
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
File: 84122DA5B146979D5AAE13129EB677B96C49C7F6.mft (raw, json)
Hash identifier: MAf4jSOuedKz+t+o0nrL2PKpvHds3O5dSbn74GGlVlk=
Subject key identifier: 9C:85:F8:70:95:7B:FA:E5:3F:45:71:B4:7F:AD:6B:BD:33:BF:66:03
Authority key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6
Certificate issuer: /CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
Certificate serial: 657F19E07A6551D01BCAF2C4A28BF4C4F6826F12
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 20:15:24 +0000
Manifest this update: Fri 19 Jun 2026 20:10:24 +0000
Manifest next update: Sat 20 Jun 2026 21:33:24 +0000
Files and hashes: 1: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: LWJq/XJLjGCHAx0PdP5FSd33v0EqmvbG5/RZUAKgCgs=)
2: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: fHid8e/HPZhTBqkYcMs+Y715ZVlDl6RBBe2DwEnsBPc=)
3: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: LXKwnzjsakvh6k668BXuaYJ1O5iQ9reQNkhpZI7YDu8=)
4: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: u+tKwHgjMKGgdgEnZPp2mwsftX+fJPIHxzdML3oWuA4=)
5: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 2a7WLuRJ0dxekwgo8okkZl2guEN5PE3JgGMBxaSTXY4=)
6: 84122DA5B146979D5AAE13129EB677B96C49C7F6.crl (hash: SSkl/DKYHPsd0e5DJALBaNWYBOWMhxOagNAeoEjNSUM=)
7: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: jhYHGOtLAWmv9OcO3/5rDKvnFPZl5OTObgAsQoi8r50=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl
rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 21:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:7f:19:e0:7a:65:51:d0:1b:ca:f2:c4:a2:8b:f4:c4:f6:82:6f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
Validity
Not Before: Jun 19 20:10:24 2026 GMT
Not After : Jun 20 21:33:24 2026 GMT
Subject: CN=9C85F870957BFAE53F4571B47FAD6BBD33BF6603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9c:8f:51:9e:f1:8f:8f:08:a1:df:40:2a:98:
e5:d2:05:7b:2e:eb:c4:28:be:f2:49:91:4f:6b:d9:
17:44:ad:e4:b6:90:b9:ca:0b:61:6b:4e:17:45:d4:
85:ac:0b:ea:09:3e:ae:14:f6:c8:8f:e7:16:fe:50:
f5:fa:41:ff:10:a4:ab:b9:ad:71:e1:89:75:45:05:
d7:88:72:df:1b:6b:b0:7e:2c:0a:9c:af:24:ba:c4:
d0:b2:2e:64:68:e5:96:5b:db:bd:b4:65:4d:f7:fd:
06:55:13:58:b7:95:f8:26:4c:b9:4d:8e:d2:e7:00:
51:3d:2a:22:af:8a:a2:9c:9c:ec:22:8c:ca:a4:d5:
d5:73:eb:88:b6:be:39:4e:95:ab:7d:81:89:3b:5b:
93:cd:5e:00:93:23:41:4e:04:db:46:44:95:df:85:
d7:d5:f3:15:8a:ff:aa:bf:9f:b8:b1:5e:04:ba:b8:
5e:a2:ad:cb:81:b8:e8:04:a1:f3:75:c4:8c:29:8d:
36:e9:8e:a5:19:b2:84:c1:34:63:05:6e:53:7d:99:
de:53:9c:a6:d3:bb:d3:d6:4e:88:9e:5a:60:d2:6c:
fb:90:ca:85:4d:58:07:72:57:f0:73:c6:f2:f9:24:
da:04:cd:3a:09:56:de:2a:26:69:ed:cb:f7:1d:ef:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:85:F8:70:95:7B:FA:E5:3F:45:71:B4:7F:AD:6B:BD:33:BF:66:03
X509v3 Authority Key Identifier:
keyid:84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ee:22:50:3e:d9:49:b1:82:d7:00:bf:24:42:d4:fb:d5:e1:
40:ec:19:59:8b:5b:b3:61:c3:a6:a6:79:c7:ff:53:62:cb:f5:
12:71:e9:a1:84:0f:68:32:a3:1a:48:0f:78:bb:2f:9b:90:b8:
16:60:ff:71:cc:ed:15:49:16:c4:16:70:ea:ba:46:1d:52:f2:
23:c3:d5:06:c4:b6:83:bd:2e:23:b5:dc:81:fd:c7:7c:cf:09:
83:96:a9:64:c2:bd:ea:ff:f5:64:d4:c9:fe:83:09:c0:cf:be:
84:1f:9c:21:f3:b6:80:1c:c9:1b:bb:dc:10:fd:30:c2:8f:8e:
27:04:de:ba:c2:ae:c1:8e:65:73:ba:bb:ed:6c:78:6e:9a:b1:
89:a5:32:16:13:b8:8c:e9:38:46:c8:a5:69:0d:19:4f:ee:ad:
24:a0:de:5e:38:15:bd:07:aa:d5:ec:ff:43:d6:48:3e:72:ea:
fc:a2:7a:3e:fd:b1:54:19:91:bb:eb:2d:53:ab:1e:43:20:39:
66:23:88:51:7d:43:e0:98:57:ab:fc:c5:2e:8f:6d:ec:b4:80:
49:77:41:c7:33:ae:95:cf:23:0e:85:52:eb:29:22:f7:71:af:
ae:e0:04:0d:e1:f6:d7:93:76:ad:84:88:4e:c6:5b:9c:39:49:
e3:06:cf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 15:43:02 2026 by rpki-client