
$ rpki-client -vvf rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft
File: 5256FBBE2FC545F984496DD4986EC64B662694E0.mft (raw, json)
Hash identifier: Mx7zcmYnnjIst/mz9P1A+BJZzUydbVoBqYlU+bK1sLk=
Subject key identifier: 3B:78:A9:D3:5E:B2:2D:2B:2F:E5:85:3D:2C:AB:CA:84:15:F6:21:A9
Authority key identifier: 52:56:FB:BE:2F:C5:45:F9:84:49:6D:D4:98:6E:C6:4B:66:26:94:E0
Certificate issuer: /CN=5256FBBE2FC545F984496DD4986EC64B662694E0
Certificate serial: 57D17618F5937DAD7843779B30E1D7BB03E03028
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5256FBBE2FC545F984496DD4986EC64B662694E0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 16:11:31 +0000
Manifest this update: Thu 18 Jun 2026 16:06:31 +0000
Manifest next update: Fri 19 Jun 2026 16:56:31 +0000
Files and hashes: 1: 3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa (hash: PVeUI9LzABp9X4uUesClPYyGG94/1D9llRU48PC0AGA=)
2: 5256FBBE2FC545F984496DD4986EC64B662694E0.crl (hash: H1qXRewJEClLuKixFwjRcZzwEsrgsQw8z8EMDpL/nD0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.crl
rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5256FBBE2FC545F984496DD4986EC64B662694E0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 12:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d1:76:18:f5:93:7d:ad:78:43:77:9b:30:e1:d7:bb:03:e0:30:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5256FBBE2FC545F984496DD4986EC64B662694E0
Validity
Not Before: Jun 18 16:06:31 2026 GMT
Not After : Jun 19 16:56:31 2026 GMT
Subject: CN=3B78A9D35EB22D2B2FE5853D2CABCA8415F621A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:40:7c:e4:e3:e1:8d:1f:0a:08:8a:b4:26:
a6:3e:b7:2c:93:8d:a0:9e:1f:8b:e9:9c:4a:a6:f7:
8f:31:d4:91:4e:6e:ad:44:62:d7:6b:09:69:49:c9:
30:6a:de:96:fb:1f:7d:c8:b7:80:6a:76:81:fa:68:
bc:d6:fc:f9:24:4c:a6:ed:19:6d:9d:71:21:94:d1:
e9:e6:d3:6a:8a:1d:8e:e8:eb:8c:86:cb:9d:63:4b:
f0:ee:d2:c2:0f:2f:3e:91:a9:ff:25:59:cf:f3:3e:
bc:eb:43:9f:79:42:03:a5:01:84:5c:f2:75:b2:78:
71:81:df:5e:d5:62:fe:52:26:fe:34:b9:54:02:95:
4a:73:06:a4:fc:3b:c7:a6:3d:d3:fe:a4:76:ab:9d:
95:55:62:3a:92:46:35:fe:db:66:e8:50:69:3a:51:
7f:48:f7:1d:b6:fd:df:12:dd:93:94:ab:93:10:bf:
2f:01:b5:94:14:9c:f2:ec:5e:c7:00:3f:0e:53:f4:
94:1e:c5:a7:21:de:3f:50:d2:d9:e9:10:e2:20:63:
1b:8b:fe:81:df:f0:cb:aa:c1:fd:58:27:da:52:d3:
d9:cf:b1:7c:b3:4a:ae:66:64:d0:ee:95:24:71:e1:
bc:18:cd:2f:7c:35:c3:9e:0d:f4:14:35:ad:10:6b:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:78:A9:D3:5E:B2:2D:2B:2F:E5:85:3D:2C:AB:CA:84:15:F6:21:A9
X509v3 Authority Key Identifier:
