
$ rpki-client -vvf rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
File: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft (raw, json)
Hash identifier: Cszq0juLpwSVY0gdhgcamBMb2EFkqvJyG/tdbDGqq+4=
Subject key identifier: 6E:15:45:E3:FB:8A:03:30:F7:19:D7:CF:8E:07:0E:CD:58:EC:DF:C8
Authority key identifier: DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27
Certificate issuer: /CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027
Certificate serial: 0B5EA773EA91DFCFAA01ADFC95C2C8A977FC0D24
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 17:57:31 +0000
Manifest this update: Fri 19 Jun 2026 17:52:31 +0000
Manifest next update: Sat 20 Jun 2026 20:06:31 +0000
Files and hashes: 1: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: 7auAs3JZetQc2Zih3zy94WvlM7s/oo6N4QlMSA+A3AA=)
2: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl (hash: 9FVj0xih5aEBFeQqT4aBInAROK4KligHxIadNgH3Qpo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl
rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 20:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5e:a7:73:ea:91:df:cf:aa:01:ad:fc:95:c2:c8:a9:77:fc:0d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027
Validity
Not Before: Jun 19 17:52:31 2026 GMT
Not After : Jun 20 20:06:31 2026 GMT
Subject: CN=6E1545E3FB8A0330F719D7CF8E070ECD58ECDFC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:c1:26:1f:4c:cc:8e:a0:45:58:4f:6c:2f:
94:40:0f:5b:b6:4a:34:e9:11:97:d9:fb:34:e9:74:
d0:73:a9:97:07:29:9d:3d:fd:b9:2b:c3:b1:ac:a8:
b8:c7:ad:6d:2f:31:43:55:a5:c3:70:05:a5:08:3f:
32:c5:67:c0:b3:8c:c7:4d:42:27:2b:25:74:61:b8:
91:37:3f:ac:a4:c1:d0:3f:b7:32:78:3a:00:3a:9e:
7d:01:3d:21:a1:fc:db:3b:dc:bd:fd:ad:0b:9f:cd:
11:7f:89:2e:c8:0b:c4:40:7c:d4:fb:02:40:85:17:
25:2e:3f:70:31:15:54:fb:a4:07:c8:32:e7:3f:02:
1f:93:76:01:92:dc:2b:fb:cb:56:27:04:00:17:62:
19:ae:b2:96:8a:cf:52:5d:c3:6f:6f:70:c2:ee:24:
12:e7:37:7b:90:81:1c:8a:cc:25:96:c5:89:c0:1d:
e7:aa:21:c0:73:6c:c9:c4:62:d1:bc:d3:eb:fa:f6:
02:cd:56:41:d9:fc:ff:cf:a0:6c:b1:9e:c1:f6:7d:
53:90:4b:27:d2:29:29:49:58:de:e8:26:b7:63:05:
79:93:bd:86:26:75:a4:f7:85:bd:95:fc:96:b5:ab:
0f:6b:ed:7b:d1:28:46:f1:7c:be:b7:e9:d7:75:8a:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:15:45:E3:FB:8A:03:30:F7:19:D7:CF:8E:07:0E:CD:58:EC:DF:C8
X509v3 Authority Key Identifier:
keyid:DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e8:d4:f6:1b:1f:ab:71:3f:b8:36:02:43:41:fb:94:91:85:
fe:e6:fd:0d:fa:25:5d:ba:9d:68:a8:4d:e9:fa:76:43:d9:7e:
5c:70:45:3c:29:e3:4c:27:14:53:a0:93:4e:f2:07:83:12:bf:
40:5e:c4:b1:e1:14:b1:f4:02:cb:df:48:5a:b0:02:c2:4f:84:
c9:07:e5:0a:42:9f:4b:f3:42:25:55:41:45:90:e2:fe:50:40:
3f:23:ef:ed:e2:e4:9c:13:02:b7:63:1d:a5:4e:5b:fc:34:d5:
fa:e8:89:ac:54:0c:f2:9d:4d:a4:6c:08:8b:dd:78:d2:ec:d1:
9f:ef:82:b6:c6:f9:a4:a3:98:91:7d:46:05:84:7b:f5:b5:5a:
fc:bc:0e:48:a1:8f:d6:33:91:60:93:2c:22:2b:28:1e:f6:99:
66:6a:b1:27:10:6c:98:de:4f:79:7f:3f:11:72:0f:76:a2:15:
70:49:3d:11:fd:77:50:19:3b:b1:48:05:ee:35:86:58:8d:f5:
c2:42:04:78:e5:47:eb:86:4b:14:fc:1e:78:86:e2:f8:da:30:
d1:6f:31:80:da:d8:26:ca:74:58:ab:6f:bb:08:2d:5e:ce:55:
46:aa:3d:3d:4a:3e:22:d6:f7:60:f5:86:74:37:c1:d5:7f:9e:
c5:61:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:14:45 2026 by rpki-client