
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
File: 3559C104797053AE8E5C72BE7726BF44C2878CF1.mft (raw, json)
Hash identifier: JQ0L/Hx7sKsSKtM+Sk8oD2NHWRWVL2nX+tCUXgn472Y=
Subject key identifier: 45:9A:A0:25:B9:F2:CB:DC:1A:C0:BF:97:07:B4:93:63:72:29:3E:E5
Authority key identifier: 35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1
Certificate issuer: /CN=3559C104797053AE8E5C72BE7726BF44C2878CF1
Certificate serial: 3D03E9FB996BEF41B953062E60ABF8CC5D5C545D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 04:49:24 +0000
Manifest this update: Thu 17 Sep 2026 04:44:24 +0000
Manifest next update: Fri 18 Sep 2026 06:56:24 +0000
Files and hashes: 1: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: TDHHkU7auhZbGybqQy/XY5A0u3/rxbPGk544rbieSIw=)
2: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: eqd0E+Lb4EVtDoQqymHQTLKTQ6HfKOpFx++L2qv+u+A=)
3: 3559C104797053AE8E5C72BE7726BF44C2878CF1.crl (hash: 9Z8btTevLMuWJxJOmzfUgc1feWqzKLEMgxQSESscCBg=)
4: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: fC4L8rYhZI0UDA/WORkA1APzTZ9nOmT1ddK9x1B6L7w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl
rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 06:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:03:e9:fb:99:6b:ef:41:b9:53:06:2e:60:ab:f8:cc:5d:5c:54:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3559C104797053AE8E5C72BE7726BF44C2878CF1
Validity
Not Before: Sep 17 04:44:24 2026 GMT
Not After : Sep 18 06:56:24 2026 GMT
Subject: CN=459AA025B9F2CBDC1AC0BF9707B4936372293EE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8a:ac:2c:fc:df:55:79:54:6c:b3:f6:d4:16:
04:d0:51:93:3d:19:05:e8:7f:8a:bf:44:1f:1c:dc:
df:2f:9f:4f:f2:1c:57:86:ee:78:92:98:87:59:49:
c1:24:c4:14:18:8d:53:6b:95:ba:2a:4f:d7:9b:3c:
41:91:a1:5f:39:9c:3a:97:49:07:10:dc:95:e4:a8:
ee:55:4a:30:f6:ab:d2:16:44:6f:03:95:49:d5:28:
72:fc:a7:47:c4:8c:bf:ff:b2:a7:bb:49:f4:78:47:
b6:5e:e0:0a:03:39:6f:78:eb:01:6e:bf:54:93:83:
5f:c7:8f:c6:6f:80:42:82:a7:57:89:4e:a2:74:bb:
a7:14:6c:4e:a7:1c:d1:f6:b9:eb:67:ed:55:ae:90:
d2:9c:1f:3f:bd:20:da:10:41:ed:d5:7d:8e:69:a8:
5d:76:ce:8e:e7:ac:c6:f0:54:78:82:b3:50:f1:ce:
3f:c2:11:ae:12:bb:a8:b8:ef:5a:0d:7b:c1:99:08:
e8:44:6b:7a:7d:2c:44:e3:29:63:fe:25:3d:54:69:
5d:1c:b1:0a:cb:5d:21:e7:00:26:3c:4d:49:61:39:
a6:5f:6b:f3:fb:fc:b1:fb:53:3b:66:45:54:39:44:
c0:2b:8a:49:11:9a:89:47:78:c6:3c:64:ca:7f:75:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9A:A0:25:B9:F2:CB:DC:1A:C0:BF:97:07:B4:93:63:72:29:3E:E5
X509v3 Authority Key Identifier:
