
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft
File: D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft (raw, json)
Hash identifier: lYksSKseJZ2w7xjU96mmCbjOQ7ONJHEkNz6F1lkLGnc=
Subject key identifier: DF:3A:27:02:DC:4F:4C:A8:63:BE:C3:36:97:10:B9:F8:C5:17:8A:47
Authority key identifier: D4:F6:C5:CD:98:62:9D:37:23:7B:4E:C9:89:58:EB:AC:92:78:00:A2
Certificate issuer: /CN=D4F6C5CD98629D37237B4EC98958EBAC927800A2
Certificate serial: 0198EBFAED8D9502E2DE24C0F30F64630A3CD595
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 14:48:40 +0000
Manifest this update: Fri 19 Jun 2026 14:43:40 +0000
Manifest next update: Sat 20 Jun 2026 16:15:40 +0000
Files and hashes: 1: D4F6C5CD98629D37237B4EC98958EBAC927800A2.crl (hash: kMf+UbBm7I3kvQUqoW8xDDfjB/oqkyJNwq/D3DU8ni0=)
2: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: PgyWI4yshXqNjgdCXVpkLlAnO45nUwUpbrwhDkW6kTc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.crl
rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 16:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:fa:ed:8d:95:02:e2:de:24:c0:f3:0f:64:63:0a:3c:d5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F6C5CD98629D37237B4EC98958EBAC927800A2
Validity
Not Before: Jun 19 14:43:40 2026 GMT
Not After : Jun 20 16:15:40 2026 GMT
Subject: CN=DF3A2702DC4F4CA863BEC3369710B9F8C5178A47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:99:e2:4f:6f:00:10:1c:b6:dd:19:be:ad:
e5:8a:f6:6e:99:74:d4:b6:25:50:59:e2:9e:bb:f6:
63:b6:61:79:d1:48:20:2f:e2:99:87:0a:c2:7b:c6:
66:2d:c0:dc:30:4f:fe:35:f1:a8:a3:74:0d:52:d1:
c1:8b:10:6a:29:53:5f:15:ba:4e:f5:aa:8d:89:52:
70:a1:25:a2:85:b8:da:db:90:a4:03:23:04:b6:d2:
34:05:27:02:45:b1:2a:5f:00:b5:98:50:23:90:68:
a4:11:f3:49:aa:75:8a:e4:e6:6d:76:69:b0:69:ed:
7b:a5:13:1a:2f:c2:c2:51:a2:dd:75:62:d0:0a:8c:
a2:8b:85:79:cd:b2:9a:45:c2:35:d4:56:ba:e3:32:
dc:ae:57:36:31:e9:cb:ff:50:f3:d0:1f:fe:01:36:
78:5a:42:a3:7d:4c:7d:6e:c8:4d:52:4c:58:09:f5:
b0:2a:c7:7b:af:b0:f3:a6:26:20:c5:24:00:70:cb:
f5:93:61:88:bf:bc:1c:47:8c:1b:ee:54:fb:d4:c0:
bc:c0:f5:77:7c:35:91:35:99:c2:f6:d7:13:4f:f7:
24:02:84:e3:dc:a7:64:fd:77:7f:f5:c4:bf:c2:7f:
e7:9d:05:ec:66:5a:00:6c:13:4a:c5:20:82:1e:69:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3A:27:02:DC:4F:4C:A8:63:BE:C3:36:97:10:B9:F8:C5:17:8A:47
X509v3 Authority Key Identifier:
keyid:D4:F6:C5:CD:98:62:9D:37:23:7B:4E:C9:89:58:EB:AC:92:78:00:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:9b:7a:d1:df:38:1f:c5:ec:25:d8:95:3a:ff:91:cb:c8:f3:
