
$ rpki-client -vvf rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
File: 4156BE0E036363A596E1CBC310489AB801DFF941.mft (raw, json)
Hash identifier: o8VJ0tdsQk4KEId0BI64lQdcCt/vLpdcvtc/73vLQaE=
Subject key identifier: 5C:27:3D:18:1A:78:2D:3B:5E:33:26:1A:3F:C2:46:74:CF:35:4F:B7
Authority key identifier: 41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41
Certificate issuer: /CN=4156BE0E036363A596E1CBC310489AB801DFF941
Certificate serial: 13175E4EF53E895F0D223B532EC7164F69E092D8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
Manifest number: 2F
Signing time: Fri 05 Jun 2026 20:10:39 +0000
Manifest this update: Fri 05 Jun 2026 20:05:39 +0000
Manifest next update: Sun 07 Jun 2026 00:00:39 +0000
Files and hashes: 1: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: rSHHS2SVXYFIsnKnswkfD0W9wcSIKHSwcE57Ly7QYSU=)
2: 4156BE0E036363A596E1CBC310489AB801DFF941.crl (hash: NOHE7cjA26SW22DR7FgQP29kztHAwFRkrgekYcyVqVY=)
3: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: BnEjvX1TV7mzZcLsswA7EKyiNtfAnyBE1cK3RYLFuSA=)
4: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: HmJs2PjyM55f07/63Txr+Z06mPwICEzHB4ScF1m3HOs=)
5: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: HaFV5pJV86ftGAnPRTRMjv8zuoil0malPe+dc/Qoh5c=)
6: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: 6peX0JDNzT6rMcQu54Lce5kAols1rJU3rJxRvgulacM=)
7: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fBaq5SB6brHrX1BQRg7cuUdo6I/tHMTxRcN1nuTWvWU=)
8: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: 80LRBswxlIwyMdrBKKN8zHcPB67XbaBw69GuBUvFeh0=)
9: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: 1Jti76r9T9UKwdcEcYvsPgmo/iaRRGG2B+UGXQ8BTSc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl
rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:17:5e:4e:f5:3e:89:5f:0d:22:3b:53:2e:c7:16:4f:69:e0:92:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4156BE0E036363A596E1CBC310489AB801DFF941
Validity
Not Before: Jun 5 20:05:39 2026 GMT
Not After : Jun 7 00:00:39 2026 GMT
Subject: CN=5C273D181A782D3B5E33261A3FC24674CF354FB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:fe:a2:39:e1:e6:34:1c:be:50:d5:d6:8d:
60:00:37:35:48:06:7a:84:a0:de:b7:cb:bc:a0:f7:
b9:86:8a:db:4a:fe:9f:95:0c:2c:0b:55:ea:70:4f:
71:2c:87:f5:75:5d:48:56:11:a4:dc:0b:53:a5:9d:
44:d0:94:b6:3d:6d:94:b2:97:b4:39:98:4b:8f:dc:
50:31:11:69:f9:e6:8b:8a:2a:59:5b:4d:cb:d5:e0:
c8:5c:01:49:1f:00:07:3b:2a:87:32:b8:7b:f8:79:
d3:8d:55:dc:42:14:82:e0:fc:95:33:98:e0:e0:e3:
e8:9c:9b:eb:e1:e3:e4:cc:a1:72:3c:a4:43:ce:8d:
a5:d4:e3:6c:b3:db:bb:0d:95:24:61:c4:0c:42:ed:
a0:e3:24:60:30:26:4c:70:30:30:04:b1:45:19:1d:
be:43:29:41:b1:99:45:86:66:ba:c0:88:5d:78:af:
e3:18:bd:a0:a0:76:36:c3:03:2b:bd:85:82:8f:9a:
94:0f:80:47:aa:13:e4:44:3e:ed:0c:6a:e3:b4:64:
14:21:44:12:1a:cd:b7:4d:53:00:8b:db:49:72:0b:
54:13:ca:f0:a6:35:4e:4f:f0:ec:ab:d4:64:6a:24:
67:76:d2:e9:68:17:22:cf:95:17:79:e8:f4:ab:e0:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:27:3D:18:1A:78:2D:3B:5E:33:26:1A:3F:C2:46:74:CF:35:4F:B7
X509v3 Authority Key Identifier:
keyid:41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3f:b3:0c:0a:66:fb:91:c8:20:89:ef:c7:99:87:41:77:62:
a5:8d:d9:73:56:d6:de:a0:5a:87:06:9e:25:25:10:5a:34:b6:
12:90:eb:c8:99:83:e8:b7:49:e0:e5:2c:65:fc:3e:92:99:c5:
ef:8e:c4:12:31:2f:2e:4f:e9:ca:26:87:82:fa:8d:7e:15:30:
62:0d:3b:9f:ed:d4:aa:4b:ef:b4:32:15:3a:e7:dc:06:a9:34:
ba:5c:15:d3:d4:e9:0e:18:e6:82:49:3e:28:f2:10:bd:41:72:
84:b6:fd:4f:2e:f3:64:25:71:d1:6f:d7:e5:ef:fa:51:90:cf:
a8:a7:9a:7e:14:5b:2d:3d:13:51:8e:dd:5f:0b:d9:3d:8b:c8:
9b:46:28:50:ee:0a:af:01:37:30:f6:a3:54:aa:04:16:07:33:
c0:b8:0c:21:d9:0e:3c:4d:e7:66:9d:08:31:a1:a1:f1:eb:46:
7f:68:ad:fc:22:3c:a5:e9:b0:3a:39:94:91:0c:84:75:e8:3e:
ab:19:e1:4d:bb:b6:57:29:cb:3b:a6:12:23:ca:0a:11:59:f6:
eb:81:17:83:de:a8:77:09:f8:76:eb:36:e6:ec:4e:07:6b:0b:
69:05:a7:76:9e:89:62:9e:6d:70:85:50:73:a4:9d:36:03:88:
d8:f5:6e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:45:59 2026 by rpki-client