
$ rpki-client -vvf rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
File: 218F42D6775F39C04AD2042E61C557053D4A69FE.mft (raw, json)
Hash identifier: VFEOFlkcepJH9L7576E1HsGh8h6L2VctVOCx4syFSqM=
Subject key identifier: 90:E6:6F:EA:C4:DC:9A:F9:9A:8D:98:31:C4:57:97:7B:27:24:01:23
Authority key identifier: 21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE
Certificate issuer: /CN=218F42D6775F39C04AD2042E61C557053D4A69FE
Certificate serial: 281B2F4B81B9843926750F747182133E6669EE23
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
Manifest number: 3A
Signing time: Sun 14 Jun 2026 02:36:01 +0000
Manifest this update: Sun 14 Jun 2026 02:31:01 +0000
Manifest next update: Mon 15 Jun 2026 06:19:01 +0000
Files and hashes: 1: 218F42D6775F39C04AD2042E61C557053D4A69FE.crl (hash: G67F39wvI7rEDUkwOlsjiuGb8kTPCJ/tA9G22VWmf5U=)
2: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: umbo3UO1surjjSvNZv8AZicuTRNi2hpCJFPh1PPiOEw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl
rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 06:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:1b:2f:4b:81:b9:84:39:26:75:0f:74:71:82:13:3e:66:69:ee:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218F42D6775F39C04AD2042E61C557053D4A69FE
Validity
Not Before: Jun 14 02:31:01 2026 GMT
Not After : Jun 15 06:19:01 2026 GMT
Subject: CN=90E66FEAC4DC9AF99A8D9831C457977B27240123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:4e:a0:3b:80:e6:42:c9:fb:09:75:76:a8:
58:4f:1d:45:5b:63:cd:9e:68:a8:72:c0:0e:b9:fd:
01:8b:70:09:65:c0:6e:d7:57:21:09:92:b9:f5:9e:
51:c5:3e:03:6b:17:09:16:42:11:61:5f:49:a0:8d:
af:2c:fe:1c:1e:91:9b:f0:15:af:1f:8c:3c:e1:47:
bc:cf:c9:a3:58:35:0e:c6:5c:47:2f:77:78:b6:8c:
25:29:f2:e8:86:25:fa:a8:f5:e1:9d:1f:de:ed:4f:
52:3c:f0:3f:2c:08:fe:1c:6e:3e:50:d4:17:11:26:
49:b4:e7:dd:a9:73:fd:e9:d4:96:1f:87:a7:47:bc:
d9:b9:be:86:bc:dd:95:9b:92:d2:10:31:c2:8e:b1:
8f:8a:c6:1d:42:cd:82:fa:f8:ea:c2:23:37:71:bd:
cb:c3:e1:de:9e:fb:31:86:d7:df:99:34:a9:66:1f:
cd:14:0b:0c:c3:c8:66:5e:c1:16:a4:e8:44:00:cf:
eb:ca:c2:c7:fd:b4:33:e7:df:5d:e5:86:0e:82:67:
8b:43:a6:01:7b:39:e3:81:6b:c2:42:d1:35:fb:4f:
18:6a:c6:9b:fb:25:38:b0:3e:c4:2a:41:bf:f0:6b:
c6:12:3b:e1:0e:14:9e:6c:3d:dc:4b:f2:6d:b4:b2:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E6:6F:EA:C4:DC:9A:F9:9A:8D:98:31:C4:57:97:7B:27:24:01:23
X509v3 Authority Key Identifier:
keyid:21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:be:d9:03:b8:22:09:0a:c3:5d:4f:20:9e:f8:89:77:e1:f1:
25:09:9c:a8:fc:fd:9b:6e:e7:10:d6:c0:fb:6e:c9:cb:c7:49:
75:5b:a9:80:f7:2c:81:0c:56:1a:a1:7e:44:96:34:1d:85:3e:
60:8e:36:be:ed:2b:fc:f0:b8:ef:39:fb:bb:5e:90:be:41:75:
c5:05:8f:f6:55:57:c3:8a:6a:f4:73:0b:7d:b2:4c:1c:cf:d9:
c6:77:7a:ac:85:07:a8:a5:52:4f:28:7e:c1:43:1d:70:7e:3f:
ca:78:55:8a:55:73:72:6a:a3:4b:41:95:78:55:f0:da:0b:13:
f1:5f:74:63:f4:50:09:f2:a9:81:fa:0a:55:96:10:c2:77:1c:
f7:fa:9e:69:54:c3:af:ed:19:b2:73:54:82:6b:e6:9f:cd:36:
cb:94:d5:3e:6c:92:8b:c4:35:d4:da:4c:a7:7f:3e:de:a3:87:
b8:eb:ce:59:cb:50:b1:b9:b8:84:12:63:8f:4d:3d:68:69:d6:
8d:9f:6e:b9:30:7c:2b:16:7e:2e:a3:4f:03:9d:98:95:97:6d:
cc:b8:23:96:69:9b:f5:65:9e:60:a2:f9:37:e7:0e:e9:ef:45:
e5:e8:0a:aa:b4:da:32:ed:f8:7f:e1:5f:4a:bc:ca:1c:e9:18:
2e:fc:b2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:03:33 2026 by rpki-client