
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft
File: 15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft (raw, json)
Hash identifier: XKY4MAAkTJFE4UJpSm2FaHibRSlcaGlHe+8eBU8egX8=
Subject key identifier: 73:F0:7E:17:D1:BB:50:92:9E:CA:D2:22:72:CE:80:FD:34:4A:18:A9
Authority key identifier: 15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76
Certificate issuer: /CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376
Certificate serial: 078B7CE16749A5F3FAD29FC79F182F669BF6E6F7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft
Manifest number: 36
Signing time: Thu 11 Jun 2026 00:22:07 +0000
Manifest this update: Thu 11 Jun 2026 00:17:07 +0000
Manifest next update: Fri 12 Jun 2026 02:49:07 +0000
Files and hashes: 1: 15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl (hash: HK6SqIEXdoqp6eT+obk3wPnAQ58LgTdwhgLSeCZlB48=)
2: 3130332e3136372e37302e302f32342d3234203d3e20313431393735.roa (hash: meK6TlvZu6bzMUFEpp7QJ/gB0z11zPwPaWYU3HpMyxc=)
3: 3130332e3136372e37302e302f32332d3234203d3e20313431393735.roa (hash: 0xvMDktAur4W5Rzlh9Gpre8Ge/68PJc4pAZtKvhthZo=)
4: 3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa (hash: mceGSTa1KkilNVeVE/R8JALesPG1r2/fVL6j+DUnje0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl
rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 02:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:8b:7c:e1:67:49:a5:f3:fa:d2:9f:c7:9f:18:2f:66:9b:f6:e6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376
Validity
Not Before: Jun 11 00:17:07 2026 GMT
Not After : Jun 12 02:49:07 2026 GMT
Subject: CN=73F07E17D1BB50929ECAD22272CE80FD344A18A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:f7:bd:36:9d:60:9e:d1:c3:26:df:d0:aa:
dd:0b:f9:e7:ce:0a:f2:a2:d7:a0:83:69:9d:46:bd:
a2:48:99:63:76:dd:2d:39:76:da:73:69:64:0e:f9:
2a:16:e9:3a:5a:46:dc:09:8a:6c:dd:8c:f3:50:3a:
a4:06:a6:4c:3c:77:d9:7f:42:98:f9:36:52:87:97:
01:70:29:b5:e5:12:d9:f0:a5:11:f8:f4:9e:40:83:
cf:bf:7c:21:b7:8c:17:28:7f:22:3e:e8:8c:97:af:
e2:bc:5f:95:9f:cb:86:3a:5e:a0:8a:5b:6c:97:4a:
4d:bf:94:22:51:18:83:81:56:6f:7c:43:d2:5b:71:
15:52:48:65:80:ed:db:ab:e2:05:87:5c:68:23:08:
c4:77:f2:0d:a2:2b:db:dd:d9:ee:66:26:67:b1:b2:
64:be:ce:8b:3d:24:a6:15:0c:e8:94:ab:7d:f4:c9:
c4:26:48:3d:30:23:ee:bb:b8:ea:ce:e2:84:1d:a1:
78:9e:82:bc:f0:1a:1c:78:1d:00:20:97:cd:6f:e7:
c3:d2:e5:cc:5c:bc:38:90:70:30:6d:ec:4c:83:a4:
32:a0:de:24:98:31:47:63:b5:3b:3e:95:0b:8f:5b:
c4:11:60:78:1d:2a:c6:0b:41:2d:c2:22:c4:30:77:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F0:7E:17:D1:BB:50:92:9E:CA:D2:22:72:CE:80:FD:34:4A:18:A9
X509v3 Authority Key Identifier:
keyid:15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:fa:c3:1f:27:f5:df:f5:54:c3:74:b1:63:90:f0:4b:d1:59:
fe:5e:2f:33:3d:8d:27:13:50:26:66:26:b4:ef:81:11:b3:69:
c0:7f:24:da:6d:8f:c4:c5:4d:89:f1:27:a0:ea:7c:4e:62:2e:
9f:8e:e7:27:76:8d:72:89:b7:9c:a5:ea:0f:d7:b6:d9:8e:4f:
90:81:fa:0d:fb:1a:3e:38:06:58:42:d8:11:ce:20:7f:4b:2c:
ca:b4:8e:81:ec:43:5a:a3:93:2e:b1:33:17:3f:92:4d:80:6e:
37:ab:a3:e5:0f:b8:8d:1b:c9:36:e7:06:35:17:7b:47:c4:2e:
38:ea:dd:77:b2:ac:b2:9e:3f:0e:d1:12:0b:81:28:4e:64:59:
f5:6e:58:0e:bd:0a:02:b0:27:82:d4:96:f4:a1:78:3b:86:95:
02:e5:7a:e0:ad:9e:0e:42:1f:79:a8:4c:ff:44:b2:60:df:31:
f4:55:cb:f6:b0:32:39:81:7c:84:90:72:ba:fc:71:48:47:d4:
72:ca:f7:be:e6:13:c4:52:c0:7b:4f:c9:7d:9c:69:c9:b6:f2:
12:b9:ad:0f:a3:50:35:f5:c0:7f:9e:95:d8:b1:55:8a:e1:db:
5a:57:51:e2:a4:7a:e8:91:11:c3:5c:26:0c:27:35:2f:c9:4c:
f9:14:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:34:21 2026 by rpki-client