22:29:13:0d:0d:bb:43:18:50:e6:c2:47:86:d9:a1:5f:67:ba:
6c:44:00:66:c7:d0:14:e3:a9:35:67:48:22:86:10:fd:98:b5:
c1:4d:fd:5b:a6:95:78:d7:2a:c3:ea:3d:bc:04:a9:37:6b:97:
b1:46:40:81:53:60:e8:a8:81:f0:5b:bd:43:dc:d0:29:88:b5:
20:02:ce:79:a4:2f:9e:13:23:80:22:6c:33:d2:ea:27:fb:50:
7b:47:93:4a:41:28:3c:8d:71:fd:84:f8:81:b2:e7:c4:f3:56:
97:a7:32:12:6c:e1:31:34:7f:63:cd:fd:76:ca:bb:eb:98:f9:
58:37:50:63:97:73:dd:f1:ab:48:80:ad:33:16:78:65:05:c0:
cb:54:f7:a7:2c:ea:30:64:d3:83:78:aa:b3:8a:87:70:77:5e:
e8:c5:12:ac:aa:e3:69:31:d5:d2:65:2b:a8:cb:e1:22:32:93:
ef:59:30:8e:fd:24:04:e5:5d:be:fe:b7:a5:27:c5:8e:6d:fe:
ae:86:00:0a:36:b1:5e:78:7b:52:eb:97:f9:91:96:3d:f6:04:
e7:f7:04:53:6d:c4:02:7e:ff:ea:4c:2b:8f:cc:5f:18:6e:54:
6f:39:a4:6d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAZjr+u2NlQLi3iTA8w9kYwo81ZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRGNkM1Q0Q5ODYyOUQzNzIzN0I0RUM5ODk1OEVCQUM5
Mjc4MDBBMjAeFw0yNjA2MTkxNDQzNDBaFw0yNjA2MjAxNjE1NDBaMDMxMTAvBgNV
BAMTKERGM0EyNzAyREM0RjRDQTg2M0JFQzMzNjk3MTBCOUY4QzUxNzhBNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDih5niT28AEBy23Rm+reWK9m6Z
dNS2JVBZ4p679mO2YXnRSCAv4pmHCsJ7xmYtwNwwT/418aijdA1S0cGLEGopU18V
uk71qo2JUnChJaKFuNrbkKQDIwS20jQFJwJFsSpfALWYUCOQaKQR80mqdYrk5m12
abBp7XulExovwsJRot11YtAKjKKLhXnNsppFwjXUVrrjMtyuVzYx6cv/UPPQH/4B
NnhaQqN9TH1uyE1STFgJ9bAqx3uvsPOmJiDFJABwy/WTYYi/vBxHjBvuVPvUwLzA
9Xd8NZE1mcL21xNP9yQChOPcp2T9d3/1xL/Cf+edBexmWgBsE0rFIIIeabLpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3zonAtxPTKhjvsM2lxC5+MUXikcwHwYDVR0j
BBgwFoAU1PbFzZhinTcje07JiVjrrJJ4AKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjliYmU1YzAtNzllZC00NmZhLTg5ODktODhkOGFjYzg3Y2Y4LzAvRDRGNkM1Q0Q5
ODYyOUQzNzIzN0I0RUM5ODk1OEVCQUM5Mjc4MDBBMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENEY2QzVDRDk4NjI5RDM3MjM3QjRFQzk4OTU4RUJBQzkyNzgw
MEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjliYmU1YzAtNzllZC00NmZhLTg5
ODktODhkOGFjYzg3Y2Y4LzAvRDRGNkM1Q0Q5ODYyOUQzNzIzN0I0RUM5ODk1OEVC
QUM5Mjc4MDBBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAL6betHfOB/F7CXYlTr/kcvI8yIpEw0Nu0MY
UObCR4bZoV9numxEAGbH0BTjqTVnSCKGEP2YtcFN/VumlXjXKsPqPbwEqTdrl7FG
QIFTYOiogfBbvUPc0CmItSACznmkL54TI4AibDPS6if7UHtHk0pBKDyNcf2E+IGy
58TzVpenMhJs4TE0f2PN/XbKu+uY+Vg3UGOXc93xq0iArTMWeGUFwMtU96cs6jBk
04N4qrOKh3B3XujFEqyq42kx1dJlK6jL4SIyk+9ZMI79JATlXb7+t6UnxY5t/q6G
AAo2sV54e1Lrl/mRlj32BOf3BFNtxAJ+/+pMK4/MXxhuVG85pG0=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:17:43 2026 by rpki-client