
$ rpki-client -vvf rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft
File: C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft (raw, json)
Hash identifier: GwNxAC6RM34tALmHK/r1OXBjCJl2dauOyaScKgwHyR4=
Subject key identifier: E4:2E:80:BD:75:8F:70:18:CA:E8:BD:3E:9D:68:01:77:A5:8F:2D:AD
Authority key identifier: C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0
Certificate issuer: /CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0
Certificate serial: 708EC5BB8F8D22F81FCD11B798E9ED2E178EF9DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 17:40:30 +0000
Manifest this update: Tue 16 Jun 2026 17:35:30 +0000
Manifest next update: Wed 17 Jun 2026 20:42:30 +0000
Files and hashes: 1: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: mQKueKTh7A3uQ/utWkeUKce0jX8tikpIauTi7aYCX5o=)
2: C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl (hash: tHAi7A9Z7UrIqwZUalDotugrvjuJCJ9mUOa+lcbiTcQ=)
3: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: IZSn7ER9gKZENb7Yh0xyvq6Sz0bKmm3RwSLw7ctssto=)
4: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: YUSL8MaAWMcSEFSDLAAA9feKMtSwIZRFYTLiujhrL28=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl
rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8e:c5:bb:8f:8d:22:f8:1f:cd:11:b7:98:e9:ed:2e:17:8e:f9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0
Validity
Not Before: Jun 16 17:35:30 2026 GMT
Not After : Jun 17 20:42:30 2026 GMT
Subject: CN=E42E80BD758F7018CAE8BD3E9D680177A58F2DAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:b8:6c:9f:d4:8d:79:4f:73:c2:39:8f:28:
fc:69:e1:c2:ab:fb:86:85:c2:a8:c7:a4:16:a7:d2:
ea:e9:c1:ee:05:8d:75:50:d8:2c:9f:eb:2e:90:d1:
66:04:f4:5b:fc:77:cf:e5:f2:78:8d:b8:7e:32:83:
fb:17:19:4e:df:65:17:e9:0e:eb:51:67:4c:0b:ee:
c0:bf:62:fd:69:87:fe:c2:99:00:74:b7:c8:c1:db:
2e:fd:a7:eb:97:4f:d0:1a:cb:78:61:e1:d8:ac:9c:
a8:92:72:35:3f:7f:9f:d2:4d:a4:50:72:04:54:ff:
e3:37:2a:23:92:e9:56:43:13:ed:8f:69:42:f7:36:
55:d2:c5:64:42:2f:b7:f7:ec:48:87:a8:f9:ab:45:
16:c5:85:ee:49:b4:e8:9b:be:0a:dd:1a:a0:e2:a1:
1c:69:36:f9:8c:56:f6:e3:24:84:61:6f:9f:a2:90:
5b:9c:e7:33:a9:49:1a:71:30:1e:27:62:54:d2:cc:
e0:8c:da:21:46:46:b2:1c:c6:66:4c:08:40:4b:0e:
bd:f2:17:ab:36:33:d5:81:37:e5:5a:35:4b:34:35:
5b:dc:63:69:87:79:d4:9c:b7:73:14:f4:9c:9a:37:
17:42:e4:95:2d:cc:95:82:ea:d7:1a:d1:a8:e5:3a:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2E:80:BD:75:8F:70:18:CA:E8:BD:3E:9D:68:01:77:A5:8F:2D:AD
X509v3 Authority Key Identifier:
keyid:C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8e:79:b8:c2:0c:41:a9:94:e3:18:60:b1:b8:20:03:79:44:
c5:c2:0d:d8:7b:3c:01:e8:6e:d0:4d:91:57:a3:8d:e6:ab:db:
24:53:8d:75:b6:b0:a4:5f:3d:82:2a:28:30:67:38:10:04:32:
83:89:fe:c4:7f:ff:ce:13:81:92:f9:b6:4d:1c:8b:1e:a0:40:
ef:b9:2d:69:29:cf:69:7f:15:5a:e7:4c:32:ae:60:51:51:46:
05:76:63:63:cf:a2:00:14:a4:5a:0f:d3:27:d4:3f:bf:fb:f5:
7c:f7:1e:3a:33:64:f5:66:c1:bc:eb:de:7c:0a:25:4d:c7:fd:
7f:81:23:ce:46:9a:86:61:42:7b:25:65:dd:14:b4:4b:77:1a:
83:31:86:4e:2a:a7:82:7c:4e:94:12:6d:cc:41:84:ff:3c:d8:
d5:67:55:72:7f:35:c5:fc:ff:0f:cd:4b:88:8a:e5:ca:37:58:
32:86:04:45:cd:90:be:d7:57:13:8a:04:b2:c8:c3:c2:68:1e:
a5:10:51:27:3e:39:80:86:bc:b1:38:d4:e6:43:dd:b5:fd:f2:
c3:15:fe:97:b4:02:8d:c1:b8:e4:17:a5:63:dd:1d:8a:24:16:
49:03:9e:4a:f8:cd:2d:b4:c0:d3:fe:b8:70:13:87:32:e2:69:
8c:d5:aa:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:48 2026 by rpki-client