
$ rpki-client -vvf rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
File: AD19D226489003F092B69D57F2AEE4849BC2F21F.mft (raw, json)
Hash identifier: nIddurLHYUom/x61c4j5BXcKkhLfLDPCRuMKg3onX7c=
Subject key identifier: 81:3F:28:D7:0F:E7:7F:D2:2A:DB:C3:EA:A1:9B:16:83:72:BE:39:3F
Authority key identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F
Certificate issuer: /CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
Certificate serial: 523320774F09F18F05B863245F1EF7643014021C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 04:01:49 +0000
Manifest this update: Thu 18 Jun 2026 03:56:49 +0000
Manifest next update: Fri 19 Jun 2026 04:06:49 +0000
Files and hashes: 1: AD19D226489003F092B69D57F2AEE4849BC2F21F.crl (hash: 8Cbf89xwhs2otpdjpiFjba2Z+KOf5JXE4MhU8n1Iwqw=)
2: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: tfGxZeg6G3RP30OjCg19bX3KZubf0o0VM47f34HE4/Q=)
3: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: YkRgmQFG0awSR2V4EqFn99OnF2XHm125JZP/mEf4NVk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl
rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 04:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:33:20:77:4f:09:f1:8f:05:b8:63:24:5f:1e:f7:64:30:14:02:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
Validity
Not Before: Jun 18 03:56:49 2026 GMT
Not After : Jun 19 04:06:49 2026 GMT
Subject: CN=813F28D70FE77FD22ADBC3EAA19B168372BE393F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:32:e2:81:35:24:85:19:46:98:20:40:fb:
e2:9f:dc:5b:e6:71:39:ae:cb:1f:02:13:95:10:f8:
13:f6:b3:97:d5:9d:96:fc:b6:f6:8e:1a:27:46:dc:
d0:38:ee:b1:88:53:1b:e3:55:67:20:f6:1d:03:38:
01:75:d2:73:75:1e:d0:17:57:9d:8a:3e:e0:f1:09:
31:b3:15:d6:40:78:bd:35:d9:43:bb:9e:4b:ed:c6:
9a:8d:71:8c:25:7e:5a:a9:97:52:f6:53:a0:61:3c:
fc:bc:a7:01:f4:11:d1:ab:f3:9e:88:16:d2:21:6e:
e9:ec:2c:d6:bc:72:c8:81:a5:64:3a:e7:c7:a7:fd:
7e:ee:30:eb:64:78:99:22:68:65:77:7b:5a:2b:c4:
82:6c:df:4a:8b:f4:bd:a8:7a:60:e5:c7:9a:af:b6:
d1:36:d6:b8:1a:e4:3b:34:7a:4b:d5:38:32:22:ab:
27:57:62:ed:8d:2b:83:bd:be:20:a7:76:34:57:04:
82:c7:f7:12:cd:9f:4f:74:04:cb:65:73:d6:ce:92:
41:6c:84:86:3f:d3:6c:9d:80:2b:42:26:42:6d:5a:
ba:f7:c2:80:d1:0b:a9:2b:31:f8:9c:ae:63:c8:2c:
9c:45:c0:0e:77:10:1f:fe:59:8c:8d:ce:61:9e:ba:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3F:28:D7:0F:E7:7F:D2:2A:DB:C3:EA:A1:9B:16:83:72:BE:39:3F
X509v3 Authority Key Identifier:
keyid:AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:52:17:6e:92:17:f1:9e:8c:25:31:59:be:a0:7c:5a:52:05:
d0:f0:db:3f:9f:ee:d8:76:e2:07:57:cc:e5:62:d0:27:69:4f:
21:ff:80:1d:ec:d8:f8:a0:c5:1c:db:92:70:22:ee:dd:ab:95:
a8:d2:23:be:b1:33:2d:d5:80:62:cd:73:70:fd:33:a2:88:0b:
cb:df:81:16:18:19:a2:a0:8c:4b:4c:94:b1:08:69:5c:7d:74:
4d:9d:b5:79:5e:07:1e:2d:8a:37:85:21:11:88:94:7f:f2:61:
19:a8:5d:6e:fe:7a:58:d4:f8:8b:e1:70:54:1b:7d:eb:05:ce:
21:ac:d1:e1:7c:9d:fb:69:7f:d9:30:52:e1:07:53:6d:87:5f:
84:1b:55:1f:9d:0e:0e:6f:85:f1:8e:da:1e:ef:8b:03:fb:91:
f4:e6:12:a6:89:38:ac:59:f7:96:97:99:c9:40:c8:9c:5f:b7:
1d:22:46:12:d0:2f:97:e7:e2:75:21:a9:e1:eb:a0:77:6b:8c:
2d:4d:11:7e:2a:76:1a:cf:6a:4d:96:ee:f1:dd:ad:94:b7:32:
6b:f0:80:c2:d7:22:0d:ca:80:7f:6d:a9:fd:de:0a:99:66:76:
df:89:db:ed:7b:a8:4b:a0:5d:68:06:de:d8:d6:28:5f:32:13:
1f:95:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:09:21 2026 by rpki-client