
$ rpki-client -vvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft
File: 5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft (raw, json)
Hash identifier: 8pul1XnLiaYIEZ/xQf1+ebzWExZollRCthujVCPyLU4=
Subject key identifier: EF:3D:87:E8:C5:1C:9A:CA:33:EE:DF:77:A4:13:1E:16:85:73:8B:20
Authority key identifier: 53:38:90:49:40:BF:82:A8:EF:F3:71:62:A1:BA:E6:B9:1F:CB:67:3C
Certificate issuer: /CN=5338904940BF82A8EFF37162A1BAE6B91FCB673C
Certificate serial: 0D10FB3155AAB2704C23089E566616F958362E14
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 16:42:10 +0000
Manifest this update: Thu 18 Jun 2026 16:37:10 +0000
Manifest next update: Fri 19 Jun 2026 18:49:10 +0000
Files and hashes: 1: 323030313a6466333a643234303a3a2f34382d3438203d3e20313336303839.roa (hash: ln/cutFyRprFz8dtBUFO3cjX8Yn8fKNHUiK0Pk7iFOE=)
2: 5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl (hash: hFEPzh4I28oHRmVX8DryqvQFiSZrU2rtCHhCLyTbivE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl
rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 12:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:10:fb:31:55:aa:b2:70:4c:23:08:9e:56:66:16:f9:58:36:2e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5338904940BF82A8EFF37162A1BAE6B91FCB673C
Validity
Not Before: Jun 18 16:37:10 2026 GMT
Not After : Jun 19 18:49:10 2026 GMT
Subject: CN=EF3D87E8C51C9ACA33EEDF77A4131E1685738B20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:4e:d1:c3:95:8b:de:a1:72:84:b0:00:ff:
b5:57:b6:cf:de:ec:10:4b:99:76:35:a6:99:0a:9a:
ba:fc:11:65:cb:b6:39:73:d5:d2:50:04:0b:1f:92:
47:a9:cd:8e:af:a3:a3:d8:d2:e3:d5:13:b2:33:6a:
7f:36:73:df:a6:90:1b:b9:83:5a:0a:c5:81:5b:ac:
1c:42:9e:72:d2:d5:06:4d:98:64:5c:4e:76:c5:bb:
d2:90:46:14:10:51:97:cc:9b:1b:68:27:fe:fd:71:
9c:30:2a:84:4d:39:7a:80:6f:94:e7:c5:5e:70:05:
18:e8:3a:49:dc:dc:ae:30:6a:5f:f9:cb:4e:5f:7d:
e1:ca:4e:61:88:64:78:ba:33:b6:36:2e:8a:50:b8:
95:1e:29:58:67:e9:90:b0:72:cc:ed:26:3f:9b:77:
ad:5d:43:0b:7c:e0:d7:3f:73:a6:53:70:c5:fc:d7:
1d:51:c0:70:8e:88:4f:96:32:44:e6:0a:1c:59:aa:
45:16:49:de:f0:bf:5d:dc:13:18:75:06:6a:2d:22:
18:01:d8:40:b7:73:b1:a3:d1:de:1d:36:c5:6b:9a:
8d:9d:f3:4c:40:8f:74:b6:ed:cd:aa:71:7f:f0:1e:
c1:0d:37:73:27:ca:ca:b5:9a:ff:d8:f3:a6:52:d6:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3D:87:E8:C5:1C:9A:CA:33:EE:DF:77:A4:13:1E:16:85:73:8B:20
X509v3 Authority Key Identifier:
keyid:53:38:90:49:40:BF:82:A8:EF:F3:71:62:A1:BA:E6:B9:1F:CB:67:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/5338904940BF82A8EFF37162A1BAE6B91FCB673C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ae:d7:ec:4a:1f:e5:51:aa:33:4c:fd:8b:5b:bc:f0:4e:df:
20:7a:fc:65:0f:f4:7f:97:5a:e9:b6:cb:ef:92:ad:b3:54:7e:
30:33:6a:d1:a9:41:38:f9:c7:5a:60:82:03:79:c3:e9:07:85:
d2:7e:6f:58:ed:32:06:8c:19:79:07:47:00:f6:2b:ed:9e:37:
46:09:3f:96:5a:f7:33:4c:63:1e:2f:4a:c3:1a:41:a7:8f:52:
d5:d5:5d:bf:1e:4d:0a:cb:3c:3c:9a:10:f2:04:5d:52:db:f7:
d9:4d:1f:23:bd:2b:22:27:81:06:62:86:79:5a:b1:43:9d:c2:
fd:f3:c5:49:ca:13:34:d3:45:14:f7:aa:2e:79:b7:e4:57:4f:
7d:7d:ec:59:34:34:eb:e5:f8:38:10:68:af:91:dd:d9:f4:f6:
5d:75:ac:5f:6f:55:24:ce:c1:fe:b5:66:1e:af:10:55:62:ec:
ba:43:6c:58:23:b3:e0:7b:53:94:e1:ea:73:83:89:87:f7:62:
58:71:a1:59:15:83:d0:a9:92:25:50:51:aa:5a:99:cb:29:cd:
07:f1:83:cc:31:ff:fa:5f:cd:f0:be:4d:94:25:97:80:a5:d1:
f4:38:5e:57:6d:c8:11:a4:3c:fd:94:a9:47:40:69:3b:10:6d:
a3:6f:93:30
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDRD7MVWqsnBMIwieVmYW+Vg2LhQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMzODkwNDk0MEJGODJBOEVGRjM3MTYyQTFCQUU2Qjkx
RkNCNjczQzAeFw0yNjA2MTgxNjM3MTBaFw0yNjA2MTkxODQ5MTBaMDMxMTAvBgNV
BAMTKEVGM0Q4N0U4QzUxQzlBQ0EzM0VFREY3N0E0MTMxRTE2ODU3MzhCMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUe07Rw5WL3qFyhLAA/7VXts/e
7BBLmXY1ppkKmrr8EWXLtjlz1dJQBAsfkkepzY6vo6PY0uPVE7Izan82c9+mkBu5
g1oKxYFbrBxCnnLS1QZNmGRcTnbFu9KQRhQQUZfMmxtoJ/79cZwwKoRNOXqAb5Tn
xV5wBRjoOknc3K4wal/5y05ffeHKTmGIZHi6M7Y2LopQuJUeKVhn6ZCwcsztJj+b
d61dQwt84Nc/c6ZTcMX81x1RwHCOiE+WMkTmChxZqkUWSd7wv13cExh1BmotIhgB
2EC3c7Gj0d4dNsVrmo2d80xAj3S27c2qcX/wHsENN3Mnysq1mv/Y86ZS1r1bAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7z2H6MUcmsoz7t93pBMeFoVziyAwHwYDVR0j
BBgwFoAUUziQSUC/gqjv83FiobrmuR/LZzwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzEvNTMzODkwNDk0
MEJGODJBOEVGRjM3MTYyQTFCQUU2QjkxRkNCNjczQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MzM4OTA0OTQwQkY4MkE4RUZGMzcxNjJBMUJBRTZCOTFGQ0I2
NzNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl
YWEtYjRlM2VlMTE2ODgyLzEvNTMzODkwNDk0MEJGODJBOEVGRjM3MTYyQTFCQUU2
QjkxRkNCNjczQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFCu1+xKH+VRqjNM/YtbvPBO3yB6/GUP9H+X
Wum2y++SrbNUfjAzatGpQTj5x1pgggN5w+kHhdJ+b1jtMgaMGXkHRwD2K+2eN0YJ
P5Za9zNMYx4vSsMaQaePUtXVXb8eTQrLPDyaEPIEXVLb99lNHyO9KyIngQZihnla
sUOdwv3zxUnKEzTTRRT3qi55t+RXT3197Fk0NOvl+DgQaK+R3dn09l11rF9vVSTO
wf61Zh6vEFVi7LpDbFgjs+B7U5Th6nODiYf3YlhxoVkVg9CpkiVQUapamcspzQfx
g8wx//pfzfC+TZQll4Cl0fQ4XldtyBGkPP2UqUdAaTsQbaNvkzA=
-----END CERTIFICATE-----
Generated at Thu Jun 18 21:11:13 2026 by rpki-client