
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
File: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft (raw, json)
Hash identifier: 5tXpwhVlBFz3IT0GTxMe+vPbagHOOJf/RNlMo0vGx/Q=
Subject key identifier: 94:03:AF:B1:22:A7:75:FC:F2:8C:20:E6:DF:ED:6C:85:43:DC:DB:DE
Authority key identifier: 20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E
Certificate issuer: /CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E
Certificate serial: 1161BF12185A024EDDE2054E85583E0B7CC706EA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
Manifest number: D9
Signing time: Sat 10 Oct 2026 20:17:31 +0000
Manifest this update: Sat 10 Oct 2026 20:12:31 +0000
Manifest next update: Sun 11 Oct 2026 21:45:31 +0000
Files and hashes: 1: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl (hash: fousF5NpZCGmkFYjoZLP5PDBZhZR3NEBYq34qQD6oPY=)
2: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: D52uwwzpgaxCjAFI9GaZMm7APMN7ImtqrU9yyVklPWk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl
rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:61:bf:12:18:5a:02:4e:dd:e2:05:4e:85:58:3e:0b:7c:c7:06:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E
Validity
Not Before: Oct 10 20:12:31 2026 GMT
Not After : Oct 11 21:45:31 2026 GMT
Subject: CN=9403AFB122A775FCF28C20E6DFED6C8543DCDBDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:f6:b0:11:73:71:76:b8:4a:c6:14:83:06:
3f:95:82:ee:31:36:07:5b:df:04:9d:00:55:28:3a:
57:f4:ad:dd:b0:3d:b7:f9:b1:88:82:67:b2:ff:9e:
a2:73:6d:f0:98:28:57:f9:82:cb:af:cb:2a:9e:bf:
d1:7f:ef:4a:00:3e:4a:e7:fc:c1:77:00:89:70:62:
67:bd:4c:87:4f:06:19:6d:ec:5a:9d:dc:c6:df:2b:
07:1c:bf:89:e0:aa:07:dc:5c:6d:11:de:b3:78:41:
c1:a9:87:0d:d8:ca:34:7d:60:2f:5d:91:7a:c6:f7:
81:a6:53:42:02:90:ea:a3:0d:4b:68:5d:77:b3:ba:
df:8c:a5:06:c8:91:31:f6:4f:da:80:ff:b9:66:0b:
4c:75:f9:08:5c:8e:75:2e:b8:51:ae:53:9d:d9:b0:
6d:69:d6:dc:7a:9d:42:6c:39:e2:6e:8f:c8:34:c2:
26:c9:e6:bc:be:8d:5b:a9:77:46:13:4f:e6:d3:e5:
ac:f6:9c:a6:6a:49:f4:7c:9d:49:d6:32:ef:4d:ee:
a5:62:ef:e0:6d:4c:d5:ea:24:d2:fd:b2:b3:2a:35:
d4:ba:e5:2e:00:54:cf:2c:05:7f:00:b7:06:d7:3e:
41:d6:d1:bb:39:ac:6a:c8:99:dc:ee:08:e6:e9:2c:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:03:AF:B1:22:A7:75:FC:F2:8C:20:E6:DF:ED:6C:85:43:DC:DB:DE
X509v3 Authority Key Identifier:
keyid:20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:78:7f:a3:a9:8c:f8:5b:f0:69:eb:aa:6c:1f:61:a3:df:74:
