
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
File: D626CC25972BF9948C6B3BDE4E354C71F2570880.mft (raw, json)
Hash identifier: wBBiYuC3ZqyKti5NG74s9XkAxP0dvz0kQUrnnoGaNrc=
Subject key identifier: 1A:15:2D:ED:C0:AE:D3:E7:EA:C2:82:6B:F7:36:65:85:AD:80:5B:88
Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
Certificate issuer: /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Certificate serial: 53680D82EDE92E7641FD077D1540679DFF9D02B4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
Manifest number: 2B
Signing time: Wed 03 Jun 2026 02:43:04 +0000
Manifest this update: Wed 03 Jun 2026 02:38:04 +0000
Manifest next update: Thu 04 Jun 2026 04:01:04 +0000
Files and hashes: 1: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: yo9Rg0RIu4bi5AvFSf1HgeoEO2ptRcGKCjbNNgnoU1A=)
2: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: +bc1aSBLcX6ZQm4jECmlMCivSavxhqXkBTLrz820pWg=)
3: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: 0aDHxXMr4KUimzxt4JkDC404Ezku76mxRU40fEJqQUU=)
4: D626CC25972BF9948C6B3BDE4E354C71F2570880.crl (hash: l26bWcei0FjKozQe9MwBRr3wGRcQs3u+iZJrlF6RDDQ=)
5: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: jRI7u+pgcEtmrDDRmjulrcR4SRRZM/aGtsQfGUXuJ24=)
6: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: nb8z2N9rnH96t5B0H624NhPlR7I0KYPMhvCR0O/fhs4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:68:0d:82:ed:e9:2e:76:41:fd:07:7d:15:40:67:9d:ff:9d:02:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Validity
Not Before: Jun 3 02:38:04 2026 GMT
Not After : Jun 4 04:01:04 2026 GMT
Subject: CN=1A152DEDC0AED3E7EAC2826BF7366585AD805B88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:f6:80:47:75:55:bb:02:5d:11:11:81:2b:
69:cf:e5:10:65:f7:14:76:88:e5:43:d5:7a:58:89:
15:d6:35:7e:34:e1:69:35:87:d4:d7:e5:d0:df:f1:
7f:00:8b:1a:de:1a:25:9b:8a:bd:3d:dd:15:28:42:
ee:85:16:76:cd:43:a5:2a:27:a1:9c:71:6f:5a:e1:
32:08:47:c1:e3:61:5e:03:c6:2a:af:83:07:9e:38:
81:ba:1b:23:24:b0:f7:6f:1d:1c:7e:86:e9:6d:af:
b7:bf:1c:37:52:5f:66:ec:95:4e:27:18:ed:53:c8:
82:db:6c:31:2f:30:4c:a9:fc:01:4e:7f:47:d2:8a:
07:20:d0:04:62:77:16:0b:48:b3:d6:6d:23:60:8a:
72:42:ac:b6:2c:eb:88:5f:d6:8e:59:b7:4a:de:63:
8e:af:d5:79:c9:a9:7c:58:41:6d:0a:82:92:79:92:
c9:f3:f0:96:ab:a0:90:7c:a2:16:2e:87:9a:b7:c2:
e0:6f:fe:e3:81:ec:73:bd:b5:6d:05:8f:da:8e:78:
57:3c:15:2e:e3:15:49:91:77:43:f4:28:a7:ad:11:
a5:03:9f:af:f5:b0:7c:38:72:bc:bf:71:6b:36:d5:
f2:50:aa:4d:c5:de:f4:ba:66:4c:58:a7:67:49:7c:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:15:2D:ED:C0:AE:D3:E7:EA:C2:82:6B:F7:36:65:85:AD:80:5B:88
X509v3 Authority Key Identifier:
keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c1:c0:64:a0:ed:4c:3b:66:b3:e9:94:79:ec:96:fd:90:c6:
d9:34:b8:9b:4f:fc:af:04:c1:07:51:64:c9:fd:fd:a9:9a:70:
d4:af:db:f7:82:5c:7a:2c:42:4e:ae:3a:d3:cd:3f:5c:8f:9f:
9c:d4:53:d9:ef:e1:fd:67:4b:9a:b1:0a:a6:dc:cd:cf:f3:ad:
09:5c:b5:f5:82:4f:0f:94:72:e9:f4:71:3f:99:aa:ff:f7:00:
49:30:51:bc:cb:76:0e:f1:c9:18:fa:f8:56:ef:4a:3f:92:79:
7f:ad:c1:0d:8e:05:2e:2f:3c:73:2a:9c:c9:aa:5d:65:0f:b8:
99:93:79:57:4b:fd:52:0e:09:75:95:29:b4:07:3b:09:51:2e:
87:7c:58:b9:f9:fe:18:49:5f:d9:7b:fc:b5:07:9b:a2:01:90:
76:5c:dd:17:79:86:a8:f9:22:87:50:8a:ab:de:7c:24:56:dd:
1f:85:ad:3e:b9:5e:a6:ab:46:27:49:c2:f8:bc:6d:09:2f:ad:
23:40:f2:a8:63:46:b6:40:23:5e:eb:20:7a:9b:f4:9c:1b:8f:
77:89:b3:40:a5:d4:4b:ef:bc:9a:fc:27:b0:02:56:47:2c:0b:
14:cf:f0:5d:5b:56:b8:83:14:3f:23:1b:e5:09:ee:77:f3:19:
ce:d2:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:37:57 2026 by rpki-client