
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
File: D59D3CB80F39720CC6378798AF38E978ACC61169.mft (raw, json)
Hash identifier: eWng295hnanacrHsV2Ey5ROtck7HR7xoj1gcdtbDAYQ=
Subject key identifier: 0B:32:93:00:DF:AC:3F:A5:78:51:FC:22:5B:5D:32:4C:2A:11:3D:61
Authority key identifier: D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69
Certificate issuer: /CN=D59D3CB80F39720CC6378798AF38E978ACC61169
Certificate serial: 18AF3CDE1102D04297C6AC0FC72DD6DB44B6B035
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
Manifest number: 9C
Signing time: Wed 26 Aug 2026 16:46:53 +0000
Manifest this update: Wed 26 Aug 2026 16:41:53 +0000
Manifest next update: Thu 27 Aug 2026 17:23:53 +0000
Files and hashes: 1: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: xDMl4fVPq1KOh6yEyAaFX1Ne1uCSqYoqoG2DK9eXVJc=)
2: D59D3CB80F39720CC6378798AF38E978ACC61169.crl (hash: h730he2A37FKcTBCaZYFwa7K3pFbw79vGbhX1LLY4yI=)
3: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: TyeS6OFp+eX9ORLvbkAk7IV44ZT6uQE45kxcvU/K/wA=)
4: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: NXjXH8bagUMJQqwbA86uVF5uVlgJU27CgQDeHpB6ITQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl
rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:af:3c:de:11:02:d0:42:97:c6:ac:0f:c7:2d:d6:db:44:b6:b0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D59D3CB80F39720CC6378798AF38E978ACC61169
Validity
Not Before: Aug 26 16:41:53 2026 GMT
Not After : Aug 27 17:23:53 2026 GMT
Subject: CN=0B329300DFAC3FA57851FC225B5D324C2A113D61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:af:c5:d2:e1:0b:e9:f3:07:e4:98:7c:92:
e8:86:4a:3b:23:57:98:e6:92:53:75:6c:f6:b3:3c:
94:78:3a:6a:70:b2:7a:aa:27:15:1c:01:b8:73:c5:
b3:f0:b9:f9:fa:43:55:b3:40:0c:1e:67:44:40:19:
69:9d:25:81:99:8a:3a:5e:50:2b:5d:93:fd:b5:3b:
65:bb:de:f0:08:78:12:48:d7:b8:6c:ab:5f:65:a3:
68:92:be:76:31:a1:09:d5:40:d7:1c:84:5a:6d:ab:
8b:ea:b1:f5:4b:84:4c:f7:65:10:89:a3:0b:26:6d:
3b:44:8a:59:b8:4b:56:f6:e1:aa:d5:c0:1f:2c:c3:
5c:d0:20:a7:47:bd:94:cc:79:90:93:14:45:85:29:
76:f4:81:59:fd:f9:80:7b:df:97:e7:d7:8d:d7:b3:
8a:62:3b:f1:7e:4d:06:1b:dd:91:84:b4:4e:70:eb:
cf:36:93:ef:bc:63:d8:1e:52:be:fa:03:55:59:c6:
17:a1:3f:73:5e:ce:03:6a:25:65:a3:b8:ab:3f:cf:
0a:fa:80:28:de:ff:07:56:cd:eb:a9:c5:4d:68:40:
4c:db:e9:67:6f:03:53:32:a9:bf:c6:2d:14:9d:bc:
15:a2:27:92:2a:6b:fe:24:c7:76:7b:49:06:3a:47:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:32:93:00:DF:AC:3F:A5:78:51:FC:22:5B:5D:32:4C:2A:11:3D:61
X509v3 Authority Key Identifier:
keyid:D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1d:5c:1d:01:61:5a:d3:68:51:0d:43:c0:06:47:33:9a:a7:
96:fb:23:9b:e8:a7:e2:d8:9a:d3:34:6f:1f:9f:57:00:72:73:
56:4f:e5:ad:84:8b:7a:fc:d0:f8:a7:1b:4a:8b:83:b2:76:e2:
a1:e1:13:71:a6:89:70:69:7c:9e:fc:ff:c4:2b:9e:f0:86:3b:
e0:62:42:29:fd:7a:3f:67:09:d9:a6:bf:92:25:0c:11:48:c2:
ef:06:01:61:90:3b:3a:00:38:79:86:c1:ee:49:b5:d9:e6:29:
a3:da:f6:d5:a9:aa:48:c2:9b:f6:09:d1:9c:c8:a4:33:ea:e8:
dd:7a:5f:64:3a:c4:af:63:a2:89:36:13:02:b5:b3:c1:98:70:
23:05:23:4f:53:a9:c3:89:13:5e:5c:55:57:50:3e:3a:3c:0c:
6d:fc:d1:75:00:fe:92:89:3d:5b:14:c1:b3:30:87:f3:a6:a5:
b6:96:55:32:df:cd:82:a6:ad:a4:02:6c:0b:6a:1d:06:f4:ba:
33:c3:c9:5a:04:a5:83:82:15:53:66:34:f2:1c:3a:aa:19:07:
b4:f2:9d:b6:4d:b8:2a:ae:a7:41:39:fe:c8:43:d5:1c:35:5d:
7c:f9:df:bb:20:95:d1:bf:e2:60:d5:cd:e3:e6:36:65:d6:71:
12:15:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:03:02 2026 by rpki-client