47:e8:4c:cf:ce:32:44:64:d7:21:48:95:4d:c2:1d:3a:1d:c0:
cd:9f:e0:e3:bf:55:ce:b7:e2:87:de:fb:0c:58:13:f1:ed:8e:
7c:10:dd:65:69:da:94:f8:dc:09:29:63:cc:26:a8:ea:cf:a8:
4e:99:5f:e6:6f:e8:23:9e:ed:84:a1:c4:d8:e8:b8:50:e2:81:
a2:60:1e:c3:4a:ef:6b:bf:9e:62:fb:0a:b9:4f:47:ab:88:d6:
21:74:1e:08:9e:1f:8e:b0:c0:3c:b8:50:a7:97:d0:3b:82:f2:
0d:92:80:7f:cb:4b:6d:24:26:61:54:6f:a4:fc:97:de:a7:04:
77:0c:9d:d8:be:77:99:56:b8:98:ed:37:e1:ab:65:4d:c2:47:
c6:06:07:08:00:47:5b:cd:59:76:ce:a1:2b:58:61:e7:0b:8f:
4b:19:1f:02:b3:79:39:04:19:5d:54:fb:e1:dd:7f:b0:94:a6:
dd:17:44:b8:a5:13:1f:41:87:06:ef:ec:bf:03:0e:9e:b2:af:
cb:f8:dc:67:14:c6:2e:3d:70:2b:9f:1a:7b:46:7f:dd:5f:11:
47:46:6e:d8:ec:9e:3c:15:6c:f9:4a:2c:6d:30:c2:c5:ce:57:
c9:51:a2:18
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEWG/EhhaAk7d4gVOhVg+C3zHBuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAzMDIxOUFDMkQ4QkRFNTQwQjNBMDZCM0UyMjBDQzYy
QjZCMzc0RTAeFw0yNjEwMTAyMDEyMzFaFw0yNjEwMTEyMTQ1MzFaMDMxMTAvBgNV
BAMTKDk0MDNBRkIxMjJBNzc1RkNGMjhDMjBFNkRGRUQ2Qzg1NDNEQ0RCREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtY/awEXNxdrhKxhSDBj+Vgu4x
Ngdb3wSdAFUoOlf0rd2wPbf5sYiCZ7L/nqJzbfCYKFf5gsuvyyqev9F/70oAPkrn
/MF3AIlwYme9TIdPBhlt7Fqd3MbfKwccv4ngqgfcXG0R3rN4QcGphw3YyjR9YC9d
kXrG94GmU0ICkOqjDUtoXXezut+MpQbIkTH2T9qA/7lmC0x1+QhcjnUuuFGuU53Z
sG1p1tx6nUJsOeJuj8g0wibJ5ry+jVupd0YTT+bT5az2nKZqSfR8nUnWMu9N7qVi
7+BtTNXqJNL9srMqNdS65S4AVM8sBX8AtwbXPkHW0bs5rGrImdzuCObpLHkxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlAOvsSKndfzyjCDm3+1shUPc294wHwYDVR0j
BBgwFoAUIDAhmsLYveVAs6BrPiIMxitrN04wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzEvMjAzMDIxOUFD
MkQ4QkRFNTQwQjNBMDZCM0UyMjBDQzYyQjZCMzc0RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yMDMwMjE5QUMyRDhCREU1NDBCM0EwNkIzRTIyMENDNjJCNkIz
NzRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0
MjAtZGE4MTYyMTExODA2LzEvMjAzMDIxOUFDMkQ4QkRFNTQwQjNBMDZCM0UyMjBD
QzYyQjZCMzc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHJ4f6OpjPhb8GnrqmwfYaPfdEfoTM/OMkRk
1yFIlU3CHTodwM2f4OO/Vc634ofe+wxYE/HtjnwQ3WVp2pT43AkpY8wmqOrPqE6Z
X+Zv6COe7YShxNjouFDigaJgHsNK72u/nmL7CrlPR6uI1iF0HgieH46wwDy4UKeX
0DuC8g2SgH/LS20kJmFUb6T8l96nBHcMndi+d5lWuJjtN+GrZU3CR8YGBwgAR1vN
WXbOoStYYecLj0sZHwKzeTkEGV1U++Hdf7CUpt0XRLilEx9Bhwbv7L8DDp6yr8v4
3GcUxi49cCufGntGf91fEUdGbtjsnjwVbPlKLG0wwsXOV8lRohg=
-----END CERTIFICATE-----
Generated at Sat Oct 10 22:36:51 2026 by rpki-client