
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft
File: 0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft (raw, json)
Hash identifier: 3EkJgLhHTWtY7MewmUK66BMRE4W9OPfE/ybsU06/wjY=
Subject key identifier: 7C:2C:6B:A0:02:2E:A2:93:61:D1:8F:D1:FB:DE:9C:A4:88:35:F7:41
Authority key identifier: 08:34:39:7E:0D:61:D0:AA:BF:51:7A:F8:3A:3C:2B:A1:DB:62:C2:42
Certificate issuer: /CN=0834397E0D61D0AABF517AF83A3C2BA1DB62C242
Certificate serial: 1E792801645FE8CF96473EDF05BE249449F5D9EC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 19:37:51 +0000
Manifest this update: Tue 16 Jun 2026 19:32:51 +0000
Manifest next update: Wed 17 Jun 2026 20:59:51 +0000
Files and hashes: 1: 0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl (hash: c+9/3SSdAqtuLNVbEp+ntIRRf0zoBqw4zPctM7aseZ4=)
2: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: +HdgvP+uGxgAxogBbgKZdpEZmiEj0DQvXIC1nOPvcEc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl
rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:79:28:01:64:5f:e8:cf:96:47:3e:df:05:be:24:94:49:f5:d9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0834397E0D61D0AABF517AF83A3C2BA1DB62C242
Validity
Not Before: Jun 16 19:32:51 2026 GMT
Not After : Jun 17 20:59:51 2026 GMT
Subject: CN=7C2C6BA0022EA29361D18FD1FBDE9CA48835F741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:5e:70:f4:04:0d:8e:7d:25:f6:f5:4f:05:
1f:ce:75:d0:30:8a:31:dc:57:71:ab:e9:b8:fb:d5:
59:47:06:0d:77:bd:7e:22:e7:c4:bc:39:a2:d5:93:
1d:e1:94:11:29:63:cf:85:90:60:02:fa:a2:77:ce:
11:43:1c:43:77:2b:a0:b3:79:92:b0:34:13:8f:2e:
ac:31:ad:ff:fd:44:8a:a3:80:bf:82:cd:55:19:7d:
63:50:08:1d:d1:ac:6b:23:aa:26:ae:87:13:33:e4:
6e:f8:a9:4c:fc:63:bb:47:af:9a:3e:ad:20:d5:3c:
3b:3a:0e:64:f1:39:aa:ca:b2:94:7c:3a:62:b5:34:
3a:cb:5d:92:b6:f3:fd:28:50:34:e1:5e:fe:8b:73:
b4:a4:f1:47:c6:4f:16:0c:35:31:1a:37:60:65:39:
6c:d2:e1:01:44:19:1e:c8:66:22:c1:a5:63:d2:09:
96:73:8b:e7:0b:82:e6:52:6c:7c:45:1a:49:36:0f:
6e:0e:7d:28:99:21:38:9e:0b:46:87:7b:61:46:4a:
68:d5:eb:57:0c:02:a2:c8:c8:c8:39:89:13:cc:a9:
31:f2:77:5f:6b:54:40:44:86:a3:c4:be:e7:ea:08:
ee:87:c6:5f:2a:27:b8:c6:76:00:e4:2e:c5:2b:0c:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2C:6B:A0:02:2E:A2:93:61:D1:8F:D1:FB:DE:9C:A4:88:35:F7:41
X509v3 Authority Key Identifier:
keyid:08:34:39:7E:0D:61:D0:AA:BF:51:7A:F8:3A:3C:2B:A1:DB:62:C2:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d5:c5:a1:50:04:ef:f3:b5:8d:6d:7f:ac:35:85:ab:fe:0b:
