
$ rpki-client -vvf rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
File: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft (raw, json)
Hash identifier: LEFt1Sa7GJnofoVqzWXkCbQhZt43JIo6BDbCUfEcaZ4=
Subject key identifier: 04:48:8C:3C:C3:F2:52:08:FD:78:F1:49:84:42:F6:F3:7D:C2:F9:CF
Authority key identifier: DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27
Certificate issuer: /CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027
Certificate serial: 201C40C6BFC9FD087ABAE16A2444C50656389806
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 17:40:31 +0000
Manifest this update: Tue 16 Jun 2026 17:35:31 +0000
Manifest next update: Wed 17 Jun 2026 18:54:31 +0000
Files and hashes: 1: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl (hash: lWrO6M2gmvvqDcJqZwrVGgtToLOiszGjX9fALNDxY3k=)
2: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: 7auAs3JZetQc2Zih3zy94WvlM7s/oo6N4QlMSA+A3AA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl
rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:54:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1c:40:c6:bf:c9:fd:08:7a:ba:e1:6a:24:44:c5:06:56:38:98:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027
Validity
Not Before: Jun 16 17:35:31 2026 GMT
Not After : Jun 17 18:54:31 2026 GMT
Subject: CN=04488C3CC3F25208FD78F1498442F6F37DC2F9CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:8e:a9:5e:46:8d:73:71:fb:74:34:00:d1:
a1:e8:f0:26:41:dd:d6:e8:85:97:a2:04:9b:29:8a:
8f:00:9a:ce:29:75:d2:67:50:8a:e6:82:f3:9b:c4:
97:64:03:7b:b8:74:a7:68:e2:17:99:d9:99:33:fc:
23:07:8d:91:5b:f6:0e:80:14:a5:b4:f9:42:be:82:
7c:a4:a5:d8:4a:4e:0c:2b:46:d7:60:22:57:06:09:
1b:64:04:65:14:57:ae:e1:71:3b:d7:6d:3b:9b:a1:
af:f9:6a:2c:92:48:bc:4e:55:c9:cd:65:a8:75:2f:
20:85:c7:59:61:79:b2:23:ac:05:9f:1c:98:8c:63:
4d:ce:85:95:14:74:c3:f4:a8:5a:1a:b8:0b:c9:30:
39:88:35:da:2f:f5:e1:42:5d:6b:a8:fd:6e:12:e9:
04:74:78:8c:ab:5e:08:64:e2:3f:c5:ef:5c:c3:cb:
4e:42:0a:80:94:81:af:17:07:05:92:b9:6c:ce:92:
03:8c:01:bb:ea:90:08:55:bb:b8:99:59:73:e9:11:
15:66:cc:94:bb:b5:dc:33:5d:d2:b1:1f:29:de:e1:
58:28:ee:24:e5:56:db:30:c3:4f:f2:8a:69:1b:92:
22:9f:c3:e9:37:b8:15:1a:94:8d:df:c2:85:47:3b:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:48:8C:3C:C3:F2:52:08:FD:78:F1:49:84:42:F6:F3:7D:C2:F9:CF
X509v3 Authority Key Identifier:
keyid:DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:91:53:a1:ff:0a:e2:2b:a0:d8:0e:7e:8a:7d:ca:e8:7b:0e:
37:64:dd:3e:30:97:bf:37:42:97:5b:28:a3:a4:ab:62:e1:93:
08:69:99:78:e6:9d:d2:84:9b:d7:83:dc:53:ab:1e:88:c7:b6:
17:89:62:a3:7b:3f:fd:f7:c7:b6:db:47:2a:c7:93:d7:2a:47:
41:f2:4f:df:e7:0c:e6:29:4c:23:8d:53:99:c3:d6:90:1d:03:
b3:ac:99:94:c5:07:55:22:12:5b:9c:73:2c:fe:d9:74:9a:36:
c9:83:9d:2e:65:cd:8d:ce:c8:3d:a3:dd:47:67:54:59:11:a4:
6e:81:88:1a:3c:1f:bd:04:f0:95:db:1c:bb:f6:14:25:a7:a9:
5b:d3:f8:89:fa:0a:27:96:93:68:3f:95:95:1e:a4:e9:ae:f1:
2f:30:e4:54:77:11:40:dd:4f:c7:c8:15:e6:46:c7:f6:5d:52:
9d:03:d0:0b:ee:92:ea:5e:82:ee:00:f8:e2:06:1f:3b:a7:e6:
5a:6e:2e:18:d7:e5:00:54:87:64:95:d2:b7:0e:8f:ae:36:ef:
39:8d:72:31:d6:cf:33:ab:f0:c9:3b:85:9c:f4:e2:ba:44:f8:
70:7c:9d:20:92:d7:34:7e:c7:1f:c7:79:f5:6b:04:b9:a3:03:
61:c5:7d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:50:22 2026 by rpki-client