
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
File: 94036675301DBECEA598F27C69DCB2391E3C2886.mft (raw, json)
Hash identifier: 0g/qIf6D7TON2//iLFxm3gfHBsSTktqeUmADtvKs+W0=
Subject key identifier: 77:00:AE:1E:6F:78:34:E0:3E:BA:15:47:43:C6:E5:E5:84:AE:5E:6E
Authority key identifier: 94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
Certificate issuer: /CN=94036675301DBECEA598F27C69DCB2391E3C2886
Certificate serial: 7446B63A4D9E9E6DF846C8E2534A01288191BE30
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
Manifest number: 42
Signing time: Sat 20 Jun 2026 02:43:03 +0000
Manifest this update: Sat 20 Jun 2026 02:38:03 +0000
Manifest next update: Sun 21 Jun 2026 04:58:03 +0000
Files and hashes: 1: 94036675301DBECEA598F27C69DCB2391E3C2886.crl (hash: Hb2rlzQNDzAaTXJSNIqDJTNf80zDNcRIWCvIggLGmRk=)
2: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: Ll1O0jrLBRiezZCuRZRt8vBzf1LiXokuLQkKXN01bA8=)
3: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: 63RFUP20PHT95cd0UVwx1h2yICgt0oulTqYaR5p2Hfk=)
4: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: /165UFjNpwWW+EZFcjl+71+ujJPspyfJC04aoRjZsKo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 04:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:46:b6:3a:4d:9e:9e:6d:f8:46:c8:e2:53:4a:01:28:81:91:be:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94036675301DBECEA598F27C69DCB2391E3C2886
Validity
Not Before: Jun 20 02:38:03 2026 GMT
Not After : Jun 21 04:58:03 2026 GMT
Subject: CN=7700AE1E6F7834E03EBA154743C6E5E584AE5E6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:96:d7:ee:fd:8b:5c:c8:ad:33:c6:ac:7f:
b6:67:f9:68:44:0f:2f:f1:7a:e1:a0:99:13:5f:79:
6f:f5:e8:f5:fa:e3:1e:aa:49:6d:2d:2b:ad:8a:96:
ef:0b:1a:12:1d:46:0d:9f:67:c2:38:31:08:c4:9a:
ea:ac:78:8c:46:31:e5:98:b4:d1:3b:a5:0e:53:c6:
ad:ac:5a:70:d2:70:8e:fa:51:f1:8c:e2:44:d6:4f:
6f:54:49:74:18:fd:dd:a5:e9:bc:6e:39:b5:11:ac:
e1:d8:f3:1e:f3:5c:55:06:3a:a4:66:44:e0:9c:56:
38:60:05:be:cc:43:b7:7a:f1:f4:c2:df:1c:17:69:
44:35:6c:44:03:9c:a1:66:98:e6:47:3c:35:92:d9:
5c:aa:ad:c7:f5:c8:17:b9:8b:f4:39:0f:ce:eb:d0:
cb:77:dc:fb:70:62:65:73:1c:5d:00:b7:53:83:6f:
cc:ef:7c:60:4f:c8:39:35:81:6a:a9:46:ee:5a:4d:
50:d5:04:0c:21:53:e1:9d:aa:77:16:9e:20:40:8f:
33:2e:fc:71:5b:cb:78:24:30:bd:41:38:07:9a:9a:
b5:db:fe:b5:6c:9a:78:12:c7:d9:b4:4e:53:34:ec:
04:1c:1e:fd:96:5c:d6:28:ba:e7:8f:af:f5:c2:8a:
67:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:00:AE:1E:6F:78:34:E0:3E:BA:15:47:43:C6:E5:E5:84:AE:5E:6E
X509v3 Authority Key Identifier:
keyid:94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3a:7d:a2:7f:42:f6:a8:9d:f3:27:8a:8b:4a:fc:d6:69:10:
a2:b9:47:ce:4e:07:19:3c:e7:b2:4e:44:0d:94:66:9a:2c:35:
3e:76:67:bc:0e:50:f9:44:27:08:04:07:e8:8a:a2:af:95:f1:
57:ee:37:b2:7e:9e:ed:03:77:a0:d0:d5:33:d4:b3:f1:8d:0f:
0d:0d:9a:f9:74:d1:a7:1b:48:44:d8:50:a0:19:f1:34:ea:1c:
62:75:b9:de:70:16:3b:91:a0:b0:e0:c8:dd:03:f1:5b:4b:25:
24:9d:6c:4a:e6:34:e6:16:a0:27:08:01:7c:4b:1c:42:01:9a:
82:c2:d3:c5:68:1f:a7:6c:1a:f8:22:0e:c8:e9:f0:ee:b8:c2:
a1:c1:5d:c6:3c:3e:0f:31:96:2e:40:58:19:86:67:fa:4f:43:
91:36:3d:82:ba:93:f8:49:e7:d0:2a:b3:17:e2:07:76:c4:4f:
bd:92:56:02:38:66:8c:13:e2:84:d7:4c:7e:c7:c3:36:68:4a:
6f:2b:53:76:f4:c5:79:d4:2b:da:87:a5:af:f0:f8:82:d3:2f:
85:08:88:30:46:20:bb:3c:e2:cf:11:d9:c3:83:53:36:b0:0b:
47:50:51:ea:30:c9:d7:f2:a1:ab:0c:8e:6a:e9:b5:50:9a:2c:
ad:1a:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:17:43 2026 by rpki-client