
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft
File: 815468AF79588A14560E794FB64918D01C6C1FDC.mft (raw, json)
Hash identifier: nR1vnNLd0ScICi/mgYikc1y6EedUOY0u0AFoVXi3W1Y=
Subject key identifier: 36:AA:BF:C8:92:CC:F5:AF:27:45:77:48:A3:C7:64:6B:DA:E8:B2:F3
Authority key identifier: 81:54:68:AF:79:58:8A:14:56:0E:79:4F:B6:49:18:D0:1C:6C:1F:DC
Certificate issuer: /CN=815468AF79588A14560E794FB64918D01C6C1FDC
Certificate serial: 23834FDA8579DE84B6435117F5B3C0AD0124AC2B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 21:21:41 +0000
Manifest this update: Fri 19 Jun 2026 21:16:41 +0000
Manifest next update: Sun 21 Jun 2026 00:14:41 +0000
Files and hashes: 1: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: j6ecS+LU2IE57nqnTMCP3ISPfe6p/tZiprWjSdtyRJI=)
2: 815468AF79588A14560E794FB64918D01C6C1FDC.crl (hash: MelfocsebAzRtomVq/FPYh1eg1QV1w+3kIUPBo0OEZ8=)
3: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: 4TyXOZJITcEyepgGV7UqSgIx7GZrhhX2jvzd83SSTg8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.crl
rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 00:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:83:4f:da:85:79:de:84:b6:43:51:17:f5:b3:c0:ad:01:24:ac:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815468AF79588A14560E794FB64918D01C6C1FDC
Validity
Not Before: Jun 19 21:16:41 2026 GMT
Not After : Jun 21 00:14:41 2026 GMT
Subject: CN=36AABFC892CCF5AF27457748A3C7646BDAE8B2F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:61:f4:32:98:83:c0:f3:37:2a:0a:15:6c:
7d:fd:90:9c:63:04:ff:4e:ad:00:b4:33:9b:eb:fb:
b1:c4:b9:fb:52:fa:ed:5f:d3:a5:52:11:2c:c8:bf:
d3:a6:76:57:50:95:69:bc:d0:80:95:0e:f6:bc:79:
ff:25:44:b6:b3:75:cd:a2:6c:20:a5:72:43:b4:2d:
3b:04:50:c9:43:14:3d:cc:84:8c:73:91:68:9d:3f:
60:84:a4:2b:ff:b5:48:32:5a:ba:ba:eb:32:1e:b3:
2d:16:c6:58:76:bb:9c:47:d4:83:0c:d4:d1:62:6b:
a3:fd:6a:05:de:c7:7d:63:bc:b8:e6:09:be:0f:b2:
e0:f1:03:78:09:8f:30:f5:8c:16:77:b7:91:57:86:
6f:2f:e5:8b:1f:78:ec:8b:b2:2c:5a:1c:27:27:44:
83:de:d9:73:79:e0:45:66:41:ac:0a:5c:d9:a2:17:
de:25:59:c5:19:66:2c:94:9e:cf:48:ba:30:12:16:
d5:70:d7:00:0a:05:2b:ef:7f:61:16:4a:cb:d7:43:
7e:68:eb:ee:68:5d:19:56:ad:58:31:2c:d2:c5:f9:
9e:00:ae:00:4e:14:6c:84:d6:5d:76:2a:98:17:9a:
be:2e:87:f8:d9:c3:69:40:64:ef:81:7b:ef:9f:f5:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AA:BF:C8:92:CC:F5:AF:27:45:77:48:A3:C7:64:6B:DA:E8:B2:F3
X509v3 Authority Key Identifier:
keyid:81:54:68:AF:79:58:8A:14:56:0E:79:4F:B6:49:18:D0:1C:6C:1F:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2d:fe:e3:ca:54:d9:3c:31:03:56:f5:7c:bb:62:91:bf:21:
