
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
File: D61B761F0598B8998BF802A069F51103270C6CC0.mft (raw, json)
Hash identifier: 5VTraXVnAk8IjnI/RhtC6m7K1zqhIeevi0vUM4GC5Bw=
Subject key identifier: 30:35:4E:32:E1:20:F7:F3:62:62:B2:E5:A7:59:D0:DD:69:72:9D:E1
Authority key identifier: D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0
Certificate issuer: /CN=D61B761F0598B8998BF802A069F51103270C6CC0
Certificate serial: 394D8314460B210B9A96C9FFCBCFA35CB277C7DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 00:03:05 +0000
Manifest this update: Tue 16 Jun 2026 23:58:05 +0000
Manifest next update: Thu 18 Jun 2026 01:56:05 +0000
Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: JV7kYNU81vIjUMbIQ9WaFlRn0Vf3tZeMtDHyZF3sYe4=)
2: D61B761F0598B8998BF802A069F51103270C6CC0.crl (hash: qU7fSf2b/pGResFHbgNRfIHdx5sXb4IqgIVFx2e6htY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl
rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:4d:83:14:46:0b:21:0b:9a:96:c9:ff:cb:cf:a3:5c:b2:77:c7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D61B761F0598B8998BF802A069F51103270C6CC0
Validity
Not Before: Jun 16 23:58:05 2026 GMT
Not After : Jun 18 01:56:05 2026 GMT
Subject: CN=30354E32E120F7F36262B2E5A759D0DD69729DE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:bd:87:d6:a2:25:f6:e8:40:19:1b:78:02:
64:17:f1:6a:ef:e7:b6:18:e2:39:9e:23:35:a6:f5:
a2:0d:33:ae:78:21:d7:44:8a:85:bf:e4:7f:ab:0a:
ed:ea:8d:40:c9:3d:22:ad:94:88:d5:00:9f:3d:0a:
de:10:ef:5f:be:46:ca:d7:47:21:21:5f:2e:fd:cb:
1a:da:76:32:23:da:94:d0:5c:f5:3a:96:92:e0:f6:
a4:d8:09:6b:52:d9:c1:0e:25:1c:d3:1e:e0:c4:67:
4a:87:f6:49:f4:3e:ba:e4:18:37:ee:6d:e2:93:ac:
d7:81:f2:27:3c:80:e0:dd:17:89:a0:24:72:3d:30:
a1:a2:d1:83:7c:e7:2a:8a:56:66:99:fd:0e:d9:c0:
96:05:da:59:05:14:e9:d1:32:44:cd:41:77:15:44:
0a:11:9b:4c:09:04:0d:72:b3:7d:db:3f:6d:14:21:
f9:3b:fa:d8:e6:7a:fa:7c:6b:8c:56:51:2d:15:12:
16:af:61:b8:76:86:f5:ba:74:99:fc:b0:a0:d3:8c:
bf:6f:37:49:6e:dc:74:ca:a8:3b:c0:db:83:8f:6e:
fc:e1:ef:fb:df:c1:23:88:68:80:00:67:27:13:8a:
97:72:db:20:6d:42:e8:24:9e:f3:a1:bc:f8:fe:7b:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:35:4E:32:E1:20:F7:F3:62:62:B2:E5:A7:59:D0:DD:69:72:9D:E1
X509v3 Authority Key Identifier:
keyid:D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a3:e1:36:db:69:ec:f1:3c:aa:be:d1:90:ad:f7:d6:71:cd:
d1:95:95:b3:1c:ae:6d:68:36:c5:02:ea:37:d1:b8:a4:cb:4f:
b4:bb:49:b3:4e:fd:80:c5:dd:f4:f5:30:07:d4:79:77:eb:a7:
df:57:e7:44:9b:de:4c:16:a0:d4:74:58:f8:a9:c9:a1:a2:be:
0e:d9:33:15:5b:69:fd:20:03:99:90:b3:c0:a2:f7:e8:d9:c2:
a6:f1:c9:5c:ee:f4:a0:e9:5f:a6:32:b9:1f:29:39:36:29:5a:
50:14:b4:bf:8d:cf:1a:6e:1f:d5:48:db:34:55:78:4d:e8:14:
c7:2b:fe:82:4c:12:ca:76:bf:c4:62:9f:35:70:c7:82:df:9f:
29:5b:41:3f:08:15:81:c9:99:d5:e5:38:63:c6:1c:03:3d:b3:
a0:74:54:98:d0:e0:f9:e0:8e:49:49:79:16:03:d0:b7:8c:34:
13:ea:e1:e8:87:be:09:2a:14:82:3a:8f:9c:d9:b9:c2:1f:1b:
93:96:e2:95:48:0a:c9:75:90:5d:f8:e4:32:64:dd:b5:97:60:
b6:27:64:9d:1c:29:d6:63:31:28:2d:ea:c1:27:78:69:bc:be:
25:ec:64:6a:78:6c:5c:e2:f0:8b:48:c0:70:2d:46:31:48:63:
a7:b2:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:53:25 2026 by rpki-client