
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
File: C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft (raw, json)
Hash identifier: FDd22ZTfkOGA4eaklbDla+5Wphd1lb7KjDcTUpmUcaE=
Subject key identifier: 9A:8A:04:1C:9C:86:49:85:E5:02:7E:28:67:23:B0:DB:0E:AC:82:8C
Authority key identifier: C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B
Certificate issuer: /CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B
Certificate serial: 4B3F1117BD8FF479BD62C2BF645E97CF8EA7F3A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 15:30:46 +0000
Manifest this update: Tue 28 Jul 2026 15:25:46 +0000
Manifest next update: Wed 29 Jul 2026 15:35:46 +0000
Files and hashes: 1: C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl (hash: v3/VTZ01kc2Un8X11rHt1ouYwgrgX69LBsI3sbbiKmw=)
2: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: xWKM6w+YSqs8CfkUMCmv6mPauJooeyQJc7wELxHZfDg=)
3: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: wsXzxXCk1I7Qrxi94/hj3J6ZauZ6tEjgsgeblQtUnRE=)
4: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: Xv3thArRVC/1LFshdjbWa2Y+Md6/zXlchWEGOIatNuo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl
rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3f:11:17:bd:8f:f4:79:bd:62:c2:bf:64:5e:97:cf:8e:a7:f3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B
Validity
Not Before: Jul 28 15:25:46 2026 GMT
Not After : Jul 29 15:35:46 2026 GMT
Subject: CN=9A8A041C9C864985E5027E286723B0DB0EAC828C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:68:5d:cf:e5:3a:c2:57:4d:79:56:e5:41:
f5:86:10:11:cb:26:23:b2:33:03:d3:83:99:7a:51:
2c:e4:bb:47:f7:33:9f:46:91:b0:58:9e:e6:e0:0f:
5f:0b:c5:89:5d:f5:a8:f6:c7:65:0a:a0:5e:ac:36:
61:d9:bb:2b:e7:67:80:2f:13:95:b4:09:cf:6b:b6:
6f:9e:d9:10:d0:13:68:2e:43:1a:4b:1e:93:70:90:
fa:88:60:fa:d8:eb:5e:b4:ad:05:58:cb:2c:89:02:
2f:32:34:4a:ff:2b:11:09:7e:6c:3b:52:96:7c:9d:
43:70:9d:24:06:3f:5b:86:1c:3b:f3:a1:cf:94:fa:
4e:0b:85:9e:82:ee:94:91:c5:77:8d:f9:87:a2:a2:
9c:d5:76:cc:f8:37:0b:b6:04:13:7d:ee:e3:2d:95:
8e:95:55:34:44:8e:ae:17:dc:11:88:9d:fc:37:10:
8f:31:50:61:8b:6e:c1:84:ea:13:e1:9b:45:23:aa:
4e:d5:22:ae:96:b7:cc:62:30:8a:4e:2e:ee:44:c5:
27:b5:da:e8:27:b3:62:2a:44:ab:7f:ba:02:a7:fc:
c1:d6:77:0a:15:14:90:55:6e:49:f1:e8:14:c6:cf:
a6:c1:b8:c8:49:77:24:85:7d:fd:0b:9b:13:ea:07:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8A:04:1C:9C:86:49:85:E5:02:7E:28:67:23:B0:DB:0E:AC:82:8C
X509v3 Authority Key Identifier:
keyid:C1:DC:78:2A:98:D3:C6:27:17:02:25:6C:CC:BD:AC:64:F6:EE:AB:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/C1DC782A98D3C6271702256CCCBDAC64F6EEAB8B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0b:5a:ae:14:49:ac:c1:4c:09:00:fa:d1:c9:d5:53:ab:4c:
04:05:fb:05:ba:c4:03:99:c5:38:78:18:40:d7:17:5d:22:1b:
2f:44:34:92:84:cb:55:6e:5c:6d:41:be:23:3e:1d:bd:3b:2b:
07:94:3e:b6:c6:62:37:0d:a8:49:8e:ae:8e:0f:50:ea:8c:26:
8c:06:f6:04:d2:44:b9:4e:88:4c:be:43:9e:42:e4:94:4a:95:
47:41:b3:b6:db:38:bf:e0:08:9f:60:a2:4e:d8:32:4b:20:f2:
4a:5f:cb:ef:93:b2:31:52:e8:f9:cc:32:46:cd:40:a0:ee:f7:
50:19:60:ca:07:54:14:6f:21:8c:13:3b:5f:5f:19:69:30:7d:
de:ed:8b:e7:23:9b:11:c8:5b:b3:04:5d:b1:25:ba:4b:25:b4:
87:90:63:19:87:ab:fd:71:d2:89:c4:06:0a:f8:a3:92:22:4d:
e7:51:7a:db:38:67:0c:87:22:6a:a5:98:d1:5a:5c:89:9f:a5:
3a:a1:23:f3:df:2e:b2:23:1e:0f:7b:2c:2c:24:0d:42:b9:d9:
5e:7c:ac:f5:a7:29:7c:ad:7b:99:90:2c:b1:c7:29:f0:3b:30:
83:8b:4b:ff:0e:43:56:ef:9b:88:28:e9:84:80:4b:2e:dc:7c:
4e:1d:1f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:27 2026 by rpki-client