3b:d8:ec:f0:6b:fc:92:df:5d:0d:42:40:fe:42:89:45:c3:90:
79:74:94:cb:0f:3f:16:9a:ee:02:e0:f0:74:92:d1:23:55:12:
ef:dd:82:49:98:40:26:4e:53:17:81:72:a5:21:40:3d:03:f3:
11:47:6c:aa:6c:d2:5d:0f:72:74:70:0b:9f:ed:db:a9:ba:81:
f4:54:b4:9e:9e:66:a1:3f:d8:27:3e:5c:95:69:60:8b:17:f2:
dc:7a:07:0a:d9:52:5e:70:1d:6b:31:96:b5:cc:ba:ea:8f:53:
f0:3f:41:fe:62:24:c3:e3:e7:71:ab:11:70:e4:08:44:5a:58:
8f:48:3f:fe:66:98:dc:ab:a0:86:5c:fa:fb:37:97:3d:56:63:
86:8e:15:61:69:3f:76:cb:d7:0e:e4:c0:8f:12:3c:ad:5e:2c:
43:c2:23:a9:63:d8:c1:c3:3c:64:57:5d:45:7d:d2:d7:c3:37:
0a:57:57:ac:c9:18:1e:f4:81:cd:c3:9d:70:55:2f:88:2e:fb:
82:bb:11:b0:46:0d:fe:0b:0c:d7:66:0f:b4:16:e6:3a:99:2a:
81:32:71:91:34:2d:34:cb:c4:b1:37:37:97:b5:04:7e:ed:3f:
f0:65:a9:1d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUI4NP2oV53oS2Q1EX9bPArQEkrCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE1NDY4QUY3OTU4OEExNDU2MEU3OTRGQjY0OTE4RDAx
QzZDMUZEQzAeFw0yNjA2MTkyMTE2NDFaFw0yNjA2MjEwMDE0NDFaMDMxMTAvBgNV
BAMTKDM2QUFCRkM4OTJDQ0Y1QUYyNzQ1Nzc0OEEzQzc2NDZCREFFOEIyRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUWH0MpiDwPM3KgoVbH39kJxj
BP9OrQC0M5vr+7HEuftS+u1f06VSESzIv9OmdldQlWm80ICVDva8ef8lRLazdc2i
bCClckO0LTsEUMlDFD3MhIxzkWidP2CEpCv/tUgyWrq66zIesy0Wxlh2u5xH1IMM
1NFia6P9agXex31jvLjmCb4PsuDxA3gJjzD1jBZ3t5FXhm8v5YsfeOyLsixaHCcn
RIPe2XN54EVmQawKXNmiF94lWcUZZiyUns9IujASFtVw1wAKBSvvf2EWSsvXQ35o
6+5oXRlWrVgxLNLF+Z4ArgBOFGyE1l12KpgXmr4uh/jZw2lAZO+Be++f9YflAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNqq/yJLM9a8nRXdIo8dka9rosvMwHwYDVR0j
BBgwFoAUgVRor3lYihRWDnlPtkkY0BxsH9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTAwNGU1MzAtMmZjZi00Y2Q2LWIwNWMtZWIzYzBjMTM1NjA4LzAvODE1NDY4QUY3
OTU4OEExNDU2MEU3OTRGQjY0OTE4RDAxQzZDMUZEQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84MTU0NjhBRjc5NTg4QTE0NTYwRTc5NEZCNjQ5MThEMDFDNkMx
RkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw
NWMtZWIzYzBjMTM1NjA4LzAvODE1NDY4QUY3OTU4OEExNDU2MEU3OTRGQjY0OTE4
RDAxQzZDMUZEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJgt/uPKVNk8MQNW9Xy7YpG/ITvY7PBr/JLf
XQ1CQP5CiUXDkHl0lMsPPxaa7gLg8HSS0SNVEu/dgkmYQCZOUxeBcqUhQD0D8xFH
bKps0l0PcnRwC5/t26m6gfRUtJ6eZqE/2Cc+XJVpYIsX8tx6BwrZUl5wHWsxlrXM
uuqPU/A/Qf5iJMPj53GrEXDkCERaWI9IP/5mmNyroIZc+vs3lz1WY4aOFWFpP3bL
1w7kwI8SPK1eLEPCI6lj2MHDPGRXXUV90tfDNwpXV6zJGB70gc3DnXBVL4gu+4K7
EbBGDf4LDNdmD7QW5jqZKoEycZE0LTTLxLE3N5e1BH7tP/BlqR0=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:16:53 2026 by rpki-client