
$ rpki-client -vvf rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft
File: C2B50C176FE80567FC831542D1C8AC57BD65209A.mft (raw, json)
Hash identifier: +8bSaZnJrC3Kj9UfLYFMBgV5yjHgaqxIKrAn52/zWcI=
Subject key identifier: 43:D9:70:66:6F:3E:F9:26:E8:13:01:CE:F5:94:B7:84:9E:B0:4A:5E
Authority key identifier: C2:B5:0C:17:6F:E8:05:67:FC:83:15:42:D1:C8:AC:57:BD:65:20:9A
Certificate issuer: /CN=C2B50C176FE80567FC831542D1C8AC57BD65209A
Certificate serial: 3B1D6D7C0D3C05EB48E8D4F009F7E44E72F68F4F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2B50C176FE80567FC831542D1C8AC57BD65209A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 14:52:34 +0000
Manifest this update: Sat 13 Jun 2026 14:47:34 +0000
Manifest next update: Sun 14 Jun 2026 17:53:34 +0000
Files and hashes: 1: C2B50C176FE80567FC831542D1C8AC57BD65209A.crl (hash: ztZ3DouhZJdpRqj4YIFw4aGCTILQVokAO/I7WUMCYOg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.crl
rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2B50C176FE80567FC831542D1C8AC57BD65209A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:1d:6d:7c:0d:3c:05:eb:48:e8:d4:f0:09:f7:e4:4e:72:f6:8f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2B50C176FE80567FC831542D1C8AC57BD65209A
Validity
Not Before: Jun 13 14:47:34 2026 GMT
Not After : Jun 14 17:53:34 2026 GMT
Subject: CN=43D970666F3EF926E81301CEF594B7849EB04A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:0b:2f:bf:f4:86:6d:5b:3f:8d:03:64:9c:
21:b7:5c:49:3a:2b:87:db:61:49:56:ff:8e:46:1c:
c7:5e:38:bf:3d:56:0a:25:f9:31:90:b8:4b:68:97:
c3:79:86:f1:95:47:fe:3b:05:c5:20:66:a0:a4:ad:
2e:6d:03:f6:48:a3:2f:aa:9c:ca:4f:99:1a:d8:bd:
82:56:d4:d1:2a:ed:51:ba:66:67:f8:15:f3:4b:62:
fa:1a:3f:46:3a:51:c4:2e:b2:b6:79:47:63:3e:38:
29:f3:0c:92:8c:7a:e3:63:8b:a0:28:0b:c2:68:0f:
7e:e5:07:77:81:4e:4b:30:94:58:4c:28:54:e3:dc:
a3:45:54:3a:ca:6b:99:6d:88:63:c0:16:d8:27:fb:
3a:e8:e5:5e:d5:17:56:19:23:0c:be:e8:e5:40:2b:
5a:7f:fd:8e:38:68:80:1f:66:9f:34:b4:df:16:d8:
1a:42:37:2b:5e:54:4c:4d:da:6e:7f:3e:3b:98:f3:
bb:03:5d:62:21:22:1b:3b:f4:de:9e:cb:24:21:d1:
93:0a:32:b1:06:60:b4:47:fd:6f:6e:f7:41:4f:95:
03:51:74:1a:f2:b8:d0:eb:93:d1:f1:17:9b:53:04:
58:2f:3b:ee:1b:d3:d8:12:7d:2b:f9:7e:62:00:f0:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D9:70:66:6F:3E:F9:26:E8:13:01:CE:F5:94:B7:84:9E:B0:4A:5E
X509v3 Authority Key Identifier:
keyid:C2:B5:0C:17:6F:E8:05:67:FC:83:15:42:D1:C8:AC:57:BD:65:20:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2B50C176FE80567FC831542D1C8AC57BD65209A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4f:6d:6c:db:44:3f:1f:b6:f1:3d:0b:ab:3b:33:62:25:d2:
e5:3e:e4:08:0f:6c:a9:61:e8:37:03:7d:cb:74:1d:65:9b:44:
a5:8a:aa:f2:15:3b:4b:52:d4:9f:8a:06:38:19:b6:10:11:d5:
53:0f:9c:b0:84:74:9f:1f:28:de:1b:17:ec:10:ab:f7:4c:73:
f7:25:4a:ff:d7:9a:f8:62:00:65:85:e8:4e:0f:cd:e1:75:d3:
6d:80:44:7e:4c:98:0b:3f:f8:e9:b0:03:2e:80:a7:5a:8d:10:
89:27:32:8e:83:35:0a:5c:68:23:6b:02:ed:c3:96:19:1c:13:
ea:d3:3b:d8:4f:b9:a2:95:dd:b0:98:d4:58:21:18:21:66:f2:
9b:89:17:c1:4f:68:76:ee:77:4f:01:61:ab:01:67:e3:b9:9e:
08:26:0c:ec:26:c2:d0:8c:4e:e0:5f:64:af:71:8b:2a:2e:a8:
c3:f4:80:f8:97:dd:08:fb:81:2a:e1:05:74:2a:93:4a:77:57:
c9:3f:64:12:62:6d:43:1e:ad:7e:12:67:8d:8b:c0:77:bb:29:
a4:f4:e7:a6:95:6f:c7:7e:33:c2:36:7f:30:91:ad:13:6c:94:
08:3c:9a:c7:8f:ec:d7:55:37:b6:05:2f:40:58:8c:b0:73:09:
16:a3:76:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:03:07 2026 by rpki-client