
$ rpki-client -vvf rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
File: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft (raw, json)
Hash identifier: hEiQdCa1T6aulPT9Q2OH88r38UtO4q/OxBDHmWBErE0=
Subject key identifier: 8D:57:A5:7C:90:88:CF:20:4F:25:CF:3D:3C:6E:EA:60:97:ED:3F:26
Authority key identifier: 13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42
Certificate issuer: /CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342
Certificate serial: 4C878065C18AFF34E94098F881BCE8660D089EE5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 02:34:13 +0000
Manifest this update: Wed 29 Jul 2026 02:29:13 +0000
Manifest next update: Thu 30 Jul 2026 02:56:13 +0000
Files and hashes: 1: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl (hash: xSbzc+jAsr4okYl0UtCOaq+fem3nUcVuKM7ojnNv4XA=)
2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: uVPktCZC8+f+6UT6i6M1uIRYRGCJQ3maVFAM7Hkvn3s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl
rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:87:80:65:c1:8a:ff:34:e9:40:98:f8:81:bc:e8:66:0d:08:9e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342
Validity
Not Before: Jul 29 02:29:13 2026 GMT
Not After : Jul 30 02:56:13 2026 GMT
Subject: CN=8D57A57C9088CF204F25CF3D3C6EEA6097ED3F26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:a7:ae:fb:00:d3:92:90:9b:1c:9e:18:6a:
a5:39:08:4f:c6:dd:2f:45:70:71:7b:63:fd:8d:ca:
6a:3a:2a:be:c8:95:46:6f:39:17:d7:c7:e3:14:38:
c1:3d:84:cf:be:53:17:e6:10:47:4a:90:a9:f0:9d:
4e:17:ad:56:c6:50:eb:28:c0:e8:75:ce:ef:89:a7:
f8:e7:0e:18:17:40:22:48:4e:98:02:2d:42:16:6f:
08:d7:91:1f:ae:c6:a5:2a:e2:3a:a7:27:49:24:89:
d1:81:3f:30:ae:aa:14:e7:0a:38:e8:b0:32:28:3a:
8c:23:2f:1e:37:fb:80:a3:f1:e1:87:96:56:bb:01:
e8:05:62:dd:8f:ed:f0:8f:01:38:7c:93:54:09:15:
19:f0:3f:8b:cf:d1:5d:aa:5d:74:67:50:2d:cb:29:
ec:bb:bb:f4:7f:a6:fc:3f:09:bd:22:f6:53:2b:bd:
65:ce:21:fb:58:4d:ea:a8:7b:da:c5:4a:8b:00:35:
fd:1f:40:5e:3f:81:e6:c8:b9:68:a0:8e:15:cd:ad:
43:58:3a:29:6f:58:6e:f3:ac:11:b5:f1:a5:ef:65:
a4:79:01:2d:bf:f3:a4:38:17:09:7d:86:59:90:6c:
43:92:5b:3d:68:78:44:79:51:19:8c:4a:0e:a3:7a:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:57:A5:7C:90:88:CF:20:4F:25:CF:3D:3C:6E:EA:60:97:ED:3F:26
X509v3 Authority Key Identifier:
keyid:13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:88:cc:35:ee:45:5c:99:8d:a7:8b:46:54:13:ae:11:bf:e2:
42:a9:25:ac:48:f8:7e:66:86:fc:96:b8:ff:e3:c4:db:91:2e:
2c:76:39:a6:bf:76:ac:74:0c:72:2b:3e:59:f5:6c:fd:ce:7c:
8e:5c:c8:aa:dc:3c:8f:10:9f:71:cb:93:06:ee:4e:46:56:7f:
2e:51:17:c1:28:77:45:ae:8d:cf:a2:5b:b4:c5:4f:aa:96:97:
72:f3:3f:6f:b1:1b:bf:b5:01:4a:6c:72:85:21:8d:fe:ed:6e:
8f:3d:3f:d6:65:b8:49:5e:91:20:57:2a:fc:59:35:bf:d7:6e:
a1:e5:4f:30:96:3a:de:18:e5:1b:ae:86:29:4e:25:68:3f:2d:
9f:5e:06:9d:dd:f1:f5:7b:15:b3:67:ed:0b:74:14:22:75:e0:
e0:b9:dc:9a:83:8d:59:aa:1f:88:2e:50:74:6a:77:a8:49:84:
2a:c2:ad:bd:e8:42:d3:ad:a8:83:64:9a:7a:56:43:e4:c8:82:
d5:91:7a:e3:cd:26:9a:60:e3:e6:b6:cf:75:dc:bf:dd:bb:85:
1a:97:20:89:b8:21:c4:10:10:79:a7:47:dd:34:49:95:b1:b2:
b7:a2:4d:3e:45:20:4e:a3:1a:3c:8b:4f:e3:da:2b:2a:c4:07:
bb:fe:df:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:05:53 2026 by rpki-client