
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft
File: 2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft (raw, json)
Hash identifier: oCQ+BzL4Ktfzq7STNssoZKhjIjy0HQsVVdUcIodE+vg=
Subject key identifier: 77:51:9A:A2:C8:0E:7D:DE:07:AB:3D:9E:66:28:5A:39:7F:9B:5D:AA
Authority key identifier: 2E:6D:1F:78:4F:D9:72:18:83:D0:85:BA:15:F2:1C:AD:F4:D9:D5:E9
Certificate issuer: /CN=2E6D1F784FD9721883D085BA15F21CADF4D9D5E9
Certificate serial: 6B89034D14BF36037F60D7F177E207EDCDF04530
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 07:20:45 +0000
Manifest this update: Mon 21 Sep 2026 07:15:45 +0000
Manifest next update: Tue 22 Sep 2026 11:01:45 +0000
Files and hashes: 1: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: +oYni9XzPTeAFRIQkMYAJOggC3zZ7YXNPLVdua7XUGk=)
2: 2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.crl (hash: rKqP0iwFTJ2PGL2ico+S2OIJObkzuuKkn1/cPQMWQdU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.crl
rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:89:03:4d:14:bf:36:03:7f:60:d7:f1:77:e2:07:ed:cd:f0:45:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E6D1F784FD9721883D085BA15F21CADF4D9D5E9
Validity
Not Before: Sep 21 07:15:45 2026 GMT
Not After : Sep 22 11:01:45 2026 GMT
Subject: CN=77519AA2C80E7DDE07AB3D9E66285A397F9B5DAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:6b:fe:95:a5:e0:aa:d5:93:cf:fc:56:07:
60:35:44:d4:d3:5f:ca:69:24:ec:f7:bb:34:74:43:
d0:c2:5f:1c:5a:9f:7d:84:44:57:55:9b:02:7c:5f:
8e:c5:72:f1:67:2c:a3:fc:22:61:86:61:e0:b0:b3:
d1:39:10:c9:94:60:ad:81:fd:06:37:d4:28:95:b1:
02:c6:dd:d3:dc:13:fd:0c:87:78:09:de:67:fe:b2:
ba:cf:68:7e:e1:39:e8:2a:31:9b:40:44:ed:3a:70:
8f:f1:18:7f:f0:3a:6b:47:cf:72:b7:11:31:d2:55:
7b:bf:15:ec:8a:1b:81:1d:e4:c1:3a:96:dd:7d:09:
53:85:e8:67:0d:ea:1a:71:2c:d9:b5:c7:25:11:d0:
76:2f:1e:7c:e4:1b:5d:a2:14:d9:f1:c4:26:d5:72:
13:4a:62:e8:9a:6b:95:74:76:2b:a1:3e:4e:ba:ea:
74:de:12:5f:bb:d6:f0:1b:04:15:50:d9:82:82:fe:
75:51:8d:56:5d:d9:99:ed:7b:22:9a:11:c3:6a:b1:
13:b0:b4:29:bf:fd:0a:19:8e:d1:de:91:d3:b1:53:
e0:9d:ff:79:a8:38:2b:46:b6:b9:95:7a:f1:32:d5:
bb:33:a7:87:ea:3a:0a:c8:18:db:cc:3b:1c:2c:ad:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:51:9A:A2:C8:0E:7D:DE:07:AB:3D:9E:66:28:5A:39:7F:9B:5D:AA
X509v3 Authority Key Identifier:
keyid:2E:6D:1F:78:4F:D9:72:18:83:D0:85:BA:15:F2:1C:AD:F4:D9:D5:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:54:51:96:52:9c:8d:e0:65:89:7f:af:a8:2d:63:dc:ff:e8:
23:51:af:c9:10:3b:16:4d:3b:dc:39:c5:f0:3e:11:4c:43:42:
f2:cb:3f:8d:8f:6c:ed:21:4e:19:af:76:4b:fb:51:2e:5c:e0:
19:3c:95:f1:3b:a3:79:17:ac:76:0e:da:43:2e:52:8c:60:7f:
0d:21:f8:42:5a:3f:42:12:a7:50:87:6d:1e:15:00:d3:7b:32:
3f:4e:f4:ee:99:8b:6d:44:6a:83:39:55:d0:bb:82:ab:58:16:
a8:2d:db:11:98:d5:f6:20:ae:71:42:17:1a:98:d3:88:1f:86:
89:3d:1f:39:ca:92:a0:88:f7:5c:af:7a:97:1d:06:8d:6c:29:
a1:70:fd:00:c9:a4:ed:52:b0:7a:93:92:61:78:f2:5a:d1:7e:
c8:3f:75:11:31:34:53:df:e1:51:bf:3a:b3:b6:ba:c8:3c:35:
6d:57:ca:6b:1f:25:01:c2:0e:ec:3f:4a:e3:fe:04:71:49:1d:
32:66:d5:48:32:26:43:96:aa:30:fb:c6:9d:7c:65:05:38:2f:
c8:bf:07:74:d6:a5:e6:b3:eb:94:ce:4e:3e:3b:b2:92:4d:fb:
d4:15:95:45:e1:08:a6:50:98:c0:5a:75:49:2c:51:5b:4b:7a:
2d:d4:c7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:51:53 2026 by rpki-client