keyid:52:56:FB:BE:2F:C5:45:F9:84:49:6D:D4:98:6E:C6:4B:66:26:94:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5256FBBE2FC545F984496DD4986EC64B662694E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:92:40:c0:6c:8e:fe:98:1f:8a:a6:40:64:83:c2:8a:08:30:
46:5b:22:6e:65:d0:66:b5:34:dc:0a:5d:c4:ae:8c:e6:57:5c:
49:ee:e4:61:51:fd:4b:01:ab:40:a3:92:92:76:20:98:a8:77:
83:75:e3:3e:ab:5f:77:04:bb:7a:c4:9b:25:b9:64:a3:2e:f7:
e5:c6:dd:c4:83:db:5e:ea:0c:74:da:98:93:7a:98:fd:0d:3f:
94:75:36:cd:fa:2f:24:53:03:24:77:7a:c8:ff:32:b3:4b:d7:
42:c0:68:1f:71:3e:65:f3:b2:b5:58:77:45:e9:10:57:d0:72:
15:c9:e9:5f:b8:a8:9f:b7:8c:13:09:01:35:ca:b4:9e:11:1c:
ca:03:a4:ad:46:1d:51:a4:9d:5d:c7:a9:01:61:46:f6:ce:ef:
20:08:88:f4:5d:fb:37:a1:45:88:e1:bd:a1:e1:9b:fc:7e:5e:
d0:3b:35:e0:df:57:52:ed:c7:91:e4:60:20:c5:8d:e2:6a:b5:
64:9a:ec:b5:59:15:7d:e6:d4:17:d1:f3:db:06:00:dc:ec:3b:
1d:ab:8e:f0:3a:f5:d1:86:e4:c8:61:32:c6:d9:d6:14:95:4b:
bc:6f:93:7a:8a:99:76:4a:84:39:84:33:cd:cc:d4:e7:b2:17:
18:d5:40:05
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV9F2GPWTfa14Q3ebMOHXuwPgMCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI1NkZCQkUyRkM1NDVGOTg0NDk2REQ0OTg2RUM2NEI2
NjI2OTRFMDAeFw0yNjA2MTgxNjA2MzFaFw0yNjA2MTkxNjU2MzFaMDMxMTAvBgNV
BAMTKDNCNzhBOUQzNUVCMjJEMkIyRkU1ODUzRDJDQUJDQTg0MTVGNjIxQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUk0B85OPhjR8KCIq0JqY+tyyT
jaCeH4vpnEqm948x1JFObq1EYtdrCWlJyTBq3pb7H33It4BqdoH6aLzW/PkkTKbt
GW2dcSGU0enm02qKHY7o64yGy51jS/Du0sIPLz6Rqf8lWc/zPrzrQ595QgOlAYRc
8nWyeHGB317VYv5SJv40uVQClUpzBqT8O8emPdP+pHarnZVVYjqSRjX+22boUGk6
UX9I9x22/d8S3ZOUq5MQvy8BtZQUnPLsXscAPw5T9JQexach3j9Q0tnpEOIgYxuL
/oHf8Muqwf1YJ9pS09nPsXyzSq5mZNDulSRx4bwYzS98NcOeDfQUNa0QazSNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUO3ip016yLSsv5YU9LKvKhBX2IakwHwYDVR0j
BBgwFoAUUlb7vi/FRfmESW3UmG7GS2YmlOAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTMyYzUxMjEtZjc0OS00YTU0LWE5ZWMtZjZjMzQ5ZjM0MzEwLzAvNTI1NkZCQkUy
RkM1NDVGOTg0NDk2REQ0OTg2RUM2NEI2NjI2OTRFMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MjU2RkJCRTJGQzU0NUY5ODQ0OTZERDQ5ODZFQzY0QjY2MjY5
NEUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMyYzUxMjEtZjc0OS00YTU0LWE5
ZWMtZjZjMzQ5ZjM0MzEwLzAvNTI1NkZCQkUyRkM1NDVGOTg0NDk2REQ0OTg2RUM2
NEI2NjI2OTRFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB+SQMBsjv6YH4qmQGSDwooIMEZbIm5l0Ga1
NNwKXcSujOZXXEnu5GFR/UsBq0CjkpJ2IJiod4N14z6rX3cEu3rEmyW5ZKMu9+XG
3cSD217qDHTamJN6mP0NP5R1Ns36LyRTAyR3esj/MrNL10LAaB9xPmXzsrVYd0Xp
EFfQchXJ6V+4qJ+3jBMJATXKtJ4RHMoDpK1GHVGknV3HqQFhRvbO7yAIiPRd+zeh
RYjhvaHhm/x+XtA7NeDfV1Ltx5HkYCDFjeJqtWSa7LVZFX3m1BfR89sGANzsOx2r
jvA69dGG5MhhMsbZ1hSVS7xvk3qKmXZKhDmEM83M1OeyFxjVQAU=
-----END CERTIFICATE-----
Generated at Thu Jun 18 19:21:40 2026 by rpki-client