
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
File: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft (raw, json)
Hash identifier: RTf9S3xdS3c8w7ToPqTzqe/KkegjmUWvb67Qa4XZSZw=
Subject key identifier: B8:F6:AF:5B:BD:16:80:83:DD:ED:00:BE:BA:32:AE:54:2C:03:23:AC
Authority key identifier: 13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42
Certificate issuer: /CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342
Certificate serial: 51752A64DB8D956DDDC6A36FEF28BAD5DB69C148
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 09:28:13 +0000
Manifest this update: Mon 21 Sep 2026 09:23:13 +0000
Manifest next update: Tue 22 Sep 2026 09:40:13 +0000
Files and hashes: 1: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl (hash: tnArl6JyL+cRJGVWPh9/wzg3pazq+aEQPIVSYzXNK48=)
2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: uVPktCZC8+f+6UT6i6M1uIRYRGCJQ3maVFAM7Hkvn3s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl
rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:75:2a:64:db:8d:95:6d:dd:c6:a3:6f:ef:28:ba:d5:db:69:c1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342
Validity
Not Before: Sep 21 09:23:13 2026 GMT
Not After : Sep 22 09:40:13 2026 GMT
Subject: CN=B8F6AF5BBD168083DDED00BEBA32AE542C0323AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:e6:e8:58:02:b5:b2:ec:95:fd:0d:ec:b2:
6b:c3:b9:d5:17:c3:51:53:94:74:ea:57:4c:1c:e2:
dc:3c:92:04:de:48:85:fd:1e:98:e7:c1:81:47:10:
0b:c1:c5:4b:b0:00:03:3e:65:ed:7c:8f:27:fa:8b:
b2:34:47:fc:9d:f1:d0:23:00:b9:90:f4:d9:c8:99:
58:53:38:bc:1a:d0:ce:27:4c:95:1d:99:36:b5:0b:
50:a3:b0:12:47:97:5b:2d:87:32:df:af:a0:a9:29:
f5:24:62:3f:ed:03:75:7f:15:c9:ab:9a:25:91:48:
7f:05:e1:f9:4e:5f:9b:af:2b:05:09:db:a9:9c:e6:
b5:20:19:cd:a7:10:53:49:19:c8:95:11:3c:97:bf:
92:65:1b:92:b5:9c:e4:fa:8c:ee:6a:94:61:9c:21:
fb:1a:c3:e6:7e:1f:d5:9c:29:c7:f4:ec:88:12:10:
cc:4d:34:e4:c4:88:33:43:41:97:f1:f5:4e:ca:b0:
b6:38:19:cf:72:42:ba:03:c9:12:a5:02:10:e3:b4:
a8:fc:f6:f0:d3:30:76:a7:96:c7:33:77:2e:c2:07:
47:e2:88:62:c9:23:e1:3a:1d:8a:22:d5:4e:ba:07:
26:ad:b6:88:e8:f0:89:dc:09:4f:f3:f4:a5:66:2c:
e0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F6:AF:5B:BD:16:80:83:DD:ED:00:BE:BA:32:AE:54:2C:03:23:AC
X509v3 Authority Key Identifier:
keyid:13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:78:f7:9a:20:83:eb:be:c8:a3:c8:21:ef:0f:7e:6b:fb:af:
6b:c8:d9:6b:54:f3:f8:2e:5f:09:e0:6a:fe:c9:21:50:74:85:
9c:d7:ab:1a:68:8a:c0:d2:19:2e:37:73:f9:3e:e5:94:e3:18:
34:4a:4c:6d:a8:76:68:db:fe:70:2d:e5:90:67:a0:bd:24:0b:
c5:26:44:67:16:12:1c:2f:89:26:08:3b:c2:4b:9c:c7:dd:df:
ea:23:af:99:30:cd:82:22:60:ec:b3:a0:16:5e:cd:3d:aa:7a:
53:1d:46:0b:44:10:90:18:a8:0e:bb:c1:99:16:2b:23:e2:20:
34:5f:f1:13:84:00:df:83:48:5d:c5:63:07:e4:fc:5f:58:36:
35:99:64:85:64:74:4e:56:e8:44:42:3b:f5:18:36:9b:20:2b:
ae:b7:40:6c:6c:be:e0:24:e8:6a:b7:ea:db:ac:8e:a7:4d:36:
a3:47:91:35:07:8a:ad:71:5d:dd:52:02:71:04:dd:01:2f:ac:
c2:78:ef:3d:e7:9b:25:92:98:46:fa:03:e5:b3:ed:91:03:05:
0b:c0:df:68:b3:0b:ba:29:a9:86:4f:70:ad:b0:b4:05:05:65:
62:ad:73:90:78:ab:93:3b:d4:51:45:8f:66:10:83:8b:dd:f9:
50:70:0f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:23:33 2026 by rpki-client