
$ rpki-client -vvf rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft
File: 0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft (raw, json)
Hash identifier: nk6YFT3ws5S8S+5fEMxFAQz7WGv4+pUWkzkyW8cgc9I=
Subject key identifier: 9A:CE:C8:A5:48:A5:8A:4B:0C:21:6C:8C:0E:7F:CF:5D:A5:84:5D:9B
Authority key identifier: 08:93:30:73:38:D8:D7:BA:55:CC:0C:06:27:91:50:A0:C9:FA:C6:CA
Certificate issuer: /CN=0893307338D8D7BA55CC0C06279150A0C9FAC6CA
Certificate serial: 2CA32923C3FA0BD5004F75E6B30167D8B3969D3A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft
Manifest number: 43
Signing time: Sat 20 Jun 2026 05:21:20 +0000
Manifest this update: Sat 20 Jun 2026 05:16:20 +0000
Manifest next update: Sun 21 Jun 2026 09:09:20 +0000
Files and hashes: 1: 0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl (hash: 353WYS8fw+3OLdfA6QYNKfXPxXOFOIGbW5osf5YdVgc=)
2: 3130332e3139382e312e302f32342d3234203d3e20313530393436.roa (hash: quvbYNmn/O14F1WsMTm8aak0xPXGeYxU82kt65bFRhY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl
rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 07:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a3:29:23:c3:fa:0b:d5:00:4f:75:e6:b3:01:67:d8:b3:96:9d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0893307338D8D7BA55CC0C06279150A0C9FAC6CA
Validity
Not Before: Jun 20 05:16:20 2026 GMT
Not After : Jun 21 09:09:20 2026 GMT
Subject: CN=9ACEC8A548A58A4B0C216C8C0E7FCF5DA5845D9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:15:ff:98:42:b5:af:35:8c:c8:35:17:36:
7d:c2:92:e2:44:87:0f:a1:c9:1e:80:20:cc:fd:a9:
0b:58:5c:ab:42:cb:20:ad:26:9b:d8:b1:86:e0:d5:
18:d2:23:a2:23:17:ab:02:00:74:3a:77:0f:08:a3:
5b:99:b6:74:9e:1b:55:40:71:7b:b0:28:b1:41:11:
51:75:fe:0d:7b:ef:40:d7:77:51:27:dc:6a:32:41:
e7:c0:dd:3f:86:63:c4:7f:99:a1:25:2f:57:34:bb:
12:e4:cd:19:7a:e7:2f:88:b2:6b:87:0b:97:88:2b:
bf:1e:7c:4a:43:c3:3b:7c:7c:78:aa:d9:28:45:88:
62:cb:99:20:0b:8d:13:f3:62:f8:ba:1b:6d:a2:45:
c6:04:93:b7:26:b2:26:1e:93:96:73:43:c0:24:dc:
c5:d7:f7:8a:38:b8:5f:3f:76:ec:dd:1c:5e:47:f6:
a5:74:58:fa:18:34:7e:87:37:db:88:f2:e4:7b:dd:
a6:bc:fb:12:42:35:70:e0:0a:f0:cf:5b:95:19:cf:
6b:16:68:cd:0c:23:c9:b7:d2:49:82:44:9f:6d:94:
35:87:34:8d:9f:df:c6:98:9d:0d:fb:7f:01:52:50:
ad:3c:c1:0e:bc:2e:d5:5e:00:ad:7c:d9:b4:7e:74:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CE:C8:A5:48:A5:8A:4B:0C:21:6C:8C:0E:7F:CF:5D:A5:84:5D:9B
X509v3 Authority Key Identifier:
keyid:08:93:30:73:38:D8:D7:BA:55:CC:0C:06:27:91:50:A0:C9:FA:C6:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:83:5c:1b:a0:28:99:80:13:8c:c1:93:2e:e2:e2:ca:6e:29:
