
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft
File: 267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft (raw, json)
Hash identifier: lTEP3hVTdAKHYmNnoKuoi9vbfCKAWF/0mA7R2pFM66w=
Subject key identifier: AE:95:64:D7:B9:87:2F:D1:96:AC:36:52:83:47:27:B8:1B:18:37:5C
Authority key identifier: 26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23
Certificate issuer: /CN=267E9A66F7A7C78F7CC7C04986D61B87DEBF5123
Certificate serial: 288163A9E8EACB34F3D662701FC17E707046B4F2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 18:29:42 +0000
Manifest this update: Tue 28 Jul 2026 18:24:42 +0000
Manifest next update: Wed 29 Jul 2026 19:46:42 +0000
Files and hashes: 1: 267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl (hash: 16PB5MAZON0ztT/OPG+MDiYGyJ6ZAgFYcRw4EDB6/ho=)
2: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: vTNwoFQSRd6UXwDXhePDtYRySxnP7vYZs8QtGgvL7F8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl
rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 09:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:81:63:a9:e8:ea:cb:34:f3:d6:62:70:1f:c1:7e:70:70:46:b4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267E9A66F7A7C78F7CC7C04986D61B87DEBF5123
Validity
Not Before: Jul 28 18:24:42 2026 GMT
Not After : Jul 29 19:46:42 2026 GMT
Subject: CN=AE9564D7B9872FD196AC3652834727B81B18375C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:af:49:fe:b9:d7:ab:ee:2a:7d:79:33:89:
4c:cf:82:33:3d:5a:e8:af:34:1e:04:bf:c6:c0:aa:
77:08:c7:ea:19:e6:45:1a:d3:5e:66:e9:0a:e5:05:
b2:61:bc:9a:18:e7:3b:c6:38:87:74:ba:6d:8a:69:
5c:ef:6c:bd:3f:d7:0b:89:13:89:4b:1d:24:cc:63:
72:5c:8f:24:e8:d6:da:00:6e:06:17:97:02:90:26:
26:91:b6:0c:ec:2a:26:48:6d:f0:03:14:88:fe:87:
79:87:4d:2e:fe:f7:50:83:66:58:ce:b2:f6:0b:7c:
ff:11:ef:b7:11:50:f3:85:d0:95:c5:40:26:c4:41:
8d:00:54:54:95:48:aa:78:d9:90:7a:33:48:95:af:
4e:66:31:0d:c4:67:ff:cf:ca:83:fd:ec:6b:7f:05:
94:f8:a7:0e:13:32:e7:ef:73:80:88:c0:a4:9a:c9:
2b:12:d0:85:94:4c:97:04:4d:a1:d1:25:d2:f2:54:
ff:41:f3:a8:c0:15:22:b1:a3:ae:72:29:a7:31:68:
c0:1a:fd:52:cb:c0:f1:80:4e:57:d8:0c:b6:d4:d6:
92:80:54:06:0c:12:5b:a8:5c:60:07:2d:2c:3c:63:
4a:9b:26:9c:8b:f8:c4:33:58:a5:75:a5:54:04:66:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:95:64:D7:B9:87:2F:D1:96:AC:36:52:83:47:27:B8:1B:18:37:5C
X509v3 Authority Key Identifier:
keyid:26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cd:98:20:61:d5:6e:84:92:fa:d4:3f:83:31:49:aa:11:fe:
71:5d:99:c4:0d:6e:c4:e1:b5:99:58:06:9d:39:29:b6:79:34:
7c:58:68:b2:29:76:0c:df:66:b4:0e:59:a3:14:c9:d2:15:5d:
51:51:45:ff:b4:ad:53:a9:9a:38:02:91:b8:79:1c:88:83:25:
97:4d:74:e2:f8:06:51:71:fd:b3:59:c9:be:f7:99:7d:4d:96:
a2:6e:2c:60:19:0f:bd:cf:64:84:17:55:83:67:ed:39:c2:c0:
ca:cb:94:f2:c9:bc:83:7e:da:61:03:1b:f4:41:8d:16:67:4e:
55:03:7f:e3:25:22:4d:70:2b:55:c4:29:4c:b7:d6:62:34:b1:
4b:0b:1c:9a:dd:f0:26:9e:46:2e:ec:66:a7:c4:8b:28:f4:8b:
14:d6:2f:b9:aa:a2:4c:4d:c7:7b:2f:44:47:90:84:d0:f8:de:
18:ba:59:46:ea:f2:44:2d:fb:cb:7f:1a:a1:04:fe:bb:14:70:
95:93:b3:de:bd:e5:2e:ee:38:56:39:f0:d5:ba:d8:b4:a1:b0:
71:fd:3c:b9:9b:13:0b:61:2a:4e:75:4b:2f:d8:8f:a9:64:e0:
21:1e:4d:a7:f0:2e:95:f0:b0:4b:38:ee:2b:69:a1:f9:c9:88:
a1:6b:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:10:46 2026 by rpki-client