
$ rpki-client -vvf rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft
File: D22CC628B819E164A006F58EA6CF791A3AD66A38.mft (raw, json)
Hash identifier: QVtzEczzLSRJRFe7Z+ZQKOvH8QczPz/Rv6/3qMuS/zw=
Subject key identifier: D6:52:9B:21:AF:D8:D0:A1:11:00:48:6E:C0:6D:16:93:74:F8:F6:67
Authority key identifier: D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38
Certificate issuer: /CN=D22CC628B819E164A006F58EA6CF791A3AD66A38
Certificate serial: 42E9DFC12D632F27003B3C46F0D61F5F4370DE48
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 14:18:06 +0000
Manifest this update: Fri 19 Jun 2026 14:13:06 +0000
Manifest next update: Sat 20 Jun 2026 17:24:06 +0000
Files and hashes: 1: D22CC628B819E164A006F58EA6CF791A3AD66A38.crl (hash: e4jYH0tF+zvl39MOGRys9IYUxGjJp8QWJlZh9TUcAaA=)
2: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: dnAkfTvHw17dHWCAlbvcfqCxpaF/acXpN4SJ7+7NKIU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl
rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 17:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e9:df:c1:2d:63:2f:27:00:3b:3c:46:f0:d6:1f:5f:43:70:de:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D22CC628B819E164A006F58EA6CF791A3AD66A38
Validity
Not Before: Jun 19 14:13:06 2026 GMT
Not After : Jun 20 17:24:06 2026 GMT
Subject: CN=D6529B21AFD8D0A11100486EC06D169374F8F667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:db:0f:47:03:c0:de:ba:6b:d7:3d:3a:e2:
b1:53:a6:bb:64:96:30:2c:97:22:cd:98:68:c0:ef:
78:d9:15:2a:bc:81:d8:1e:2e:73:1c:c6:f6:30:82:
01:cd:58:74:1f:8f:f9:5d:19:41:f2:af:c3:3a:2d:
3d:2c:3a:54:89:f5:2e:af:87:33:e5:7d:c6:e3:f9:
25:fa:1c:dc:f6:b4:a5:d0:9b:86:4c:28:dd:c1:45:
1d:2e:44:8b:09:6e:f4:f9:1f:d2:8a:2c:83:1d:14:
40:4d:96:64:73:4b:68:a1:5d:fe:4f:9a:ce:99:95:
52:ad:ea:9a:ea:f1:c0:11:f8:0d:d7:de:63:c5:6a:
02:f2:64:e2:f7:f5:66:39:37:4b:3a:07:f5:e6:3b:
1e:f8:b8:95:08:3b:1e:ef:cb:08:9b:9b:15:64:36:
f3:01:ef:c5:02:f1:87:7a:1b:e9:4f:a5:a3:1b:5d:
89:fc:46:32:4a:64:3d:23:d4:54:87:68:d0:ce:8f:
12:f8:71:aa:c2:e0:98:95:b1:93:c6:53:10:39:cd:
40:31:a2:e3:f6:24:c3:66:3b:27:6b:81:3c:45:a4:
75:bf:58:80:5d:1b:9a:89:c9:f7:e7:bb:f1:73:3e:
14:50:08:e9:cb:aa:c1:84:58:47:e1:53:b6:2d:a3:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:52:9B:21:AF:D8:D0:A1:11:00:48:6E:C0:6D:16:93:74:F8:F6:67
X509v3 Authority Key Identifier:
keyid:D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8a:09:be:12:d6:98:23:c9:3e:39:8b:f5:b6:90:1e:cb:fa:
0e:6c:1d:14:ad:33:bb:1a:b0:9f:07:19:08:4b:97:96:dc:4b:
52:58:8c:77:d5:bc:86:77:8b:e5:e3:c8:bb:22:7d:7c:4a:07:
b9:e2:43:43:18:24:ff:94:ae:6b:ce:52:ba:fb:c8:d8:03:27:
ba:d3:2a:ab:9a:4a:e6:0b:db:48:11:a9:06:96:9c:08:74:69:
90:a6:81:c6:2a:19:3d:91:88:86:dc:f8:78:83:a5:38:3e:10:
5a:94:72:ba:1b:25:6c:bd:f3:75:46:42:91:ad:29:92:db:14:
e4:f9:a1:10:b0:66:1d:5f:b0:61:a4:d7:02:26:f1:44:2f:da:
d2:f1:e6:a4:a2:6d:3c:99:29:e6:e7:2f:32:2a:1f:46:90:ca:
f3:03:0c:74:ce:f8:78:62:49:41:ba:e6:0e:a3:21:bf:f3:32:
c2:cf:8d:22:20:98:a1:67:d1:d7:ab:71:28:cb:6f:da:5b:a8:
0b:10:eb:31:1a:84:ae:81:dc:96:4d:77:d2:ee:21:0e:8a:a2:
9e:f7:b5:8f:16:0a:04:16:32:8a:c8:e6:71:87:72:ac:a7:7c:
05:d6:9d:e6:36:82:c5:27:56:88:ef:cb:3e:10:72:e7:ed:dd:
c2:a3:a3:ce
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQunfwS1jLycAOzxG8NYfX0Nw3kgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIyQ0M2MjhCODE5RTE2NEEwMDZGNThFQTZDRjc5MUEz
QUQ2NkEzODAeFw0yNjA2MTkxNDEzMDZaFw0yNjA2MjAxNzI0MDZaMDMxMTAvBgNV
BAMTKEQ2NTI5QjIxQUZEOEQwQTExMTAwNDg2RUMwNkQxNjkzNzRGOEY2NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwK9sPRwPA3rpr1z064rFTprtk
ljAslyLNmGjA73jZFSq8gdgeLnMcxvYwggHNWHQfj/ldGUHyr8M6LT0sOlSJ9S6v
hzPlfcbj+SX6HNz2tKXQm4ZMKN3BRR0uRIsJbvT5H9KKLIMdFEBNlmRzS2ihXf5P
ms6ZlVKt6prq8cAR+A3X3mPFagLyZOL39WY5N0s6B/XmOx74uJUIOx7vywibmxVk
NvMB78UC8Yd6G+lPpaMbXYn8RjJKZD0j1FSHaNDOjxL4carC4JiVsZPGUxA5zUAx
ouP2JMNmOydrgTxFpHW/WIBdG5qJyffnu/FzPhRQCOnLqsGEWEfhU7Ytoyu1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1lKbIa/Y0KERAEhuwG0Wk3T49mcwHwYDVR0j
BBgwFoAU0izGKLgZ4WSgBvWOps95GjrWajgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGIwMTYwODUtMmY5NC00MGZmLTgwY2UtY2UyM2QzOWU2NWExLzAvRDIyQ0M2MjhC
ODE5RTE2NEEwMDZGNThFQTZDRjc5MUEzQUQ2NkEzOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMjJDQzYyOEI4MTlFMTY0QTAwNkY1OEVBNkNGNzkxQTNBRDY2
QTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw
Y2UtY2UyM2QzOWU2NWExLzAvRDIyQ0M2MjhCODE5RTE2NEEwMDZGNThFQTZDRjc5
MUEzQUQ2NkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG6KCb4S1pgjyT45i/W2kB7L+g5sHRStM7sa
sJ8HGQhLl5bcS1JYjHfVvIZ3i+XjyLsifXxKB7niQ0MYJP+UrmvOUrr7yNgDJ7rT
KquaSuYL20gRqQaWnAh0aZCmgcYqGT2RiIbc+HiDpTg+EFqUcrobJWy983VGQpGt
KZLbFOT5oRCwZh1fsGGk1wIm8UQv2tLx5qSibTyZKebnLzIqH0aQyvMDDHTO+Hhi
SUG65g6jIb/zMsLPjSIgmKFn0dercSjLb9pbqAsQ6zEahK6B3JZNd9LuIQ6Kop73
tY8WCgQWMorI5nGHcqynfAXWneY2gsUnVojvyz4Qcuft3cKjo84=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:18:20 2026 by rpki-client