
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
File: 8369683C9C4A77F4B5AB05185F01C3C810502D34.mft (raw, json)
Hash identifier: jKnrcNfR7PcqzRBbc1FGNzKV9v64Z1WMzxwQcFMOGDg=
Subject key identifier: 07:80:6B:AC:68:A4:10:96:52:57:E0:16:9C:CB:30:1D:76:53:76:1D
Authority key identifier: 83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34
Certificate issuer: /CN=8369683C9C4A77F4B5AB05185F01C3C810502D34
Certificate serial: 4DCE0C3ACA690E60D8AB1CDF0E0167CFD9BC8C23
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 05:44:51 +0000
Manifest this update: Wed 17 Jun 2026 05:39:51 +0000
Manifest next update: Thu 18 Jun 2026 07:38:51 +0000
Files and hashes: 1: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: fnlL5zMOPvGAUBk55QrgutXcZXU5BAm+3sV40oQEUJw=)
2: 8369683C9C4A77F4B5AB05185F01C3C810502D34.crl (hash: f9YuftrbUCCZT9QNRMvZri3ETuQV5L/ATl3H2jq9+S8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl
rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ce:0c:3a:ca:69:0e:60:d8:ab:1c:df:0e:01:67:cf:d9:bc:8c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8369683C9C4A77F4B5AB05185F01C3C810502D34
Validity
Not Before: Jun 17 05:39:51 2026 GMT
Not After : Jun 18 07:38:51 2026 GMT
Subject: CN=07806BAC68A410965257E0169CCB301D7653761D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:a7:a8:9e:2f:74:54:b9:d3:7b:7d:5b:db:
1a:87:1c:97:d1:f0:e8:68:71:f4:1a:76:59:44:b7:
cc:22:30:dc:6b:5e:c3:4a:67:5d:7a:5a:12:bb:d5:
d9:10:8b:3a:b8:94:1a:d7:8c:c7:93:84:65:b3:d5:
be:29:6d:5f:dc:ab:f7:08:70:97:38:0a:c6:63:0e:
59:1b:a0:54:3b:70:b0:af:ea:6d:79:05:19:b1:b0:
2d:d5:6a:91:45:12:65:3b:1f:4a:63:52:8c:5a:f1:
55:0a:be:68:98:7e:60:e6:2d:83:c8:6b:84:8f:31:
01:af:a0:d8:5e:2e:c3:d0:93:bb:14:ae:11:6d:12:
6f:2a:93:75:78:f1:32:40:2e:02:2a:cf:cf:a9:4e:
29:53:ee:df:a4:c8:c4:e6:40:3b:f0:a3:06:b1:6d:
48:19:0d:62:aa:4b:d8:18:1b:df:db:6f:f0:3d:8e:
34:46:32:35:40:2a:6d:0d:2f:cf:45:15:20:26:91:
6c:e9:d5:5e:b4:c2:9c:80:72:45:02:c4:cb:c1:a5:
7c:73:07:99:8f:79:c7:85:41:f4:32:d2:2b:27:9e:
0f:a7:2f:03:73:a1:b5:c5:58:56:3e:db:68:44:28:
34:08:49:17:6c:b7:15:84:58:0d:8c:4a:c7:10:15:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:80:6B:AC:68:A4:10:96:52:57:E0:16:9C:CB:30:1D:76:53:76:1D
X509v3 Authority Key Identifier:
keyid:83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bf:8d:fe:d8:44:bc:63:46:dc:cc:71:b6:e8:16:bf:a5:ba:
f2:6c:d1:2a:0f:fc:ab:ae:9a:0c:f8:13:9f:68:52:31:16:56:
b7:07:6c:3b:a6:8a:2f:de:e5:0a:48:95:c1:66:26:52:33:21:
da:10:88:eb:5b:01:bc:d2:1a:45:f2:76:19:0f:67:a2:dd:80:
ad:1f:9e:de:7b:4b:23:27:63:31:9c:af:85:ee:11:b8:46:88:
a7:6c:e9:40:c5:2d:11:c2:04:82:e9:36:ad:7a:23:2e:ff:0c:
b7:9f:07:52:14:5e:4d:41:10:82:72:c6:fd:ba:c2:39:fe:8d:
5b:ab:b4:54:2a:6f:46:4d:79:49:7f:60:68:16:77:fd:0a:58:
fe:ee:66:88:c2:80:5e:8a:f5:9f:2f:e6:a0:92:d2:1b:9c:19:
96:f6:9f:c9:73:16:1e:e8:aa:50:fd:0f:99:7e:0e:37:2c:4a:
c3:85:7e:e4:78:22:cc:26:86:b5:d0:e0:75:b8:7f:bd:a1:85:
8d:12:75:07:89:49:37:c1:a7:22:8f:88:52:aa:c3:ff:1e:ab:
d3:f9:47:f5:69:28:d2:68:9b:ca:4c:d5:ce:6a:c2:da:ed:e5:
b3:38:d4:8d:f9:3d:95:28:e7:30:c3:e5:cf:4e:62:58:b5:53:
9e:25:76:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:36 2026 by rpki-client