
$ rpki-client -vvf rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
File: F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft (raw, json)
Hash identifier: 6rXpDMeT8MflwdEVxKMo1m3qIi5FZZ1WYAX1uKRRvyQ=
Subject key identifier: 82:E4:54:14:96:72:DE:88:46:7F:45:E2:19:F7:24:10:98:30:F1:36
Authority key identifier: F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45
Certificate issuer: /CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45
Certificate serial: 5E28877B777A68F3F0559E6CD1E9A1F7A388895B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 13:06:11 +0000
Manifest this update: Tue 02 Jun 2026 13:01:11 +0000
Manifest next update: Wed 03 Jun 2026 15:22:11 +0000
Files and hashes: 1: 3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa (hash: QrZG0rd0H2oMRYUrnP7wml3+LX+uV/9SDTxjs0PrJoU=)
2: 323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa (hash: pgEEArXd9XP8zXa/DdMQKaPdRhF2qiIImHSr7qGevFs=)
3: F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl (hash: texcI6kjalUcQeKGtXbTyJhNR1ApJXSpZbgRk6+Fzvg=)
4: 3130332e3230332e3233322e302f32342d3234203d3e20313531363030.roa (hash: IGQZppCH5Ww/fn6QSsHdhxefkfkyI2QhhtmZkcnBVVk=)
5: 3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa (hash: z7iqZjlXVRMDIQEXZKf98grHsnfTgjJWLqwQCjq3co8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl
rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:28:87:7b:77:7a:68:f3:f0:55:9e:6c:d1:e9:a1:f7:a3:88:89:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45
Validity
Not Before: Jun 2 13:01:11 2026 GMT
Not After : Jun 3 15:22:11 2026 GMT
Subject: CN=82E454149672DE88467F45E219F724109830F136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:9c:a1:dc:ca:07:2c:57:b0:b4:ed:2a:5b:
aa:ea:e4:67:5a:6b:9c:d6:65:30:08:c9:e9:d9:7c:
f9:44:93:0e:51:5d:e6:cf:0a:de:cc:5b:da:fd:ba:
c7:79:51:9c:73:ea:3d:17:71:f7:60:14:67:90:c2:
aa:9b:6f:c3:49:ac:7c:ef:27:90:99:d7:be:c5:72:
b7:dd:48:d3:fc:6f:7f:c6:fb:87:55:83:ab:47:2d:
de:e1:05:ab:7a:74:65:83:01:56:e9:e2:08:ea:39:
11:27:37:14:34:ba:bb:ca:ce:ea:cd:ac:18:6a:fa:
cc:07:c6:5b:12:50:bc:d9:fe:1f:4e:f8:50:f2:d7:
96:02:d3:e9:eb:d1:3f:3a:4b:69:26:84:91:99:69:
63:f4:47:95:fa:9f:40:c9:30:ec:60:1f:fd:9b:2b:
6c:2a:4e:77:96:02:96:bb:ac:93:29:8c:a1:64:bd:
c7:99:51:98:08:dc:bc:53:7c:dc:e5:d7:f3:b9:ca:
7c:c6:c7:32:6b:88:3a:82:a0:23:06:94:3b:ef:4a:
39:e2:60:9a:c3:ec:8f:db:8c:1d:9f:73:0f:9c:18:
dd:a2:06:da:19:04:87:4a:47:01:62:7a:5f:1c:7f:
5e:7f:99:53:6a:f5:ed:cd:d2:23:a5:3a:74:cc:eb:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E4:54:14:96:72:DE:88:46:7F:45:E2:19:F7:24:10:98:30:F1:36
X509v3 Authority Key Identifier:
keyid:F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fb:ba:99:64:d4:ce:05:2f:60:3d:22:dd:b6:d2:21:cd:ec:
f9:d7:c2:0f:d1:c7:e6:98:bf:e6:a5:d5:60:d6:92:8d:fe:0a:
70:18:2b:66:a6:0f:7b:55:1a:a3:f3:a7:13:60:4d:1a:43:c2:
28:82:49:d9:e6:c5:3f:22:2d:d5:a4:0b:2f:06:8d:c8:58:9f:
95:d9:79:2e:1c:74:a7:a2:00:07:58:ba:b6:70:8f:1c:4e:e2:
1f:3f:7d:22:e4:f2:95:9a:a6:6b:d0:17:ee:24:18:89:46:b7:
2a:36:ae:49:32:fc:b3:f2:81:8e:3e:cb:8a:fe:71:ef:54:51:
32:20:aa:12:dc:8a:06:f7:75:01:c5:b2:2f:f5:5c:e3:f0:66:
28:32:ef:83:ef:1f:eb:a2:a4:17:16:06:69:d2:5a:de:e4:3f:
0d:85:9e:19:be:6f:07:2e:81:97:90:8e:45:d6:f4:43:51:33:
ee:a0:2f:62:3d:7c:1e:2d:53:d0:64:82:06:55:50:7d:ea:64:
b2:61:6f:52:2e:b2:0c:93:68:ff:74:d2:98:61:2b:6f:dd:0f:
de:8f:b6:6b:6a:c1:57:5b:48:e4:0b:b7:6d:ca:44:3c:58:c5:
37:12:85:15:5a:d8:7c:0c:3e:da:e0:ef:46:34:96:d2:f5:61:
cc:c0:af:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:46:40 2026 by rpki-client