
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
File: C771ADE0100457DC61EB95A71BB4E63885DC542F.mft (raw, json)
Hash identifier: 6nZvvT2AKT1pqXVvZQv6CWOJc82bV8bjoLMtp1uIWZI=
Subject key identifier: 4E:8A:DB:FF:56:2B:37:0F:4E:5B:EA:54:D5:54:EF:63:AA:41:CD:26
Authority key identifier: C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F
Certificate issuer: /CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
Certificate serial: 3EC8F947DFC03FEFA6093C54CE6C80936E6AEF9A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 07:31:57 +0000
Manifest this update: Wed 17 Jun 2026 07:26:57 +0000
Manifest next update: Thu 18 Jun 2026 09:02:57 +0000
Files and hashes: 1: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: cnrnucshQjB1HR7ilM8foFskZiCRkLLcdgQGq/I0/j4=)
2: C771ADE0100457DC61EB95A71BB4E63885DC542F.crl (hash: +yLUirFk9wpAkWNyo4b7w/75Bij1B34LpsPy1g1sOos=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl
rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c8:f9:47:df:c0:3f:ef:a6:09:3c:54:ce:6c:80:93:6e:6a:ef:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
Validity
Not Before: Jun 17 07:26:57 2026 GMT
Not After : Jun 18 09:02:57 2026 GMT
Subject: CN=4E8ADBFF562B370F4E5BEA54D554EF63AA41CD26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:04:0d:d4:5a:b9:cc:06:05:6f:51:25:0c:
79:28:49:47:e6:a7:05:91:8a:30:92:00:a3:8b:f3:
c8:f2:07:a3:eb:d8:36:95:30:ff:73:31:d3:18:d2:
03:9d:6f:51:de:d5:0a:11:81:e1:aa:fa:07:ae:89:
23:c1:c7:7a:77:45:ee:e1:35:d8:17:bb:a3:ce:f3:
7c:2c:0b:48:c1:c6:08:39:b0:ee:f0:55:bb:62:b3:
53:a1:e3:5c:23:64:4a:d7:11:e5:8e:d5:7a:f2:03:
b5:ef:f5:67:cd:74:36:5c:70:c7:54:1b:82:d4:a3:
e5:c3:48:b3:0a:31:18:49:df:df:d5:12:8c:61:4d:
4c:c6:bf:b8:39:86:29:23:f1:75:e3:40:0d:3f:68:
3d:6b:d5:f0:8b:13:68:0d:85:01:e0:6e:5f:b5:8a:
fe:86:ad:dd:56:5b:43:18:0a:4e:a3:63:ef:ae:8f:
11:4d:2e:cc:2e:02:68:7b:98:e4:c0:90:9a:c7:a8:
f0:2c:85:13:38:e4:eb:fe:c4:2c:60:7b:d4:fe:ac:
5a:2b:73:d9:e3:5b:92:f9:00:ed:d1:8f:bb:8c:3c:
0c:48:dd:59:4b:5c:24:2c:18:31:df:8b:17:f5:9a:
e5:13:1d:06:4c:2e:68:d5:e9:fa:59:3f:b0:e7:26:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8A:DB:FF:56:2B:37:0F:4E:5B:EA:54:D5:54:EF:63:AA:41:CD:26
X509v3 Authority Key Identifier:
keyid:C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8d:da:7f:80:d2:a9:31:04:82:c2:80:f9:29:09:bd:ab:f3:
20:72:f9:33:c4:5c:b7:20:91:e7:68:60:53:3a:ec:72:ae:92:
67:c5:d0:9c:b2:1c:b4:14:50:07:e0:c6:46:1a:72:5e:23:3d:
f7:b8:8a:8f:cf:b6:6c:df:d8:52:3c:da:0e:aa:bc:82:18:36:
4d:ec:a3:57:d7:32:4a:92:05:43:3d:3d:1d:cd:c7:e6:c0:27:
f1:88:2d:72:d2:ba:66:b8:08:f1:2b:53:73:f2:19:20:a4:e2:
b5:97:7a:19:4c:7f:90:a2:2e:51:39:a6:70:cb:fc:84:86:47:
26:5f:f9:0b:32:c8:e4:f6:10:ad:82:9a:78:41:c1:3a:a8:0d:
26:81:29:bb:28:3f:cf:0d:b8:6e:50:5d:a6:83:13:fa:87:1c:
d9:ba:c2:36:5f:c8:48:40:88:e4:91:17:f2:56:68:55:3b:a6:
6a:58:ef:ea:f4:34:32:29:a8:66:e8:90:cb:95:1f:ed:4f:36:
7f:57:2b:7f:33:43:d7:5c:97:18:a8:8f:02:82:c3:c8:a6:65:
d2:37:cd:df:e3:43:ce:a3:23:31:ed:69:c2:fe:73:5d:3a:62:
18:38:5e:a8:39:5a:fa:9b:2d:43:db:d1:9b:2f:01:fc:56:9c:
ba:eb:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:42 2026 by rpki-client