
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft
File: 2479BECD79D87972D2E64A75818044EA49B2F7AB.mft (raw, json)
Hash identifier: vsrAXDUipBlUOv2rOUM++xFOz8OuI5PFVwLnl9mJd5g=
Subject key identifier: C6:91:20:F3:6A:6C:84:90:37:C6:66:92:A2:B8:6D:68:56:A8:DA:15
Authority key identifier: 24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB
Certificate issuer: /CN=2479BECD79D87972D2E64A75818044EA49B2F7AB
Certificate serial: 3DBD58E6BA5BFBA1A905DE6CF5201E07F4345D48
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 13:12:47 +0000
Manifest this update: Tue 28 Jul 2026 13:07:47 +0000
Manifest next update: Wed 29 Jul 2026 16:45:47 +0000
Files and hashes: 1: 2479BECD79D87972D2E64A75818044EA49B2F7AB.crl (hash: yUH03jZ/K8M43/V+2tuAfycOLuKV52zEyw2uWFb+eHM=)
2: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: /gZ4/45D54iPNl3rFwLqcXjfv+fGeCZ/kGOEYCstAaw=)
3: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: aop58br7cTbLrX5Ig76Wb88/Xv5ZLtq0WiG+kxtdBWw=)
4: 3130332e3131322e3134342e302f32332d3233203d3e20313534343130.roa (hash: EBSYxoW+DLXOqCY+Bl9yoeDsBygUGPhlM9cqjS/xpGk=)
5: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: W/8+xRtFQTktxO0fuk7MAz6L6AHwxOnMCS8RTW7dGss=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl
rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:bd:58:e6:ba:5b:fb:a1:a9:05:de:6c:f5:20:1e:07:f4:34:5d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2479BECD79D87972D2E64A75818044EA49B2F7AB
Validity
Not Before: Jul 28 13:07:47 2026 GMT
Not After : Jul 29 16:45:47 2026 GMT
Subject: CN=C69120F36A6C849037C66692A2B86D6856A8DA15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:97:fe:6e:69:7f:11:68:5f:a0:cb:35:61:
15:e9:9d:a7:cb:98:fd:02:62:c6:82:aa:56:c7:9a:
24:63:b6:81:72:4f:da:3d:83:b8:d9:04:bf:44:6e:
a2:35:1e:47:43:6b:01:88:65:02:a2:46:b9:92:4b:
0c:eb:84:6c:50:5a:b6:2b:b5:13:b8:13:9d:3e:a1:
6e:ee:6a:c8:7c:8d:f2:c6:12:19:a6:57:1f:01:07:
f6:45:f7:24:90:83:01:12:0d:89:54:f9:bb:14:dc:
a8:2b:ad:c1:1c:31:11:43:80:fa:b1:36:fb:d3:cd:
e2:0d:d5:37:a3:2a:dd:b5:8b:46:e1:b8:c7:0b:b5:
0c:2a:52:c1:1c:74:1c:20:48:1d:cf:24:5e:3b:cc:
22:75:58:72:dd:14:3e:30:22:ff:04:9c:9c:75:d4:
ad:26:8f:49:65:06:bb:e6:70:8f:9e:d1:1c:f4:16:
b5:b7:e5:9d:bc:34:be:7c:d9:77:81:5a:c4:8b:2b:
95:bc:83:41:a2:eb:95:1b:83:25:5b:c5:a0:23:f4:
06:44:19:99:c1:99:a9:93:90:44:d9:16:7f:f7:b6:
eb:b8:b2:07:3d:d0:cb:94:74:4a:1d:cb:5a:94:d2:
a7:98:2d:28:9a:b4:c4:22:8c:b0:27:d3:4c:36:50:
98:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:91:20:F3:6A:6C:84:90:37:C6:66:92:A2:B8:6D:68:56:A8:DA:15
X509v3 Authority Key Identifier:
keyid:24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:65:dd:6f:57:e6:31:d5:5b:07:b6:c4:46:0b:84:ed:5e:01:
c4:28:e1:ff:e0:fd:18:20:ef:16:bf:b9:13:de:6b:e5:96:39:
61:85:5f:ed:af:b9:57:d6:8e:6a:86:50:26:3e:96:db:36:c7:
56:dc:30:ea:79:70:c3:e0:74:93:80:f2:36:34:9c:95:ed:16:
7c:e4:56:98:f2:03:b4:32:82:09:17:09:20:74:1c:24:53:e0:
5c:23:d9:23:b6:32:39:07:43:42:85:8c:b6:8b:64:22:ac:85:
71:99:4e:01:df:c0:c5:d1:20:bb:b4:c6:a3:59:be:bf:1b:94:
46:d6:fb:45:45:ab:34:2e:2e:f2:2d:8e:9c:23:78:27:4d:91:
86:22:37:e8:a9:db:f7:ec:73:85:75:26:0d:4b:b5:5b:74:b2:
63:55:bb:9e:32:bb:73:1d:f8:22:2b:fd:e5:a9:46:a2:b0:06:
78:fe:ac:3b:4d:da:5d:62:4b:67:e9:ec:80:4d:a1:df:57:50:
e3:2e:e7:6f:53:c5:9f:ae:18:f8:29:dd:3d:8b:f9:7d:88:45:
5f:60:b4:64:62:86:cc:9e:06:69:a8:d1:82:d5:77:72:b5:fc:
a5:bf:c9:41:21:27:ca:e4:b4:d4:6e:df:f3:e2:ef:12:91:f3:
f6:e5:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:49 2026 by rpki-client