
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft
File: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft (raw, json)
Hash identifier: 17Ys51xEz8Wcst0ocw5/jLDwpFwbrFcpEYMI37tbfcc=
Subject key identifier: 1F:76:FE:5D:4D:8C:71:B5:CB:48:2A:88:A3:4E:44:EE:86:9A:BC:AE
Authority key identifier: 26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0
Certificate issuer: /CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0
Certificate serial: 02D6266EBE6B59F71528DC7958469B6F7D676A4D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 22:31:27 +0000
Manifest this update: Tue 16 Jun 2026 22:26:27 +0000
Manifest next update: Thu 18 Jun 2026 02:16:27 +0000
Files and hashes: 1: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: OOL38iHSy0/NkkysB63GXJ99F6I1QYegNu69it5kV/Y=)
2: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl (hash: xPk63LtN6H8BLFGdRxH+hzlTCBFQ9ieYcLpmZvSNCX4=)
3: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: ZyYg2y6us1LQrG7diwKFALUA9hvUN3acAbNTmnkm8fU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl
rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d6:26:6e:be:6b:59:f7:15:28:dc:79:58:46:9b:6f:7d:67:6a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0
Validity
Not Before: Jun 16 22:26:27 2026 GMT
Not After : Jun 18 02:16:27 2026 GMT
Subject: CN=1F76FE5D4D8C71B5CB482A88A34E44EE869ABCAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:2b:59:61:ac:40:f3:54:d2:46:fa:bd:8c:
be:c3:21:b0:df:fb:40:8e:8f:8d:ae:03:0a:77:46:
5e:09:c6:69:b2:ab:39:6a:16:4e:09:27:56:4a:61:
f1:f6:6e:46:64:1e:fc:d3:25:1f:8a:c9:19:35:5d:
06:a2:55:97:a3:81:cf:16:72:45:60:cb:81:34:44:
66:06:1a:74:9e:24:4c:bc:c8:01:f2:9b:81:57:b9:
ab:01:58:cd:f9:fd:67:1b:02:fc:a6:39:e0:14:4d:
58:51:8d:00:d5:33:12:d1:9a:3b:36:db:d6:df:b2:
b0:e6:e1:29:9c:8c:a8:52:8a:aa:79:f8:a4:5a:94:
df:06:6f:68:24:92:9b:51:6e:82:f3:4b:fa:2c:66:
66:79:c7:62:24:c4:dd:63:ba:d9:d5:dd:28:0d:0f:
49:3f:1e:f8:2d:29:3b:78:55:e4:97:bc:39:0b:86:
d5:fb:2b:0e:f2:f0:8c:5c:32:9e:b8:6d:65:48:f3:
91:b6:f2:1c:88:80:6b:27:fb:f9:c4:19:27:3a:b7:
93:5d:16:72:e3:67:83:35:b1:fc:79:58:5d:14:da:
b1:47:2f:1d:80:2d:82:ea:a3:41:a0:77:5f:f7:f6:
97:a0:d7:fa:c0:ff:93:23:1f:49:3c:2b:9e:31:58:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:76:FE:5D:4D:8C:71:B5:CB:48:2A:88:A3:4E:44:EE:86:9A:BC:AE
X509v3 Authority Key Identifier:
keyid:26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:81:dd:f3:dd:3d:62:f6:63:8d:38:e4:53:33:4d:a7:7b:8f:
e0:ac:36:6e:6c:de:6c:c7:85:43:8d:65:e5:85:17:b0:44:bc:
51:af:63:61:0c:2c:fb:13:19:06:d5:f9:7a:54:5a:c9:ef:90:
8a:a0:43:70:6c:3a:b7:31:ad:81:7b:fb:eb:62:5a:32:a6:43:
ea:05:04:5b:f5:3c:3e:02:84:21:8f:08:2d:3b:f2:86:98:f4:
4a:3c:1d:a1:e4:9d:25:94:20:64:e5:bb:8b:c8:28:af:31:37:
3b:7d:06:0c:1d:c6:f0:3a:16:f5:18:ff:a2:3a:cd:ab:09:25:
2b:db:c6:eb:15:4c:c1:02:2a:24:16:42:f3:53:21:c8:49:75:
a4:0f:33:1c:81:97:40:dc:f5:57:50:2b:00:02:52:d1:ea:52:
f1:00:a8:b2:e1:42:99:51:bd:83:c4:cc:95:93:56:81:c9:b1:
aa:34:1c:01:03:95:07:cc:c9:dc:0c:a5:41:ce:75:5d:7f:41:
29:32:7b:d0:7e:67:44:92:a2:02:6a:5d:d2:a3:ee:6a:0a:22:
6f:54:5c:1d:2d:f1:92:b8:29:a0:d4:80:95:e0:4b:fb:3b:ea:
3f:e7:ac:15:29:1e:b0:86:73:0c:12:67:7d:99:23:aa:28:b6:
de:c5:65:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:32 2026 by rpki-client