c2:65:6a:11:0a:54:37:17:ff:0d:0e:08:02:76:84:5f:6a:b4:
a5:85:27:c6:ff:2c:19:e8:27:b3:82:b6:5b:dc:59:05:9b:77:
2b:df:b5:84:34:8a:65:d1:91:de:24:a5:fd:8a:a7:68:3c:a3:
42:bd:79:c1:9d:5f:8a:85:7c:1e:3f:d9:e2:9c:fa:2a:04:c6:
de:14:81:37:b2:64:af:f3:88:4a:72:de:48:1a:a1:24:09:a1:
93:11:2e:92:73:30:93:00:f8:d2:1d:fe:4b:46:bb:c3:70:82:
ba:0c:ca:a7:a6:b3:f6:fb:17:13:f6:c1:b2:1f:37:c8:0d:18:
51:96:5e:13:27:18:6a:e9:28:c9:8c:32:ae:cb:87:44:f3:71:
77:63:bb:f3:cd:f8:d0:72:d5:42:0b:a9:94:75:23:43:62:99:
4f:b5:11:8b:47:27:d0:33:bd:06:90:4b:4a:73:8d:5b:3d:b7:
8e:34:c0:41:9e:b7:f8:5f:54:e4:33:fc:d6:c3:5e:af:70:c8:
e5:8e:7a:68:d7:e6:1c:05:a9:eb:fa:f9:df:dd:84:38:83:d2:
73:67:93:3a:d5:f4:31:aa:03:d4:bf:07:32:78:0c:d7:d7:b6:
4c:2f:e5:ad
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULKMpI8P6C9UAT3XmswFn2LOWnTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg5MzMwNzMzOEQ4RDdCQTU1Q0MwQzA2Mjc5MTUwQTBD
OUZBQzZDQTAeFw0yNjA2MjAwNTE2MjBaFw0yNjA2MjEwOTA5MjBaMDMxMTAvBgNV
BAMTKDlBQ0VDOEE1NDhBNThBNEIwQzIxNkM4QzBFN0ZDRjVEQTU4NDVEOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bhX/mEK1rzWMyDUXNn3CkuJE
hw+hyR6AIMz9qQtYXKtCyyCtJpvYsYbg1RjSI6IjF6sCAHQ6dw8Io1uZtnSeG1VA
cXuwKLFBEVF1/g1770DXd1En3GoyQefA3T+GY8R/maElL1c0uxLkzRl65y+IsmuH
C5eIK78efEpDwzt8fHiq2ShFiGLLmSALjRPzYvi6G22iRcYEk7cmsiYek5ZzQ8Ak
3MXX94o4uF8/duzdHF5H9qV0WPoYNH6HN9uI8uR73aa8+xJCNXDgCvDPW5UZz2sW
aM0MI8m30kmCRJ9tlDWHNI2f38aYnQ37fwFSUK08wQ68LtVeAK182bR+dLsNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUms7IpUiliksMIWyMDn/PXaWEXZswHwYDVR0j
BBgwFoAUCJMwczjY17pVzAwGJ5FQoMn6xsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDNiYTBkMzgtY2E2Mi00YzJiLTkwZTItOGVlZWViODMxODYwLzAvMDg5MzMwNzMz
OEQ4RDdCQTU1Q0MwQzA2Mjc5MTUwQTBDOUZBQzZDQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wODkzMzA3MzM4RDhEN0JBNTVDQzBDMDYyNzkxNTBBMEM5RkFD
NkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNiYTBkMzgtY2E2Mi00YzJiLTkw
ZTItOGVlZWViODMxODYwLzAvMDg5MzMwNzMzOEQ4RDdCQTU1Q0MwQzA2Mjc5MTUw
QTBDOUZBQzZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJODXBugKJmAE4zBky7i4spuKcJlahEKVDcX
/w0OCAJ2hF9qtKWFJ8b/LBnoJ7OCtlvcWQWbdyvftYQ0imXRkd4kpf2Kp2g8o0K9
ecGdX4qFfB4/2eKc+ioExt4UgTeyZK/ziEpy3kgaoSQJoZMRLpJzMJMA+NId/ktG
u8NwgroMyqems/b7FxP2wbIfN8gNGFGWXhMnGGrpKMmMMq7Lh0TzcXdju/PN+NBy
1UILqZR1I0NimU+1EYtHJ9AzvQaQS0pzjVs9t440wEGet/hfVOQz/NbDXq9wyOWO
emjX5hwFqev6+d/dhDiD0nNnkzrV9DGqA9S/BzJ4DNfXtkwv5a0=
-----END CERTIFICATE-----
Generated at Sat Jun 20 08:50:43 2026 by rpki-client