
$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
File: 595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft (raw, json)
Hash identifier: 5LqD3wYzxdkB89+zXkIxESddUIS1YwL1oKacuXVfO2c=
Subject key identifier: D8:FC:2C:9A:EE:1C:84:38:D1:71:71:DA:8D:C0:ED:42:72:D6:19:40
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Certificate issuer: /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial: 0E801AB8B73F8361687F37CF1D689F9E740CD378
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
Manifest number: 89
Signing time: Wed 12 Aug 2026 13:59:12 +0000
Manifest this update: Wed 12 Aug 2026 13:54:12 +0000
Manifest next update: Thu 13 Aug 2026 15:15:12 +0000
Files and hashes: 1: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: Gf7+JDdgZXaOoBD3FCXccmzSiqspLprw2RT0W6wNy+U=)
2: 595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl (hash: tjFtISjlZ33oS1XUchXylacZYcCzLOo8pK2JjgcnE/s=)
3: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: eOdt05IAfcrKKZUnC2uIX6d/C9w0dr4HU6UCs9176ek=)
4: 3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa (hash: EZ+ZMEszQ0FNnAyScxrOoCf6N5MbYNv0AIqesnyNkY8=)
5: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: YnpwLS3qShrtat5vFr4GKHpgIrsqYW7nhd/bbP/N9z4=)
6: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: OsRtYTl/a4gBsIVTCYGY7UbsLX5kl3Dd0rUx9sxMLF8=)
7: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: kbsHwCF+kLPIM6LmBzd7ReTnbGaVE3pJ2tb1Y6LGrMo=)
8: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: pBXuYTqReMplN2AY6AolkobEan90DNcRX+8WnFHv1IY=)
9: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: jO/LVsBGp/hIYW/T7V2ve/LWVG5Avg+yBl19oxnQ+Ok=)
10: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 0dcgbUIE4O45ZJeQQknhi7QzWy9JrD3T/y5JsTnfFC0=)
11: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: jNXjwR9NoJrp9dtiwnlZ8ZD+nF3IUWQs6hiqUnrS/Ok=)
12: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: oIB0azCHKZZD4LUQLYG0Yqlb4f/9KSBQ4JwecEqWsUw=)
13: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: eR32X6TB9dCvTyEj8xcbUe0oCJGcSbLwWM78VEF/mIM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Aug 2026 15:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:80:1a:b8:b7:3f:83:61:68:7f:37:cf:1d:68:9f:9e:74:0c:d3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Validity
Not Before: Aug 12 13:54:12 2026 GMT
Not After : Aug 13 15:15:12 2026 GMT
Subject: CN=D8FC2C9AEE1C8438D17171DA8DC0ED4272D61940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:b7:24:b3:e2:46:79:08:3b:c7:10:3d:23:
86:62:41:4f:b5:f7:1a:2b:78:8e:b2:86:6b:26:c6:
50:09:1a:e5:14:72:3e:f8:ce:b3:9b:33:04:ae:5a:
b2:46:6c:f3:e9:17:fa:95:41:e8:e0:2c:20:a1:c2:
fe:c8:86:13:2c:d7:cc:eb:cf:59:e9:89:97:30:37:
77:a3:ef:e2:45:cc:e6:86:ed:02:df:53:ec:91:74:
63:37:59:56:02:15:83:26:e8:9f:86:6d:fa:fb:b4:
68:b4:64:b8:48:ce:e2:b6:4a:27:0c:2a:a5:1f:b1:
09:d9:4b:35:e4:d8:a5:75:1a:d9:78:72:55:6b:e9:
26:1c:bd:b2:2f:6d:39:01:7d:67:1a:83:33:86:21:
6b:7a:ef:d4:8b:ce:83:cc:44:ae:72:8d:02:90:f4:
0b:f4:00:8d:69:a0:0f:04:71:6f:41:ca:39:48:5e:
dc:85:04:b5:cf:90:81:ef:a0:e0:ba:42:5f:1d:9a:
e3:20:64:34:6e:4a:33:07:0b:49:38:7b:bc:32:31:
1f:b1:5c:68:e4:ae:36:e4:81:3e:d1:b7:e7:f5:bb:
02:3f:61:ec:d5:5d:f9:09:59:26:80:1b:44:94:cb:
17:4c:a4:f1:b8:11:f5:e9:ee:b5:e0:88:ec:73:b1:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FC:2C:9A:EE:1C:84:38:D1:71:71:DA:8D:C0:ED:42:72:D6:19:40
X509v3 Authority Key Identifier:
keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:44:ed:9f:df:df:ad:5e:c9:d1:a9:bc:85:f9:22:59:c4:30:
94:e9:25:77:b7:47:97:19:e7:0a:34:a5:71:a1:a2:07:45:5a:
6b:1e:5b:f6:fa:cb:72:de:d7:60:37:5b:4c:02:ed:f4:f2:84:
fe:ec:5e:00:65:a5:5a:b9:51:23:77:64:9d:6c:bf:66:86:44:
01:90:e7:46:6a:78:52:90:06:4f:12:e3:42:3c:81:3f:b2:9e:
c5:a3:32:5e:30:02:0b:a0:3d:75:cb:ba:55:53:53:8d:a7:17:
02:aa:b2:cb:39:b3:39:9a:b7:29:be:79:3d:1c:ee:8a:0f:cd:
93:8e:b0:50:b7:c0:26:fa:0c:d0:4b:ca:73:af:fa:47:32:e6:
2d:5e:d2:89:c2:1b:1b:29:e8:73:43:41:9c:26:c1:39:b8:cf:
ce:f6:a8:7a:ac:fb:b8:2a:ac:e6:ff:44:22:5d:fe:7e:13:09:
5a:9d:9e:de:8e:71:20:38:b4:dc:9e:47:73:67:c9:b0:14:bb:
07:b1:92:fe:c9:9a:65:6a:dc:9c:e0:a7:7b:1f:69:81:8d:63:
b6:3d:d7:08:72:67:17:de:c3:ef:32:4b:b2:05:99:c8:5d:ad:
e2:58:68:e4:a8:0c:b0:b4:9a:31:1d:73:ec:56:1c:d1:0e:f5:
02:52:c2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:19:50 2026 by rpki-client