
$ rpki-client -vvf rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft
File: D8435659F33EE1F7005A21C1387F49D353431808.mft (raw, json)
Hash identifier: ho1ENpiDoc17X4YBKf0oVOp2OqCAm/YzAs5cug0uIYE=
Subject key identifier: 55:EE:EC:F2:CC:AE:7B:28:3C:BF:0D:9E:80:17:A0:14:08:B6:A1:BE
Authority key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08
Certificate issuer: /CN=D8435659F33EE1F7005A21C1387F49D353431808
Certificate serial: 6319AE23C08F986E53EA79D5534EA519EADA42F2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft
Manifest number: 37
Signing time: Thu 11 Jun 2026 23:35:11 +0000
Manifest this update: Thu 11 Jun 2026 23:30:11 +0000
Manifest next update: Sat 13 Jun 2026 00:05:11 +0000
Files and hashes: 1: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: nwbiSYQUIY7u5484W08oCWpHX2RPW6F76Z3A6cL7rsY=)
2: 3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (hash: ATVTOuHtUSrfebW1xU18JBrcd7qLtJdgSsLLVk33uGM=)
3: 3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa (hash: z4cKVwkKHopCzCusKw3/HTDbOMxbEcb0WxL0/PEi5qo=)
4: 3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa (hash: blqaAQUh+/Ci23PSpz6kWjhOXoOQ7V7lhdmAJgQyDKE=)
5: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: DR008bVSYXJm82RMo+BhRQvkIWKNDedVtmRpjzWrQic=)
6: D8435659F33EE1F7005A21C1387F49D353431808.crl (hash: 6fjbgmXy0ONDtYkj33lzVYgnqjvABv9S4Ue3LQ+bYaI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl
rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 00:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:19:ae:23:c0:8f:98:6e:53:ea:79:d5:53:4e:a5:19:ea:da:42:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8435659F33EE1F7005A21C1387F49D353431808
Validity
Not Before: Jun 11 23:30:11 2026 GMT
Not After : Jun 13 00:05:11 2026 GMT
Subject: CN=55EEECF2CCAE7B283CBF0D9E8017A01408B6A1BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:f5:f8:5c:3e:16:1f:fd:6c:68:fc:c3:1d:
d3:b5:ce:a2:42:20:cb:45:77:1a:ff:7c:75:9c:5f:
8e:2e:67:5b:a8:13:af:aa:3d:a1:50:fb:55:65:92:
d4:1d:3d:a9:0a:41:9c:ff:e8:81:99:01:9c:cb:f7:
3e:97:d2:de:22:14:e5:80:76:fb:38:3f:23:e5:7c:
6f:d8:d5:0a:36:2c:7e:6c:31:17:fc:f4:7a:b2:be:
d3:67:40:a8:7a:3c:fd:eb:0c:77:61:ec:e9:10:89:
6c:98:2c:66:08:d3:e6:1a:f3:4b:7b:6d:44:07:ca:
02:ad:2f:71:25:87:ea:a5:a6:e8:38:40:26:77:e7:
9b:51:33:75:7a:70:0b:da:7a:db:cf:cb:a1:38:3a:
ac:eb:c8:6c:36:03:10:6c:5e:b4:dc:b1:88:bd:fd:
34:79:4f:90:dd:52:f2:84:1d:2d:ab:cb:4c:21:b8:
f7:a9:e9:1d:4f:40:8d:c7:d9:ea:a9:5f:57:f1:97:
d4:63:e2:91:db:0d:fd:a1:81:96:cf:c3:bd:c9:7b:
2c:12:7a:91:fb:24:7b:87:fd:c3:02:c7:d4:22:ad:
38:bc:b0:99:da:c4:6b:8a:87:73:e9:0c:14:d2:82:
64:1c:76:4f:03:2f:87:9e:dc:4e:81:c5:33:11:27:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EE:EC:F2:CC:AE:7B:28:3C:BF:0D:9E:80:17:A0:14:08:B6:A1:BE
X509v3 Authority Key Identifier:
keyid:D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:21:6f:86:34:1e:3e:4a:45:41:57:48:51:a1:ce:db:c6:8c:
7c:60:03:e5:41:36:fe:9f:59:40:fc:6c:fa:a8:ad:56:12:ee:
ea:21:7c:71:82:44:31:e2:33:b3:37:70:57:cd:99:cc:8b:a0:
3c:67:dd:0b:b3:1c:ae:01:aa:75:99:9c:37:55:7d:58:95:8d:
45:c5:5f:c7:90:83:2e:da:ee:d3:7a:ae:cb:62:0c:53:16:81:
26:8b:d7:9d:e7:fc:b4:88:64:49:99:64:4c:28:62:ac:a1:6d:
ab:29:36:da:aa:60:8c:17:59:b4:44:5b:8b:66:2e:ed:4b:26:
a8:b4:e8:e1:db:85:61:b4:a2:4f:86:69:2c:df:f7:9d:3b:0d:
c7:74:b0:46:64:0c:cf:4e:ac:b6:aa:ea:64:98:00:cd:c7:97:
37:bd:17:97:db:86:32:98:42:55:d1:29:85:c5:df:56:91:07:
40:13:b2:a8:de:61:e4:85:4d:0f:4c:1d:34:6f:8e:f1:da:f3:
f0:26:76:be:a5:f1:39:39:6e:15:63:84:54:41:5d:4a:87:35:
b8:34:0c:56:c5:91:61:79:eb:71:91:a5:aa:e3:1c:13:ef:ab:
7a:e2:32:20:52:c2:5e:9f:dc:c0:11:2c:22:7f:6f:30:1f:5d:
ff:53:49:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:03:38 2026 by rpki-client