
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
File: D51AA8B3D72CDB71C90345B767919665E60A217F.mft (raw, json)
Hash identifier: 4408/zY6THY7C5CFtSSJ+EJu7HSQNQQ2ot7TMxWGULg=
Subject key identifier: 00:9B:5D:7A:CE:17:EA:4F:E7:86:06:14:10:FC:8E:F9:FD:E2:9D:54
Authority key identifier: D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F
Certificate issuer: /CN=D51AA8B3D72CDB71C90345B767919665E60A217F
Certificate serial: 3A900AAF79635709BC319619721CAD3E40A028A9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
Manifest number: C6
Signing time: Sat 26 Sep 2026 08:40:32 +0000
Manifest this update: Sat 26 Sep 2026 08:35:32 +0000
Manifest next update: Sun 27 Sep 2026 11:27:32 +0000
Files and hashes: 1: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: rfjdhFUeqRzlpu/a6IIMJJdIbxMUcj3gavb0NZINzaQ=)
2: D51AA8B3D72CDB71C90345B767919665E60A217F.crl (hash: QcOAbBkyzsnxaoyQjmpU5c1boHUDrMkbymtIAWbvJGE=)
3: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: qWXJBwwFjRlNPlzGu34yKlzyWtSJkvJR6tTW+DXklsI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl
rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 11:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:90:0a:af:79:63:57:09:bc:31:96:19:72:1c:ad:3e:40:a0:28:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D51AA8B3D72CDB71C90345B767919665E60A217F
Validity
Not Before: Sep 26 08:35:32 2026 GMT
Not After : Sep 27 11:27:32 2026 GMT
Subject: CN=009B5D7ACE17EA4FE786061410FC8EF9FDE29D54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:62:9c:9f:52:d0:47:7a:09:f2:e5:81:23:
48:c2:c1:26:17:05:b1:22:7a:64:90:59:ba:2a:fe:
80:c7:fc:9e:c2:32:63:38:91:b2:17:fd:c9:d2:44:
b9:8d:4c:d5:52:af:fe:34:41:58:c1:8e:e8:a0:b9:
2a:34:57:fc:25:5a:b9:25:2d:40:5d:03:aa:16:84:
ed:f3:cc:e6:e7:0e:0a:45:5f:7b:47:b3:ca:37:d4:
a6:20:93:f3:4c:b2:d4:c8:09:77:88:d4:07:49:98:
68:15:6d:59:2a:37:42:38:cf:58:b3:ec:ca:4b:d7:
18:0e:b4:7a:98:f1:24:ee:d1:9b:16:16:93:04:a5:
bc:a6:ea:2b:f6:e9:9d:7c:a9:6d:bb:6b:71:36:47:
ab:90:b4:9a:d9:18:9d:b6:6c:3e:5e:ef:5e:c7:56:
c1:df:f7:80:45:4a:65:61:eb:97:7d:74:e4:b1:96:
d1:71:35:d9:2e:a1:18:80:e7:17:e0:7f:ca:e0:07:
f5:a1:a3:bf:e4:4b:07:12:3c:fa:b5:88:f5:31:5a:
c4:79:79:d1:93:37:b7:b5:93:9a:11:77:cd:16:e4:
e1:8e:8b:3d:42:1d:2b:38:46:00:a0:73:9f:f4:39:
07:52:4a:e5:02:71:be:23:c3:24:c9:2b:87:64:11:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9B:5D:7A:CE:17:EA:4F:E7:86:06:14:10:FC:8E:F9:FD:E2:9D:54
X509v3 Authority Key Identifier:
keyid:D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:10:dd:e3:a2:05:02:3c:69:03:14:a8:96:f5:00:eb:71:02:
97:74:07:40:cc:b5:fa:22:71:c9:ee:82:5e:63:ec:e0:73:b6:
7f:6e:ab:57:57:da:f7:88:47:1a:3b:4f:7c:b0:ac:2b:4f:9b:
eb:ed:33:fa:1f:78:ff:0d:74:e3:40:0b:db:54:af:c0:f1:06:
6e:07:d3:56:02:8b:0d:7e:cd:18:3d:56:60:72:bc:fd:ca:a7:
20:ca:72:35:94:f7:c6:b6:90:42:d6:ef:09:db:34:d8:65:a0:
12:5d:2a:61:51:32:5e:0c:67:a9:c5:cc:58:87:51:2b:e8:f1:
c4:8f:1c:bb:37:31:21:eb:4f:18:81:d9:36:8a:24:ec:aa:dd:
75:64:6f:0a:ca:cd:6c:15:55:c4:9e:df:e5:71:00:2c:d3:a3:
ec:dd:29:75:85:a7:69:1c:33:0f:cd:67:84:c1:28:e4:c4:dc:
b6:36:a2:84:21:d3:4c:f3:60:97:f5:47:7b:88:c9:63:e8:58:
51:68:9f:50:21:c7:0f:76:19:04:e9:d3:42:7a:71:f7:1f:36:
a4:cf:b8:0a:3e:9f:48:03:a8:0e:92:31:bf:80:47:86:85:05:
e1:ad:56:47:8f:07:75:b9:fb:b2:32:6f:d0:fa:c1:d4:a2:50:
4c:63:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:07:06 2026 by rpki-client