
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
File: 2677581645A49D82B36AA830484865F4B9D0FC43.mft (raw, json)
Hash identifier: Nq/+DUNb2evPP3mipdiWWPo0YS3yaBGBUC6uKyE8BEI=
Subject key identifier: 74:C5:9E:14:34:F2:EE:58:09:DB:87:72:68:8A:1F:F2:8F:C2:23:86
Authority key identifier: 26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43
Certificate issuer: /CN=2677581645A49D82B36AA830484865F4B9D0FC43
Certificate serial: 43F8A55DC59674B7877F59E6C0A250C2A99CAB89
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 05:13:03 +0000
Manifest this update: Mon 21 Sep 2026 05:08:03 +0000
Manifest next update: Tue 22 Sep 2026 08:15:03 +0000
Files and hashes: 1: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: 5qL4Akm0PbHI3eo3BSoRkovQkTSvAIBUTKI6uUAYPHA=)
2: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: ePHUQHjUtQqmubSQINVLXHx5bVCNeo3QJkNOBue6jYg=)
3: 2677581645A49D82B36AA830484865F4B9D0FC43.crl (hash: /FKKxF+Mz7ZTt5nUHVlc9PXEOVBRslbmgeqfi5cuIkY=)
4: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zMOWhJqH1J6fUN/OnJAxp19ayumIrg3uRIfyARwlsqI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl
rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f8:a5:5d:c5:96:74:b7:87:7f:59:e6:c0:a2:50:c2:a9:9c:ab:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2677581645A49D82B36AA830484865F4B9D0FC43
Validity
Not Before: Sep 21 05:08:03 2026 GMT
Not After : Sep 22 08:15:03 2026 GMT
Subject: CN=74C59E1434F2EE5809DB8772688A1FF28FC22386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:20:26:cd:ed:00:d0:98:d1:bc:fd:4e:01:
10:5e:e9:b7:3b:a2:38:e4:22:95:f2:2c:41:a5:29:
ac:9d:3e:e5:de:2d:d4:d2:33:15:61:c3:d7:1f:f9:
7d:21:9c:9f:85:24:d9:51:bf:63:0e:95:19:77:fb:
22:47:b5:50:84:4c:c8:90:4e:5d:c5:c7:35:e4:48:
1e:62:30:60:a6:ec:b8:c5:eb:80:9d:db:f2:2e:99:
eb:31:b4:d6:48:8e:6c:11:07:7e:64:e1:16:8a:dd:
87:84:e3:a8:04:cc:57:f7:a6:66:62:76:fd:e1:36:
85:64:f4:c3:be:11:ab:a3:f8:55:d7:b0:05:34:30:
a6:8b:91:20:f4:73:9e:07:68:cd:d8:57:f8:3d:e7:
38:15:11:88:66:d3:20:59:f0:8b:24:6b:59:ac:f5:
30:17:3e:c5:f4:18:56:8b:4f:7c:46:e9:19:36:62:
eb:02:d3:f6:eb:09:4e:4b:51:67:51:46:61:f9:3d:
ee:3f:83:5c:63:90:c3:09:42:7b:ed:e1:2d:4d:ee:
a5:93:a3:ee:48:91:22:af:22:0d:95:f3:20:28:c8:
05:d6:12:5e:ff:e3:08:c5:76:70:d2:93:8e:61:e3:
26:4d:54:44:9e:91:c4:f1:76:e4:72:32:82:f7:3a:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C5:9E:14:34:F2:EE:58:09:DB:87:72:68:8A:1F:F2:8F:C2:23:86
X509v3 Authority Key Identifier:
keyid:26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f2:73:6b:56:65:48:0e:c9:b8:e5:f9:e0:bc:82:f0:57:c6:
67:11:c4:1b:bd:ea:07:93:f8:9d:10:b1:de:66:2b:84:c7:e9:
9a:bf:e4:4e:0b:98:11:8c:1b:5b:30:85:e9:2b:e0:fc:91:78:
ff:be:43:a1:07:82:73:e8:98:19:d8:f5:48:3b:fe:61:d8:b0:
af:ec:d0:c1:9f:fa:d3:8c:db:bc:e4:3f:7e:2a:1e:62:43:c8:
9e:e8:b7:24:11:1a:02:3f:81:1c:13:0a:8f:89:50:2a:2f:be:
40:ab:f4:e1:06:97:83:c3:39:f0:61:87:96:bb:47:79:f2:6a:
f1:08:af:b7:1c:38:2b:d4:b0:b7:49:d6:9c:cb:00:84:47:ad:
bb:dd:bc:55:f0:c8:ce:ce:f1:72:42:4b:60:96:92:9b:53:29:
d2:0d:12:d9:0b:c1:fa:8a:f0:07:0e:96:97:eb:bb:01:31:7b:
5f:aa:52:d9:09:3c:d8:a7:77:36:8b:ca:d7:8e:bb:d9:07:fe:
12:d4:36:54:20:87:28:2b:f4:13:21:28:42:be:da:4b:b2:7c:
98:09:fe:f3:26:05:50:2e:de:4d:a7:84:13:fe:ca:d7:09:da:
d1:19:87:ba:81:54:75:11:f7:f4:bc:01:a5:d3:cb:d6:48:b7:
5c:2b:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:56:50 2026 by rpki-client