keyid:35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ad:36:93:9c:3f:85:c9:8e:50:02:0f:df:20:bf:3a:b2:53:
58:71:17:07:5d:47:d8:d9:ad:df:61:79:92:16:3d:fe:b4:32:
b9:cc:43:c7:8f:e5:37:f9:1e:cc:96:3a:cd:d3:f1:b8:ab:0c:
3d:17:6f:7f:4d:8c:eb:ea:9a:71:13:35:0e:9a:0b:74:c9:7f:
35:fa:4f:82:f7:17:ee:19:b4:3e:62:2a:f5:67:33:03:4e:1b:
a2:65:a7:ae:5a:a2:b3:55:a2:4b:42:e6:5a:ae:51:1b:46:74:
6c:a9:7d:0e:c7:6f:57:f3:d5:2d:a0:36:d7:08:d8:19:3c:98:
eb:e8:03:5d:5e:c2:8f:98:8e:e1:3c:28:d5:da:77:1c:8d:d5:
8e:94:c8:82:c3:1c:24:e2:de:bb:31:a7:27:61:25:be:ef:c5:
32:ca:fa:93:dc:4a:96:b4:4d:0a:10:87:3e:aa:61:d7:67:f2:
90:fd:65:ce:fa:b8:47:b1:cc:16:a3:30:12:16:cb:30:c0:24:
3e:da:3e:89:05:8b:cf:0c:c9:7e:5a:1f:28:60:ea:80:88:5b:
07:7f:22:05:23:51:35:74:27:93:0e:b7:51:7f:3a:a0:17:33:
7a:04:82:a5:02:7b:76:37:55:5a:da:56:a7:22:5b:57:fd:ed:
10:5d:93:c9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPQPp+5lr70G5UwYuYKv4zF1cVF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU1OUMxMDQ3OTcwNTNBRThFNUM3MkJFNzcyNkJGNDRD
Mjg3OENGMTAeFw0yNjA5MTcwNDQ0MjRaFw0yNjA5MTgwNjU2MjRaMDMxMTAvBgNV
BAMTKDQ1OUFBMDI1QjlGMkNCREMxQUMwQkY5NzA3QjQ5MzYzNzIyOTNFRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiiqws/N9VeVRss/bUFgTQUZM9
GQXof4q/RB8c3N8vn0/yHFeG7niSmIdZScEkxBQYjVNrlboqT9ebPEGRoV85nDqX
SQcQ3JXkqO5VSjD2q9IWRG8DlUnVKHL8p0fEjL//sqe7SfR4R7Ze4AoDOW946wFu
v1STg1/Hj8ZvgEKCp1eJTqJ0u6cUbE6nHNH2uetn7VWukNKcHz+9INoQQe3VfY5p
qF12zo7nrMbwVHiCs1Dxzj/CEa4Su6i471oNe8GZCOhEa3p9LETjKWP+JT1UaV0c
sQrLXSHnACY8TUlhOaZfa/P7/LH7UztmRVQ5RMArikkRmolHeMY8ZMp/dcCZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURZqgJbnyy9wawL+XB7STY3IpPuUwHwYDVR0j
BBgwFoAUNVnBBHlwU66OXHK+dya/RMKHjPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTFmMTZjNDUtOTZmYi00YzkyLTgwNGUtNjRiMGJmMjgwMzAyLzAvMzU1OUMxMDQ3
OTcwNTNBRThFNUM3MkJFNzcyNkJGNDRDMjg3OENGMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNTU5QzEwNDc5NzA1M0FFOEU1QzcyQkU3NzI2QkY0NEMyODc4
Q0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFmMTZjNDUtOTZmYi00YzkyLTgw
NGUtNjRiMGJmMjgwMzAyLzAvMzU1OUMxMDQ3OTcwNTNBRThFNUM3MkJFNzcyNkJG
NDRDMjg3OENGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMWtNpOcP4XJjlACD98gvzqyU1hxFwddR9jZ
rd9heZIWPf60MrnMQ8eP5Tf5HsyWOs3T8birDD0Xb39NjOvqmnETNQ6aC3TJfzX6
T4L3F+4ZtD5iKvVnMwNOG6Jlp65aorNVoktC5lquURtGdGypfQ7Hb1fz1S2gNtcI
2Bk8mOvoA11ewo+YjuE8KNXadxyN1Y6UyILDHCTi3rsxpydhJb7vxTLK+pPcSpa0
TQoQhz6qYddn8pD9Zc76uEexzBajMBIWyzDAJD7aPokFi88MyX5aHyhg6oCIWwd/
IgUjUTV0J5MOt1F/OqAXM3oEgqUCe3Y3VVraVqciW1f97RBdk8k=
-----END CERTIFICATE-----
Generated at Thu Sep 17 15:53:29 2026 by rpki-client