
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft
File: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft (raw, json)
Hash identifier: 4r9gBWl2SoP7/gzLXx8Is9DTzfZfGc4mJbFx/rxFaek=
Subject key identifier: 0D:EA:15:E0:8A:5F:D8:C3:45:51:A7:7D:C0:E2:55:57:FC:B8:49:FD
Authority key identifier: DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A
Certificate issuer: /CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A
Certificate serial: 3133BBF77AE0F8D221595C944C5D18967DA9F94A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 07:31:55 +0000
Manifest this update: Wed 17 Jun 2026 07:26:55 +0000
Manifest next update: Thu 18 Jun 2026 10:40:55 +0000
Files and hashes: 1: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: KJ7p2DQB9uLZReoNNtXLeW/ntHP0ly/9EgDzYMeS9tA=)
2: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl (hash: FgLB4hasHl6Up5huvMs10q+2p79eRK7kfgBVMXr8GMk=)
3: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: SJt1SBaXEP9+A3/U6mnd55r9+cQvaamR3U/aBvUPC3E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl
rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:33:bb:f7:7a:e0:f8:d2:21:59:5c:94:4c:5d:18:96:7d:a9:f9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A
Validity
Not Before: Jun 17 07:26:55 2026 GMT
Not After : Jun 18 10:40:55 2026 GMT
Subject: CN=0DEA15E08A5FD8C34551A77DC0E25557FCB849FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:21:ec:d1:73:48:8b:25:3b:4a:55:e7:b1:
bf:15:4d:f3:0c:9e:a5:3b:79:b6:ce:b0:22:ea:07:
ee:3c:8b:ef:75:a3:a6:1f:c9:1f:4c:ac:d4:1e:01:
d9:3b:60:be:b0:bf:cc:34:03:83:4e:d5:c6:6e:c6:
2f:65:d6:8d:6a:c8:0d:c8:60:e3:51:2a:f4:e9:78:
8f:93:fa:e6:97:e3:b2:44:64:a1:e9:2c:be:cd:d8:
ce:bc:27:2c:5b:2b:11:2f:cf:b3:8e:73:72:69:68:
5f:95:9e:30:44:42:ec:fb:ae:e1:37:0e:b6:b5:66:
1d:25:e3:4b:a0:bc:74:77:90:5f:f0:05:a4:ad:1d:
9a:4b:f1:34:c4:06:3a:16:fe:7b:e2:21:6d:96:25:
84:b3:4f:89:5f:11:8a:a6:c3:9b:78:71:ee:89:aa:
a9:9b:6f:31:b9:cc:53:29:92:a9:cf:76:6a:d9:8c:
52:68:7e:f5:0c:24:c8:7c:b5:af:f2:65:d9:b7:bf:
60:1a:8f:62:b5:68:8b:42:2a:22:a4:65:1e:ba:a0:
07:00:15:61:a7:4b:0b:fe:95:c8:7a:07:2a:37:f0:
de:e3:be:3c:de:a7:b3:b1:be:3c:dc:b9:0c:5c:94:
4e:93:eb:2a:da:b7:b1:d1:64:b4:3e:75:1e:8f:5b:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EA:15:E0:8A:5F:D8:C3:45:51:A7:7D:C0:E2:55:57:FC:B8:49:FD
X509v3 Authority Key Identifier:
keyid:DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:39:21:a2:ac:d2:08:c5:9a:ab:29:78:cf:ee:4b:64:7e:42:
f4:98:88:d8:65:b3:e3:7a:6d:50:2a:33:cd:be:a7:7a:08:5f:
06:5f:80:3b:c7:26:c9:10:ea:9e:bf:09:2c:38:e6:1d:d3:cf:
4e:b7:64:1b:d8:63:b6:05:7d:e9:4f:ae:47:47:56:b2:f3:5c:
ee:fc:b7:33:ed:a3:fb:ac:8a:92:9d:9a:1c:85:c3:67:d8:3b:
8e:4f:e5:27:e0:b9:18:91:f9:e8:86:e5:d4:03:09:38:76:07:
ea:75:b7:0a:cb:0f:03:2b:71:16:5b:7b:21:57:6b:8b:a6:88:
e3:08:8c:25:fc:ff:e2:2a:a2:61:79:ef:c0:66:e2:e6:b0:81:
4e:72:df:61:1b:ec:de:64:06:61:fc:35:dd:f6:b2:99:bc:9d:
3d:ce:77:ee:15:7b:bd:0e:b7:e9:9c:12:63:72:20:32:60:91:
bd:5b:7c:0e:4b:47:84:8a:1b:f9:24:6d:10:e1:52:90:bd:7c:
1f:73:31:29:66:b5:5f:50:b7:4b:6b:ea:fa:10:ee:f2:98:7e:
cd:5e:4b:8c:04:79:46:b9:fd:46:4c:c9:b4:b9:4e:ce:c1:7d:
c9:a9:f7:17:40:19:4d:ce:6d:41:df:ce:35:d8:2d:dd:de:ff:
83:2e:68:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:03:34 2026 by rpki-client