
$ rpki-client -vvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
File: 412965964A4E12BD59BDF602A054F3394E99DC57.mft (raw, json)
Hash identifier: nPQW3NW2vyQG8DULga9oyda+Eh18vkfCK0+MISut0bY=
Subject key identifier: 62:CA:1F:01:50:16:69:80:39:A8:D9:30:83:A9:3A:4A:4A:32:5F:55
Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
Certificate issuer: /CN=412965964A4E12BD59BDF602A054F3394E99DC57
Certificate serial: 38D6B9556DC4260B092B76988E2CA83B64AB6157
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
Manifest number: 13
Signing time: Sat 16 May 2026 07:53:57 +0000
Manifest this update: Sat 16 May 2026 07:48:57 +0000
Manifest next update: Sun 17 May 2026 08:51:57 +0000
Files and hashes: 1: 412965964A4E12BD59BDF602A054F3394E99DC57.crl (hash: iYoEf4em3/nm7i1IVwqKBFHmUbV7A2CVlOdIv96gkIs=)
2: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: SenSDJoyF/7+T+Cte5ij0s1hRLf2P72+k6wabdM015Q=)
3: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: s2Tpgag7FxdnRddbkWVhsKOC3K9zk4kizsUSEDbaWVQ=)
4: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: PR4TqG8Gt/NDoejWkXR5KiYWrPCc3WE35fh/Jxbvano=)
5: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: TwoAdTsM3NEVv7qQwQrrGzyUs0c/Mt2dxvgYNM1lek8=)
6: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: uLq3gfPOGWF6ZWj1F9WMmGzvCujMeECGwqgAQGV2Nv4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 08:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:d6:b9:55:6d:c4:26:0b:09:2b:76:98:8e:2c:a8:3b:64:ab:61:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57
Validity
Not Before: May 16 07:48:57 2026 GMT
Not After : May 17 08:51:57 2026 GMT
Subject: CN=62CA1F015016698039A8D93083A93A4A4A325F55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:8f:29:84:7d:a6:76:fc:4e:47:32:2f:fc:
28:0f:e0:55:8b:86:fe:3e:5c:81:db:45:0c:5d:e2:
8f:67:ee:7d:57:43:c4:09:10:45:7f:03:e1:32:73:
57:96:9a:b8:21:8e:f4:63:78:6f:53:99:df:a9:49:
5c:58:e9:6f:67:e8:5f:1e:ad:21:25:8c:8e:f7:ae:
28:e2:65:65:04:fb:e4:f5:2e:26:cd:26:dc:a2:aa:
94:b9:70:12:44:92:71:9b:29:1d:20:f5:f8:5f:ee:
d8:37:a3:15:e2:bb:77:6c:40:3c:ba:0a:e5:5a:1f:
18:b0:9c:ca:b5:f5:72:a3:35:b8:ee:f6:a5:2a:ce:
bf:c6:26:f5:cb:38:8f:be:fe:67:66:83:71:07:af:
23:fa:82:aa:ed:27:a2:51:3d:69:4f:86:a4:5d:dc:
1e:b6:f2:fc:e3:7c:b2:30:9b:4c:da:8e:e2:bf:e5:
5e:b3:66:e9:a1:f2:6e:96:21:65:a9:b3:44:5f:90:
06:17:98:ae:72:4e:51:63:91:7b:64:2c:45:99:98:
73:a7:4d:27:44:5d:4b:e2:9c:5d:a9:f2:e1:69:cb:
2b:35:9f:13:24:ac:a3:84:e7:4d:c2:1d:4f:9a:64:
73:c2:4f:04:df:34:6e:c5:ea:a8:bf:ad:a2:e9:94:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CA:1F:01:50:16:69:80:39:A8:D9:30:83:A9:3A:4A:4A:32:5F:55
X509v3 Authority Key Identifier:
keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:96:ee:93:95:d6:2e:5b:ff:1c:5d:f7:df:9b:a5:fc:f7:5f:
bd:25:50:92:d0:ef:7a:da:70:98:d6:e8:72:51:18:ce:98:40:
0a:3d:2e:84:2a:e2:76:df:60:6c:97:52:9d:a6:e2:8c:13:dc:
d0:14:28:96:dc:fe:07:04:32:25:ca:87:a8:db:69:19:b9:17:
40:29:77:c1:a1:a7:ed:1f:b1:db:7d:94:21:37:bc:e6:58:80:
f0:ad:a0:7d:3b:9c:37:f3:4b:b0:e0:fe:2b:7e:b5:f4:23:7c:
d8:33:68:dd:33:40:22:a7:84:d2:ac:a1:37:85:3c:36:09:2b:
69:67:6b:17:31:de:a8:46:18:f8:22:0a:1a:7c:49:6a:4a:3b:
46:be:b9:89:09:1a:6a:8e:53:99:2f:ad:bf:ff:75:70:d3:bf:
6d:d6:a4:6d:c9:8c:36:30:da:bb:cc:8d:13:9c:bf:79:fb:fb:
7a:27:04:60:a4:74:66:9b:be:fc:9a:69:35:d5:18:ed:5c:c0:
15:fd:dd:c4:86:df:1c:3a:41:c7:da:1e:7d:c7:54:33:6f:49:
68:32:47:cb:5b:47:e1:da:02:31:20:25:a4:7e:4d:d8:1d:1a:
3f:6b:ad:2a:7c:15:54:52:da:cf:0e:5c:95:0f:22:7d:a1:85:
91:7f:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:31:57 2026 by rpki-client