
$ rpki-client -vvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
File: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft (raw, json)
Hash identifier: wABIRBuoLHcdcfhlnh+0tE1QUl7NndGE605o6frCQFY=
Subject key identifier: 82:53:E3:5D:12:45:80:5B:1D:E0:60:6C:2F:BE:5D:69:FB:66:53:D5
Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A
Certificate issuer: /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
Certificate serial: 5704E1F51E65A48189A51256C64B3793273D92F6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 04:28:14 +0000
Manifest this update: Wed 17 Jun 2026 04:23:14 +0000
Manifest next update: Thu 18 Jun 2026 05:45:14 +0000
Files and hashes: 1: 3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (hash: GzkXDWcauMWYNDn5MyFD1nDjKkP9ZpScdykpa6iOEak=)
2: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl (hash: AyT+OFRAH4Z8Gaqlxj2oTMWKjeNkCM/27fTWwPJfEaQ=)
3: 3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (hash: VdJ1ZIQnNrJcWKeLJSeBvVO0FNQ/sxBZNurd+uNh3ek=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl
rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:04:e1:f5:1e:65:a4:81:89:a5:12:56:c6:4b:37:93:27:3d:92:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
Validity
Not Before: Jun 17 04:23:14 2026 GMT
Not After : Jun 18 05:45:14 2026 GMT
Subject: CN=8253E35D1245805B1DE0606C2FBE5D69FB6653D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:53:d0:51:fd:ca:af:82:24:40:f1:f0:53:
b0:31:a1:c8:78:91:02:a7:c5:f2:71:15:88:52:2a:
80:a9:58:3a:4c:f7:24:b4:17:c7:b1:bf:6e:fe:fa:
97:10:42:42:95:93:7e:99:f6:1c:98:80:ec:d8:6a:
5d:a4:8b:80:cf:1b:7b:93:0a:1d:a5:39:d4:30:ee:
23:1c:cb:48:7e:96:18:ad:c6:18:dc:73:57:6b:db:
ba:63:34:5f:ef:7f:28:fe:68:17:75:de:f8:ef:25:
20:ec:c6:1f:65:15:ba:58:d8:6c:e0:9f:a3:14:ec:
4b:62:dd:8b:b4:87:42:00:70:2a:e8:ba:94:94:6c:
12:6f:51:32:ae:08:22:16:53:35:a1:c4:86:eb:ae:
07:70:cd:2f:af:3e:ab:ec:eb:a4:55:76:a3:4c:cc:
2a:e4:b0:c0:81:ba:f7:74:5c:33:66:c5:31:28:e5:
5e:ef:38:37:95:41:07:2c:0e:3d:07:08:5b:bc:68:
be:99:08:f4:6a:8f:f7:95:ab:a3:0c:56:67:88:46:
06:b5:34:b9:20:64:9f:ae:08:a3:b3:8d:c3:c9:d6:
6f:7e:5e:b2:76:bd:89:5c:d3:93:51:89:2e:71:8b:
17:0c:b4:95:62:e7:71:87:0a:01:78:19:26:b3:83:
58:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:53:E3:5D:12:45:80:5B:1D:E0:60:6C:2F:BE:5D:69:FB:66:53:D5
X509v3 Authority Key Identifier:
keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9e:4f:87:4a:e2:ac:f7:1e:7b:74:7d:f8:8e:bf:72:3a:97:
44:70:90:ab:1e:d5:14:d2:95:1c:70:27:52:a9:f7:bd:0b:e7:
63:56:31:c6:b5:80:c0:7f:09:dd:db:ac:8c:0c:42:93:c4:b4:
24:d8:68:fd:83:25:d0:c7:cd:61:f5:fe:cf:51:3c:17:25:f4:
3a:63:3d:a1:db:61:db:7e:8b:ea:c0:47:72:99:17:04:45:cf:
4d:d6:ba:52:cc:27:f9:16:e8:d8:31:46:7e:af:f2:31:fe:0c:
f7:cc:39:8e:31:2e:80:ab:71:13:48:f3:73:8a:cd:3c:2c:9a:
60:f3:58:40:d3:ca:de:fa:48:2c:d1:89:e3:37:6f:c9:12:36:
64:0e:3c:0d:1b:73:ce:f1:9f:a2:d6:23:bd:20:8b:8f:bd:81:
46:13:49:5b:87:63:2d:ee:87:09:ac:05:fd:7a:70:37:65:c7:
33:04:7a:9c:59:7c:41:d3:80:a8:65:8b:d3:54:18:fb:55:a2:
0d:6f:b7:b8:e9:2f:18:73:9f:4b:dd:58:86:94:53:90:6a:e3:
74:17:d3:e4:81:61:2e:b5:c7:22:d4:c3:bc:52:9e:9e:fa:09:
29:01:6e:3d:a5:d9:68:1c:7c:e2:53:c9:9f:11:6c:ba:c3:0e:
ee:6b:17:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:42:19 2026 by rpki-client