
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
File: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft (raw, json)
Hash identifier: UvFDp1ix/a/03vHfnEzuhwSnv2TToT5WFPeh8BHgWBw=
Subject key identifier: EA:D4:F2:19:8B:35:95:AD:82:CC:C9:FD:C5:87:5F:A0:7A:CE:67:08
Authority key identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
Certificate issuer: /CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Certificate serial: 1641B7A6E64D46E45A1B588D714F5518644DCCA8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 10:55:20 +0000
Manifest this update: Thu 18 Jun 2026 10:50:20 +0000
Manifest next update: Fri 19 Jun 2026 12:07:20 +0000
Files and hashes: 1: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: M2ft8YBsrZNHxT1qFC2d2ksNAchdYmEdnx+ruXyh3Bc=)
2: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl (hash: /XNFtZCL+1GaZ7ewd7FIbQD19mJUMOg94WdtcFzxhfQ=)
3: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: jUIsiSJsjPDf0Krk/AfybK3xD1mWMXMOgk6ke4wG6/A=)
4: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: tmjFjqEkGuahidtuLOdd3vjYKqdvzowGWZPOwb/+IMI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:41:b7:a6:e6:4d:46:e4:5a:1b:58:8d:71:4f:55:18:64:4d:cc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Validity
Not Before: Jun 18 10:50:20 2026 GMT
Not After : Jun 19 12:07:20 2026 GMT
Subject: CN=EAD4F2198B3595AD82CCC9FDC5875FA07ACE6708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:96:a8:27:f0:4b:58:9e:e8:33:72:d4:2e:
54:b8:fd:4a:f3:f4:95:a4:93:1d:45:82:4f:fd:27:
f4:18:fd:02:1a:6d:d8:22:09:3e:de:62:7b:02:d0:
33:a5:ea:a8:6c:53:78:21:45:ed:de:5e:a2:78:e7:
f2:13:bf:2a:30:94:c0:59:92:59:13:84:61:7c:d6:
28:24:14:f5:0f:e8:e5:96:00:c8:93:b0:af:ed:47:
de:c5:b8:b3:4f:40:f9:39:9c:50:8d:fd:73:cf:26:
9c:db:0c:d2:b0:34:cd:2b:17:e7:5d:a6:78:11:33:
84:f6:a3:f1:2d:3b:54:d0:cf:ed:41:af:15:f9:21:
3c:d0:88:54:14:11:b0:39:bc:b2:95:4e:12:58:3a:
18:ed:51:41:84:ef:ec:e4:86:85:51:a1:ec:a9:ab:
a9:e2:10:b8:0f:01:4d:dd:48:91:76:a2:01:34:1d:
11:56:b7:f9:42:d7:18:50:a0:fd:e1:c9:7e:68:4f:
d2:50:d7:50:5d:09:f6:f9:66:be:3d:5e:6d:86:3f:
79:5b:bd:3b:ad:cf:ec:84:e5:0e:a3:e0:d1:7d:2e:
15:eb:70:4f:73:74:e6:e0:5a:90:d2:5c:e0:5c:b1:
5c:ce:41:89:1e:7e:7a:1a:8b:73:f1:da:11:6f:58:
b3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D4:F2:19:8B:35:95:AD:82:CC:C9:FD:C5:87:5F:A0:7A:CE:67:08
X509v3 Authority Key Identifier:
keyid:08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d2:82:c8:34:6b:f4:f2:49:74:49:3f:0e:87:5a:96:2d:6f:
96:9b:40:9c:91:7b:b6:b9:b2:ff:1b:59:e5:cb:60:06:2f:c1:
c7:e8:a2:9c:09:2f:28:4c:0c:ef:0a:8c:27:49:7e:19:e7:e4:
21:bb:95:21:6a:30:06:0a:18:61:87:21:dc:07:a7:a5:54:59:
74:da:09:25:32:16:17:d3:5d:43:c3:5e:bc:5d:2f:d7:f7:c9:
f6:ff:95:71:f9:19:6f:97:84:5a:94:df:b2:15:df:20:d7:b8:
6b:26:df:b9:8e:62:58:38:0f:f5:cf:45:35:00:b5:73:a3:b5:
76:e7:11:11:63:52:72:8a:12:32:ed:8d:21:ad:2f:00:a3:b5:
d5:1b:64:c2:37:22:ba:05:76:ac:41:4c:10:99:82:c2:22:c5:
96:7e:26:b6:91:f2:02:5b:e5:92:89:82:96:6e:9e:68:0d:9d:
81:56:bf:05:8f:d0:8c:a0:a1:06:49:22:0b:91:24:36:0e:57:
95:0b:5e:e5:56:7f:21:5c:f7:c5:cf:b0:4a:26:19:72:75:d3:
12:c8:7e:f7:a9:e7:14:08:f3:9b:4c:ea:13:eb:f0:03:10:2b:
e0:1d:c6:47:f8:60:89:11:3c:fd:c6:d0:de:b2:fc:ce:9c:33:
85:78:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:08:57 2026 by rpki-client