
$ rpki-client -vvf rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft
File: 885F36F281B0D4CC516E3818323CB9C1F30AF373.mft (raw, json)
Hash identifier: zSzs6FIoqvZTEmhP/Jcd/J3FCkC8e6S9alXWlSWbRQM=
Subject key identifier: 41:02:76:25:A0:39:46:CA:AF:E5:AD:A0:47:9F:31:53:A3:8A:7D:08
Authority key identifier: 88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73
Certificate issuer: /CN=885F36F281B0D4CC516E3818323CB9C1F30AF373
Certificate serial: 4DBB3BAB26644DF402452D68AFD1E5613C400C71
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft
Manifest number: 11
Signing time: Thu 14 May 2026 03:55:22 +0000
Manifest this update: Thu 14 May 2026 03:50:22 +0000
Manifest next update: Fri 15 May 2026 06:24:22 +0000
Files and hashes: 1: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: 7FbZ5pEtfFRoEPaeAL7hu5dTo4RHGPeRroJ1/nBeqOo=)
2: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: OhU6QiMCF4ACcpqhynxB56U3zBuIn9qNb0BYC0SetEg=)
3: 885F36F281B0D4CC516E3818323CB9C1F30AF373.crl (hash: UoPAPTIQI8pKs9/7P0Jy0WnEmMpcRUoGmF0/00nUkW0=)
4: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: vKe09VJpirx3d8Vkqz6gLuC+DkGeanu2r5WmGCErId4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl
rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 15 May 2026 03:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:bb:3b:ab:26:64:4d:f4:02:45:2d:68:af:d1:e5:61:3c:40:0c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885F36F281B0D4CC516E3818323CB9C1F30AF373
Validity
Not Before: May 14 03:50:22 2026 GMT
Not After : May 15 06:24:22 2026 GMT
Subject: CN=41027625A03946CAAFE5ADA0479F3153A38A7D08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:cf:e0:31:69:a1:95:ab:c2:52:0d:22:1b:
3b:a7:1d:f7:ce:77:9a:21:41:6a:99:b9:c1:d6:30:
88:c9:5e:68:59:3d:2f:74:92:62:75:0e:3a:38:4d:
50:d8:e0:5a:e9:dc:1f:61:d2:03:64:08:e8:6a:6b:
87:b5:5a:dc:5a:c8:9e:e0:5c:1b:e3:5b:fb:e8:b9:
69:95:40:80:a8:9e:1a:f4:81:01:3c:a5:43:26:a5:
fe:33:fc:b9:87:9f:c9:0b:4a:2b:ee:42:d2:d9:b1:
2e:9c:4e:38:dd:0b:fa:90:1e:c0:4d:00:13:b1:11:
37:27:0d:e1:2a:f7:ee:b4:5d:70:8d:3b:99:d6:8b:
b1:ae:c1:71:6f:de:d9:76:93:e6:1b:43:38:08:f4:
3b:30:b0:36:5b:01:01:a8:ff:34:6d:80:56:ff:07:
81:23:0d:ee:ad:da:42:8a:fd:86:68:4e:b0:6d:24:
d8:51:7c:c1:32:f4:65:3e:9f:84:72:6b:01:09:aa:
bf:fd:19:d3:b2:56:1d:37:47:01:1e:7a:eb:22:39:
78:78:98:00:d6:9f:a8:b5:df:4c:6e:4c:71:fd:d8:
bb:3a:37:5f:04:e2:1a:7b:5a:22:3d:b9:d5:9b:aa:
e0:66:b6:e6:a9:30:4c:41:e8:a6:f9:fa:e4:80:e9:
1e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:02:76:25:A0:39:46:CA:AF:E5:AD:A0:47:9F:31:53:A3:8A:7D:08
X509v3 Authority Key Identifier:
keyid:88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5f:97:d5:0c:f6:4d:19:39:6a:4c:70:58:68:71:d4:4b:f5:
6d:e0:0c:2f:1b:5d:0f:eb:41:da:fc:16:81:1d:00:bc:e1:b5:
4e:b5:80:8e:d0:25:2b:f5:eb:45:2b:de:21:76:7b:a1:4a:e9:
bf:28:42:a3:c8:dd:cc:dc:e7:32:6a:77:03:bc:81:79:46:27:
28:41:4e:a2:22:9c:3a:56:69:85:04:7a:93:00:c7:3f:e7:bc:
f8:22:3d:09:75:38:93:8b:99:3b:80:fb:30:24:b3:47:48:56:
2a:6a:ff:83:7e:57:9a:49:01:1e:01:e3:4f:95:86:2f:cf:ef:
d9:a9:19:1d:2c:d5:f8:a0:05:f8:6e:85:9f:7f:da:31:7a:29:
e9:e5:16:c0:fd:0c:58:16:84:09:eb:fc:31:f5:e9:0b:59:32:
c9:57:86:aa:8e:52:a8:b3:c3:af:76:eb:03:ca:c3:56:ff:fa:
b4:6f:a2:9b:14:11:32:ed:af:54:52:e9:6d:a7:91:61:63:70:
a7:85:d7:86:ce:1f:65:4d:2d:d3:c3:bd:25:07:7a:43:99:f2:
26:32:c2:55:25:fd:7d:cf:f7:e7:30:5a:00:61:9c:50:86:35:
fd:15:b6:3d:9d:97:c8:47:91:f2:76:d9:fa:b9:d1:a3:84:63:
22:74:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 09:09:21 2026 by rpki-client