93:4c:c4:ce:0e:
d5:bd:ce:e9:ad:a4:f8:2e:b0:94:56:a4:64:0c:28:
85:7c:7b:d1:16:ca:53:fa:18:98:eb:5d:e1:d1:94:
10:70:f9:b0:70:92:66:11:86:ca:31:bc:78:f7:29:
f3:bf:bd:0f:2b:f3:79:ae:30:d0:b9:c9:79:0f:ce:
6c:c4:d6:c6:23:5a:2b:46:8d:bb:c4:1f:af:56:81:
36:a6:6a:10:c7:d2:80:f7:ea:df:a0:d7:0e:8b:13:
63:78:fb:8a:66:5c:00:ce:c4:66:67:b4:5a:f7:6c:
df:71:fd:95:7c:24:72:a7:79:dc:a4:da:fd:61:1e:
01:7b:d2:ba:8a:e4:6f:9e:bd:f9:cd:c5:7a:91:25:
13:af:62:82:d8:a8:33:40:a5:5c:d8:44:25:d8:31:
1e:1e:2b:32:b9:0b:8c:d3:fd:d2:29:3a:d4:d2:f8:
55:00:66:85:e9:e9:59:b3:5b:34:c9:df:9b:1a:3d:
38:ee:6a:6d:32:01:6c:c3:90:14:99:41:4b:c8:cb:
e0:07:cf:04:2e:20:70:ff:90:f1:4a:00:a7:9b:33:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:92:CE:18:0F:EF:36:96:CE:1B:42:DC:C9:CC:3B:67:19:D0:29:77
X509v3 Authority Key Identifier:
keyid:59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ca:0a:e8:2e:72:46:d4:dc:3e:57:9c:f1:c9:e2:ca:0b:0c:
a6:28:c7:ae:7a:84:7b:b1:e9:bb:19:c9:a7:9a:88:9a:b0:ee:
ce:b2:15:2e:9d:76:20:ff:f8:24:91:78:2b:f0:f7:e0:b8:98:
4f:a2:1e:44:b9:24:1b:91:e7:ed:ad:c5:73:50:85:70:69:2c:
5d:0d:57:13:5d:b8:c1:84:3a:cc:a8:f5:ee:9d:ce:89:da:11:
8f:7d:2a:22:24:03:97:6a:ad:eb:91:8f:f1:5a:79:aa:a7:94:
f4:65:2f:d2:b4:37:e7:d4:04:99:e5:c2:f2:a2:83:72:96:13:
75:81:a0:cb:24:67:08:0b:f2:3f:57:41:03:fd:a5:49:e0:ba:
80:fb:ae:db:fb:a3:6b:b9:2a:38:8b:01:05:44:21:8a:7b:a2:
ed:65:fc:92:5d:41:e0:e1:94:06:ba:fd:40:3c:19:29:03:47:
92:b9:f4:c6:21:c6:b5:1d:28:2a:7f:53:b9:d8:fb:61:11:be:
35:ab:5a:99:59:8c:b3:63:13:14:5a:88:89:87:2b:6d:32:30:
c0:79:66:cc:3d:b9:8b:8d:d6:eb:8c:e7:1f:89:a9:f5:64:82:
d7:76:69:25:e5:25:13:f4:a1:d0:2e:c8:5a:bc:5a:8b:30:50:
a3:c2:0d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:42:41 2026 by rpki-client