
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft
File: 95C0FEDF4348635C616CCD76866299FFF41521C1.mft (raw, json)
Hash identifier: 0vclX9v+ygSxSn0jK95DDVRJvHS1pYuXi22NRxV8Y/E=
Subject key identifier: 0A:06:04:A7:4A:A2:F4:7C:65:B1:C1:9F:2D:E7:6C:84:F3:B2:D7:8F
Authority key identifier: 95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1
Certificate issuer: /CN=95C0FEDF4348635C616CCD76866299FFF41521C1
Certificate serial: 7D3E12ECC9ACBA29894C4B16E3A8870442CF9BC9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 16:29:55 +0000
Manifest this update: Tue 02 Jun 2026 16:24:55 +0000
Manifest next update: Wed 03 Jun 2026 19:36:55 +0000
Files and hashes: 1: 95C0FEDF4348635C616CCD76866299FFF41521C1.crl (hash: qITgScX4zqYHOCQZ90CtR2/u0fuHE9q2kqbQUhUojYs=)
2: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: h+0fD6qzNLY/87deDA6R1jRhs0ceFeWyvO6Ew7fmyvY=)
3: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: nctWeqdG+C+yzM3us3hfFDeGU29WHbKA/XQo+aeaR/w=)
4: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: O1v/bS1Rz6LYE4uphPLJ6skO/weLSpE9O9uIKbdx440=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl
rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 19:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:3e:12:ec:c9:ac:ba:29:89:4c:4b:16:e3:a8:87:04:42:cf:9b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95C0FEDF4348635C616CCD76866299FFF41521C1
Validity
Not Before: Jun 2 16:24:55 2026 GMT
Not After : Jun 3 19:36:55 2026 GMT
Subject: CN=0A0604A74AA2F47C65B1C19F2DE76C84F3B2D78F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:18:32:37:6f:5b:0d:57:cd:0e:d0:59:aa:
b1:71:6e:a2:17:80:b0:35:e0:9d:77:12:40:4c:7f:
2e:2f:d4:88:e8:94:8e:16:cf:1a:e6:eb:f8:b7:ce:
6e:46:ab:a2:e1:e8:74:cf:13:cb:90:25:d4:f9:d4:
68:22:64:0b:ba:5b:09:d9:61:a6:a5:8d:d0:0e:fa:
2e:42:bf:3c:fb:bc:ff:a8:f8:c8:6b:90:60:b5:75:
b0:ad:b0:62:24:6d:1c:60:dd:b8:78:e8:b7:7a:36:
90:91:30:93:57:78:c1:c1:86:d2:c6:da:af:1e:51:
69:2e:3e:78:84:f3:c6:3c:67:6a:a4:c0:a6:f6:78:
90:7e:89:c6:a0:62:81:fb:a9:a8:6e:96:15:29:e8:
58:19:5a:85:4b:ac:76:b0:b7:b9:0e:4a:1a:02:b7:
37:97:e1:7e:31:de:f2:3c:ae:23:03:fd:36:7d:f1:
71:c5:fd:91:35:3b:9b:c7:6e:2d:b8:3d:5c:6f:2f:
43:f2:2e:6e:68:75:15:bd:6e:96:bd:a2:bc:0b:de:
1c:27:5b:cf:ab:09:53:13:4f:a3:b5:28:b2:7f:57:
f9:81:58:ab:43:a0:5b:17:12:16:1f:74:3a:c2:bc:
52:51:2f:ec:83:a9:62:26:85:06:b0:ae:0c:aa:90:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:06:04:A7:4A:A2:F4:7C:65:B1:C1:9F:2D:E7:6C:84:F3:B2:D7:8F
X509v3 Authority Key Identifier:
keyid:95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f3:0b:1f:28:6a:53:47:e9:23:3e:78:04:88:c4:9a:26:36:
1f:3a:ee:11:76:10:fe:bc:cf:7d:34:5f:dc:df:07:45:1f:87:
e4:5d:54:55:46:e4:7b:b5:f2:45:5b:28:d3:67:83:6d:76:f9:
22:4c:b2:ce:ea:95:ef:2c:b3:18:4e:8c:f6:1b:ae:7e:98:fe:
c9:50:ef:6c:29:38:9c:92:86:95:91:d6:ff:72:68:38:7e:fd:
e7:38:c8:30:82:2c:9c:4b:d2:12:63:b4:2c:b4:12:87:22:db:
83:bb:af:70:69:52:fb:c8:7c:1e:2b:6b:c1:65:91:ff:a0:d5:
f5:03:02:39:9f:33:8b:aa:97:bd:f3:c6:22:07:f9:cc:86:24:
07:f0:f9:6e:b5:48:f5:cf:6e:49:a3:ef:76:c5:50:69:02:89:
aa:f7:1c:b5:0a:51:1f:c5:f8:5e:cd:ed:09:d1:0d:80:6b:2b:
69:0d:42:28:a7:11:59:07:00:3e:5f:01:1d:42:40:e6:7a:61:
6e:59:3b:6d:f8:22:ab:32:b8:49:5b:d6:2c:77:d3:6d:e8:bf:
0e:0e:56:cd:41:31:db:b3:db:26:61:5e:2f:b9:c5:77:1f:62:
ee:c5:0f:4a:f5:41:3c:67:71:d0:bb:3d:bc:64:bf:e7:21:1e:
c7:41:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:19:00 2026 by rpki-client