a7:ae:06:74:38:f0:f4:52:ba:7a:de:0c:ff:f2:58:52:e3:f7:
6f:f9:be:a1:53:2f:68:f8:84:1c:34:59:c1:42:07:84:4f:1d:
37:34:e2:44:94:ac:93:58:39:5d:9e:89:7e:bb:74:04:57:14:
5f:69:44:7d:49:e1:8a:0e:91:1c:e2:dc:52:6f:41:f9:5e:7e:
1e:52:7a:73:a7:3f:41:99:ae:fa:92:f8:e1:53:6c:ce:c3:40:
70:e9:da:2b:bd:e2:03:53:21:13:6d:84:bb:57:62:d2:1a:d0:
66:f9:86:5b:a5:e8:da:ec:a9:2d:5a:90:91:93:ae:d4:24:1e:
cf:f9:cf:25:5b:c1:7f:9c:57:15:57:a7:86:87:81:ee:ce:af:
16:22:1a:fc:b8:a4:68:09:d1:17:93:d9:46:7f:09:c4:71:9f:
28:90:61:3b:83:43:8e:7c:95:ac:c5:aa:01:c0:48:6c:8c:d5:
25:4d:1f:a3:ff:6b:58:1e:41:8c:ac:0c:44:55:0b:cc:07:d6:
b2:14:52:55:32:14:a5:3f:8c:73:1d:96:20:3a:cf:94:6c:a0:
64:fa:4a:e0:bb:05:c5:b7:9c:c6:23:42:c5:b7:7e:46:14:88:
cb:46:02:86
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHnkoAWRf6M+WRz7fBb4klEn12ewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzNDM5N0UwRDYxRDBBQUJGNTE3QUY4M0EzQzJCQTFE
QjYyQzI0MjAeFw0yNjA2MTYxOTMyNTFaFw0yNjA2MTcyMDU5NTFaMDMxMTAvBgNV
BAMTKDdDMkM2QkEwMDIyRUEyOTM2MUQxOEZEMUZCREU5Q0E0ODgzNUY3NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRDV5w9AQNjn0l9vVPBR/OddAw
ijHcV3Gr6bj71VlHBg13vX4i58S8OaLVkx3hlBEpY8+FkGAC+qJ3zhFDHEN3K6Cz
eZKwNBOPLqwxrf/9RIqjgL+CzVUZfWNQCB3RrGsjqiauhxMz5G74qUz8Y7tHr5o+
rSDVPDs6DmTxOarKspR8OmK1NDrLXZK28/0oUDThXv6Lc7Sk8UfGTxYMNTEaN2Bl
OWzS4QFEGR7IZiLBpWPSCZZzi+cLguZSbHxFGkk2D24OfSiZITieC0aHe2FGSmjV
61cMAqLIyMg5iRPMqTHyd19rVEBEhqPEvufqCO6Hxl8qJ7jGdgDkLsUrDHozAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfCxroAIuopNh0Y/R+96cpIg190EwHwYDVR0j
BBgwFoAUCDQ5fg1h0Kq/UXr4OjwrodtiwkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGZkZGNiNGItNmQ4ZS00NTliLThhYTItOTlhNjA4ODYyNTZhLzAvMDgzNDM5N0Uw
RDYxRDBBQUJGNTE3QUY4M0EzQzJCQTFEQjYyQzI0Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wODM0Mzk3RTBENjFEMEFBQkY1MTdBRjgzQTNDMkJBMURCNjJD
MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh
YTItOTlhNjA4ODYyNTZhLzAvMDgzNDM5N0UwRDYxRDBBQUJGNTE3QUY4M0EzQzJC
QTFEQjYyQzI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACLVxaFQBO/ztY1tf6w1hav+C6euBnQ48PRS
unreDP/yWFLj92/5vqFTL2j4hBw0WcFCB4RPHTc04kSUrJNYOV2eiX67dARXFF9p
RH1J4YoOkRzi3FJvQflefh5SenOnP0GZrvqS+OFTbM7DQHDp2iu94gNTIRNthLtX
YtIa0Gb5hlul6NrsqS1akJGTrtQkHs/5zyVbwX+cVxVXp4aHge7OrxYiGvy4pGgJ
0ReT2UZ/CcRxnyiQYTuDQ458lazFqgHASGyM1SVNH6P/a1geQYysDERVC8wH1rIU
UlUyFKU/jHMdliA6z5RsoGT6SuC7BcW3nMYjQsW3fkYUiMtGAoY=
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:18:14 2026 by rpki-client