
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
File: 11FFFA845980AD12347D7297657117A393722635.mft (raw, json)
Hash identifier: J9H94SJRzXDN4b+556/68UDmKlLIcPBxuj/6bWKLNYk=
Subject key identifier: E9:92:54:5F:F6:51:81:E7:C6:A4:D7:8D:93:2A:54:61:4D:96:FF:1F
Authority key identifier: 11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35
Certificate issuer: /CN=11FFFA845980AD12347D7297657117A393722635
Certificate serial: 7D33ACA5B8217ADC609900627360E1A0B185F30D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
Manifest number: 37
Signing time: Thu 11 Jun 2026 17:53:04 +0000
Manifest this update: Thu 11 Jun 2026 17:48:04 +0000
Manifest next update: Fri 12 Jun 2026 20:40:04 +0000
Files and hashes: 1: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: lcXF2ukAyeD79WJ/+d/LiALmLjnDTwGdGGkGmI9GuQ8=)
2: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: 1j1MwArF7+GiMoyA2GSO7NK/M/081FoP97bqeWhfFHU=)
3: 11FFFA845980AD12347D7297657117A393722635.crl (hash: aLBFQq6ar9024JDgII2CaDsPum1qh8RGPjEWQ/mAbD8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl
rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 20:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:33:ac:a5:b8:21:7a:dc:60:99:00:62:73:60:e1:a0:b1:85:f3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11FFFA845980AD12347D7297657117A393722635
Validity
Not Before: Jun 11 17:48:04 2026 GMT
Not After : Jun 12 20:40:04 2026 GMT
Subject: CN=E992545FF65181E7C6A4D78D932A54614D96FF1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:b3:e5:1e:e4:a2:d4:69:93:20:ad:78:f8:
82:10:08:cb:cd:19:ea:d9:a0:b7:b5:3f:e1:b2:43:
0b:97:24:61:70:1d:a2:1e:3b:b8:36:6a:e3:17:9d:
ff:e9:81:d1:e3:62:a8:d6:72:73:fb:c3:5f:c4:d0:
bc:d0:bd:81:86:0f:9c:bf:13:0a:65:3d:6f:b1:be:
50:81:f6:d7:da:ac:5d:03:be:76:94:74:03:b8:51:
1f:53:15:09:c9:84:3b:49:76:66:d9:bb:92:6e:e7:
44:35:1a:61:67:6b:f1:59:4e:65:33:14:36:25:28:
cb:d6:56:0e:25:7d:f0:d2:45:2c:3f:66:29:be:29:
14:31:84:aa:62:bc:ba:5f:49:6c:8a:67:4a:a7:b4:
b6:4c:64:89:47:9e:d4:e7:44:10:72:01:6a:6a:a3:
3d:0a:23:a5:5c:f7:5d:b4:83:41:f7:0a:3e:b3:53:
53:36:d5:e2:d4:9c:70:3a:1d:cd:e0:a2:d9:42:52:
51:26:ce:4d:f2:43:6e:36:b7:be:37:ae:61:f7:ab:
0a:cc:bc:7f:76:27:a1:ab:ab:63:a0:26:b4:a9:85:
72:1d:39:c9:eb:14:d1:5a:5c:73:0f:a5:05:96:d3:
88:44:f4:fc:43:b4:77:d2:bc:1c:de:93:a3:89:cb:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:54:5F:F6:51:81:E7:C6:A4:D7:8D:93:2A:54:61:4D:96:FF:1F
X509v3 Authority Key Identifier:
keyid:11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f8:e8:55:25:82:b0:c7:b4:39:97:3b:fa:dc:da:65:3f:d5:
1f:5f:97:27:e7:a5:31:1e:53:dc:34:d2:94:b8:9f:ea:6d:85:
65:e1:32:a6:9d:fd:4f:f4:f8:1e:13:00:99:12:3c:66:6d:8f:
49:f4:7f:16:ad:d6:39:f3:0f:f3:70:7a:0f:05:91:0d:98:e0:
bf:fe:b5:9a:41:9d:8e:d4:dd:b6:09:bb:e6:3f:dc:0a:fe:b5:
52:a0:aa:97:4b:fd:a6:27:54:7e:4c:3e:6e:3b:1c:34:8f:3c:
24:b0:44:61:d5:b1:9d:0f:7c:56:2d:44:00:77:54:49:a0:16:
89:18:6a:42:54:4b:01:88:d4:c9:21:92:b1:18:bd:4a:08:e5:
fd:a4:aa:0d:47:64:35:ae:6e:6b:9e:8e:19:f6:d5:a9:c0:e8:
b0:50:fb:81:75:7f:00:3c:f9:93:c7:50:32:c9:ab:13:0d:2c:
3f:02:10:96:5b:b7:9e:23:25:85:fa:82:b5:5c:0d:e1:55:a1:
08:fd:09:9d:da:f8:d3:6f:90:0c:ca:43:ee:74:6c:0d:91:f9:
b3:c0:68:9b:ce:66:dd:bd:2f:a8:a3:57:1c:17:4b:dc:b1:06:
95:69:8f:24:f6:76:d8:7f:12:f8:42:09:47:cd:47:d9:5b:67:
35:b9:00:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:04:06 2026 by rpki-client