
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft
File: D6344C556CB88A244AE43DD23D620550C754F24F.mft (raw, json)
Hash identifier: yTOdQlnCTFklwS0H6Hgi+8F2ecqH9YxWcKi+hw3i5D8=
Subject key identifier: 7F:49:4F:94:B0:31:DE:56:DB:8E:24:67:09:88:6C:D7:E1:A0:1B:A7
Authority key identifier: D6:34:4C:55:6C:B8:8A:24:4A:E4:3D:D2:3D:62:05:50:C7:54:F2:4F
Certificate issuer: /CN=D6344C556CB88A244AE43DD23D620550C754F24F
Certificate serial: 3648AD97DB4D9C28542F9D585BDA067D430E8734
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft
Manifest number: DC
Signing time: Wed 14 Oct 2026 21:41:48 +0000
Manifest this update: Wed 14 Oct 2026 21:36:48 +0000
Manifest next update: Thu 15 Oct 2026 22:59:48 +0000
Files and hashes: 1: D6344C556CB88A244AE43DD23D620550C754F24F.crl (hash: uDPczeETqzztS0UEbSrvFPfImgAlsDzbGmLOUI69E4Y=)
2: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (hash: ks4tQxKb/HT7mZZsol2xTOY4z3gIixS1lQAzEE6O77U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.crl
rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 22:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:48:ad:97:db:4d:9c:28:54:2f:9d:58:5b:da:06:7d:43:0e:87:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6344C556CB88A244AE43DD23D620550C754F24F
Validity
Not Before: Oct 14 21:36:48 2026 GMT
Not After : Oct 15 22:59:48 2026 GMT
Subject: CN=7F494F94B031DE56DB8E246709886CD7E1A01BA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:6f:ce:ee:2b:45:6b:33:f8:b8:ba:d8:b6:
98:96:26:3c:e6:a6:f5:4a:a4:9c:7a:78:93:35:b9:
30:ea:d7:51:1a:4a:d2:aa:b2:62:47:fd:d3:e2:0b:
55:d4:bd:9a:2d:72:28:e3:05:df:67:4d:81:38:4c:
6c:7d:a8:00:e5:2a:52:91:be:66:35:dc:45:5b:af:
d1:04:a7:b8:d3:31:a2:4d:a6:27:bf:85:19:4f:fd:
95:4e:89:80:aa:9a:d2:e1:17:1e:2b:66:5b:90:8c:
b2:26:c2:10:76:64:13:33:98:50:41:52:5c:5c:52:
cb:6e:28:a7:fb:66:e0:61:cb:73:50:3d:c7:6d:97:
49:b4:9b:75:04:5d:0a:86:a1:07:34:c6:5d:e7:4c:
0c:ff:89:cf:2b:11:ea:a0:a8:cc:97:b0:22:08:ef:
6b:cc:40:1a:b2:cd:e0:92:44:30:e2:08:18:86:ab:
5c:f8:1b:66:0a:79:df:45:45:54:e4:be:3e:fd:3d:
9b:6c:59:00:39:f8:e6:4b:a1:ff:c1:09:4e:63:3c:
cd:2f:4a:bb:9f:e1:ca:4a:37:bc:a4:a5:23:14:69:
86:67:15:5e:52:b2:82:14:fd:b4:03:97:01:1f:62:
f0:b6:39:07:1e:50:c5:fc:3a:2d:74:53:b1:83:6d:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:49:4F:94:B0:31:DE:56:DB:8E:24:67:09:88:6C:D7:E1:A0:1B:A7
X509v3 Authority Key Identifier:
keyid:D6:34:4C:55:6C:B8:8A:24:4A:E4:3D:D2:3D:62:05:50:C7:54:F2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ea:e2:33:48:b1:a3:77:7a:dc:73:ce:ee:65:a6:fc:2b:e5:
d4:c2:1b:61:98:4b:fd:c1:4d:27:da:7b:86:78:6b:3d:73:c6:
e3:fd:a1:b8:78:9b:ff:dc:92:ee:1f:38:c0:25:48:e5:8d:34:
db:53:06:09:57:9a:15:75:d9:c8:0b:10:df:eb:a4:bd:5d:c1:
56:54:95:bb:ca:6a:3a:a0:db:b1:64:41:f6:7c:27:6e:ec:cd:
3b:d7:e4:36:cf:de:95:f3:ff:46:40:58:d7:1a:65:19:8f:ac:
04:b6:b3:29:c9:02:d8:9d:37:13:5c:72:73:37:2b:68:38:1b:
40:81:ed:71:c0:0b:9c:7c:06:7c:8d:04:66:dd:6e:a7:53:97:
f5:55:31:f3:9e:bc:55:e4:f7:01:ff:c6:f6:24:30:47:4f:eb:
6e:1a:7f:1d:4d:0c:09:c9:76:ca:87:e1:83:a1:c4:f6:8c:af:
49:f3:7c:6a:57:de:5a:6d:92:89:bd:93:44:84:22:ab:98:54:
d4:5f:b0:34:ba:d6:74:90:72:fd:60:f8:dd:fb:bc:37:77:e8:
8e:4c:e5:e4:52:ae:f9:83:37:b1:9f:c8:2a:27:c4:09:29:10:
15:e8:38:fe:d9:da:ce:fb:82:d3:02:7d:83:b8:c8:15:44:98:
cd:22:60:cf
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNkitl9tNnChUL51YW9oGfUMOhzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzNDRDNTU2Q0I4OEEyNDRBRTQzREQyM0Q2MjA1NTBD
NzU0RjI0RjAeFw0yNjEwMTQyMTM2NDhaFw0yNjEwMTUyMjU5NDhaMDMxMTAvBgNV
BAMTKDdGNDk0Rjk0QjAzMURFNTZEQjhFMjQ2NzA5ODg2Q0Q3RTFBMDFCQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrW/O7itFazP4uLrYtpiWJjzm
pvVKpJx6eJM1uTDq11EaStKqsmJH/dPiC1XUvZotcijjBd9nTYE4TGx9qADlKlKR
vmY13EVbr9EEp7jTMaJNpie/hRlP/ZVOiYCqmtLhFx4rZluQjLImwhB2ZBMzmFBB
UlxcUstuKKf7ZuBhy3NQPcdtl0m0m3UEXQqGoQc0xl3nTAz/ic8rEeqgqMyXsCII
72vMQBqyzeCSRDDiCBiGq1z4G2YKed9FRVTkvj79PZtsWQA5+OZLof/BCU5jPM0v
Sruf4cpKN7ykpSMUaYZnFV5SsoIU/bQDlwEfYvC2OQceUMX8Oi10U7GDbfzNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUf0lPlLAx3lbbjiRnCYhs1+GgG6cwHwYDVR0j
BBgwFoAU1jRMVWy4iiRK5D3SPWIFUMdU8k8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTcyZDE3NTItNDg1My00Yzc0LWI1NzQtOTk0ZDNiMTI0MDkwLzAvRDYzNDRDNTU2
Q0I4OEEyNDRBRTQzREQyM0Q2MjA1NTBDNzU0RjI0Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9ENjM0NEM1NTZDQjg4QTI0NEFFNDNERDIzRDYyMDU1MEM3NTRG
MjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcyZDE3NTItNDg1My00Yzc0LWI1
NzQtOTk0ZDNiMTI0MDkwLzAvRDYzNDRDNTU2Q0I4OEEyNDRBRTQzREQyM0Q2MjA1
NTBDNzU0RjI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC3q4jNIsaN3etxzzu5lpvwr5dTCG2GYS/3B
TSfae4Z4az1zxuP9obh4m//cku4fOMAlSOWNNNtTBglXmhV12cgLEN/rpL1dwVZU
lbvKajqg27FkQfZ8J27szTvX5DbP3pXz/0ZAWNcaZRmPrAS2synJAtidNxNccnM3
K2g4G0CB7XHAC5x8BnyNBGbdbqdTl/VVMfOevFXk9wH/xvYkMEdP624afx1NDAnJ
dsqH4YOhxPaMr0nzfGpX3lptkom9k0SEIquYVNRfsDS61nSQcv1g+N37vDd36I5M
5eRSrvmDN7GfyConxAkpEBXoOP7Z2s77gtMCfYO4yBVEmM0iYM8=
-----END CERTIFICATE-----
Generated at Thu Oct 15 16:47:13 2026 by rpki-client