
$ rpki-client -vvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
File: 340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft (raw, json)
Hash identifier: 9c2MBdDMG0FjMqFMhxUD6MLWbITa6ZlQ/NbbFYWeAYU=
Subject key identifier: 1D:CA:D2:2D:18:9E:56:47:ED:24:A5:07:A3:B0:C6:44:5D:6A:91:F0
Authority key identifier: 34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F
Certificate issuer: /CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F
Certificate serial: 7E0BCB36E26E8A172965D0D1F5AAB1271739FA43
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
Manifest number: 75
Signing time: Wed 29 Jul 2026 01:32:58 +0000
Manifest this update: Wed 29 Jul 2026 01:27:58 +0000
Manifest next update: Thu 30 Jul 2026 05:24:58 +0000
Files and hashes: 1: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: QuJkYaezAKdTxcWr+l4aySjRA4vLncuY75qiXrBgtBM=)
2: 340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl (hash: cK6CVIInqABOLy9HhNRXkfKJOszqIPv3r+DCZC3EBHA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl
rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0b:cb:36:e2:6e:8a:17:29:65:d0:d1:f5:aa:b1:27:17:39:fa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F
Validity
Not Before: Jul 29 01:27:58 2026 GMT
Not After : Jul 30 05:24:58 2026 GMT
Subject: CN=1DCAD22D189E5647ED24A507A3B0C6445D6A91F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:ed:92:c3:cb:13:af:7f:e8:a2:51:f2:ef:
f0:d8:ac:6c:1d:bd:2c:ad:9a:6c:ec:f3:3b:ca:9b:
f3:81:b2:6c:43:7d:6f:d0:a8:ab:ae:b2:d4:de:57:
f0:e4:eb:a0:15:dc:f1:78:a8:3a:ac:4d:2e:88:36:
47:d4:d7:84:91:b7:fa:9d:7b:73:bc:f5:fb:d3:0f:
21:08:76:fc:d9:50:ea:4a:28:01:da:be:81:68:4b:
67:ad:3a:25:d4:ed:c6:cc:2b:86:ac:1f:96:3f:a0:
67:71:a7:2a:75:01:95:3c:e4:6b:41:5a:b3:86:15:
f6:52:88:b1:7e:16:0a:2a:eb:f9:24:13:5c:cb:e0:
57:96:15:38:ec:d0:25:95:7c:e5:6b:dd:b2:84:d6:
5c:6b:b6:57:d2:73:00:79:64:a0:61:96:b6:e6:73:
3b:a9:cc:17:b6:31:cb:e9:c4:0c:ca:da:05:2a:e1:
ef:2f:44:d4:0b:9c:39:a9:ae:d7:22:5c:b2:46:50:
5f:7c:ba:6a:3a:ca:84:af:e5:3a:47:9c:bf:c4:3f:
52:0a:23:ac:61:e6:ad:0f:d5:c3:59:d4:88:5d:f3:
2a:2d:87:13:a9:2b:88:95:88:23:78:dc:fe:b3:64:
1f:08:0b:91:6e:67:06:b8:5a:5b:fd:46:fe:03:d6:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CA:D2:2D:18:9E:56:47:ED:24:A5:07:A3:B0:C6:44:5D:6A:91:F0
X509v3 Authority Key Identifier:
keyid:34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9c:28:31:a5:99:b8:ef:1c:e8:ad:f1:e8:2c:d6:fb:24:39:
62:ad:6a:36:7a:ac:82:b2:92:cf:26:e2:4e:e5:b5:5f:66:70:
96:59:39:67:9f:47:28:a9:7f:68:c5:23:2b:85:e4:7f:59:bf:
a5:1b:9d:b4:d2:39:04:df:72:c7:34:d0:5f:91:ea:9c:43:09:
72:5d:da:9f:23:7e:32:8a:2b:98:96:4f:c3:97:31:b1:3f:37:
7a:1e:c3:10:62:10:ed:86:52:4e:b4:1d:f0:98:50:55:ad:00:
58:05:c5:e8:41:ef:2c:98:1e:41:3f:fb:c9:0d:7a:99:1d:64:
5e:28:27:8a:a9:69:61:96:6d:f3:73:2a:d4:6b:95:af:c3:74:
6a:33:76:d0:a3:29:7a:4e:8c:4d:dc:6a:25:d3:5c:cb:98:10:
77:97:67:c9:ca:e1:77:9d:28:6d:18:3d:6e:da:4c:65:db:89:
84:6a:9d:0f:1d:27:14:e3:eb:e7:48:84:aa:ee:d8:36:33:d0:
17:cc:8e:2a:46:40:b5:30:b8:de:3b:82:8f:af:12:fd:f9:79:
e4:71:d1:c5:d5:d6:8c:4e:47:bb:23:b6:ce:59:01:7a:b9:66:
32:d9:c4:93:d7:e0:fd:39:53:4a:9d:6c:02:03:b1:f6:31:d8:
cb:aa:92:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:34 2026 by rpki-client