
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft
File: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft (raw, json)
Hash identifier: +85tyq9CT6eTOHLCUeOpvHFg5ZlwtmFfdQhjPkiKit4=
Subject key identifier: E3:47:36:27:D3:88:5C:C7:94:30:3B:6B:22:4E:98:70:8B:4C:A0:48
Authority key identifier: C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4
Certificate issuer: /CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4
Certificate serial: 028875CFFAA01656284E23CA84E2E604F82585C5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft
Manifest number: BC
Signing time: Sun 20 Sep 2026 06:50:32 +0000
Manifest this update: Sun 20 Sep 2026 06:45:32 +0000
Manifest next update: Mon 21 Sep 2026 09:55:32 +0000
Files and hashes: 1: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl (hash: eTGrx7NrU8pmQL8l5aGqHoh976BVEzMXaGB6g80/Zlw=)
2: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: Ufj1irifhgIIf9Z+cJ8JRj8meHiqH+Kv6sNyd7Vy/bM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl
rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 09:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:88:75:cf:fa:a0:16:56:28:4e:23:ca:84:e2:e6:04:f8:25:85:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4
Validity
Not Before: Sep 20 06:45:32 2026 GMT
Not After : Sep 21 09:55:32 2026 GMT
Subject: CN=E3473627D3885CC794303B6B224E98708B4CA048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:e7:e0:f3:6b:3f:7a:07:e3:dc:08:04:db:
37:11:72:18:9f:1d:85:45:6f:dd:89:5b:14:78:ae:
2e:f0:ae:a6:39:ba:ed:3e:3e:33:9f:19:71:af:f2:
19:58:26:cb:65:23:f2:ba:de:fc:c0:1e:8f:04:3a:
90:c7:7e:2b:14:53:e7:b2:bd:f4:99:af:68:61:5b:
21:e3:17:a7:d3:a1:bf:29:9f:72:47:c0:2f:44:d1:
05:e9:75:89:89:57:ab:3a:c0:89:30:c3:ea:d7:c1:
ba:96:d1:03:12:25:7b:b1:59:dc:b0:f1:8d:7b:c5:
d8:9b:08:be:23:e6:92:9d:21:5f:ef:bb:70:28:9d:
e6:5a:38:41:d1:13:46:f3:c8:d4:76:a1:12:d7:ec:
a9:de:a0:89:42:f3:eb:49:98:4e:38:ab:0c:69:2e:
d6:31:24:45:d1:0a:99:74:6c:30:e9:6d:11:8a:36:
b1:ed:b4:7b:cf:f5:70:fa:c8:c5:ea:f9:2b:31:57:
20:ec:95:cd:c1:f7:8a:ae:18:da:80:26:98:a6:74:
b0:b5:48:6b:bc:0a:92:3a:8b:a6:ad:1d:69:22:43:
7a:21:04:35:fc:e9:e6:96:67:fc:3e:50:ef:91:a9:
c6:21:1a:13:f2:40:f6:fd:9b:d6:d1:00:9c:fc:03:
82:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:47:36:27:D3:88:5C:C7:94:30:3B:6B:22:4E:98:70:8B:4C:A0:48
X509v3 Authority Key Identifier:
keyid:C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:39:d2:67:43:4a:f5:ba:e1:1a:f0:3b:04:0b:18:ed:e7:8e:
29:a5:94:42:c7:51:2f:58:ff:59:7a:bf:f0:e6:ad:2b:9f:c3:
ae:62:58:3b:03:03:b9:e5:2d:70:2c:84:aa:dc:2a:45:bf:12:
46:e0:4d:28:d5:39:72:55:ab:14:1d:7b:ab:b7:ac:78:05:fa:
68:d6:e2:9c:19:82:12:0c:99:c6:62:52:c1:0f:ef:39:9e:c0:
f1:77:c5:bc:e9:7f:49:fc:52:1b:33:46:b8:9d:f4:0f:dc:f6:
3d:bd:40:c0:25:1e:6b:5f:1b:ac:cd:fc:2b:45:16:c8:38:e4:
fd:7d:8d:8c:8c:d4:72:48:b6:b5:7f:15:e5:b7:8f:84:c1:7a:
dc:4c:2e:67:d7:e4:32:61:e4:3c:10:4c:95:c8:0c:4d:08:34:
16:d8:19:cd:dd:26:0d:ed:ab:40:ef:55:5f:9c:01:12:9c:ea:
46:9d:6e:9a:09:fc:0f:91:0c:ae:a9:04:df:69:7c:67:d6:6f:
2e:48:5b:82:89:7d:6c:b5:da:5e:ca:f4:58:79:57:64:7a:29:
5b:34:ce:dc:b0:81:ef:5b:db:cb:dc:e1:fa:dc:af:35:59:70:
c6:1e:9c:04:4d:a9:ea:76:ed:24:ad:53:41:e1:49:b5:5d:8d:
cf:f3:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:39:12 2026 by rpki-client