
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
File: 2BD3626FA7C4C8A787225E35241AD5992151D359.mft (raw, json)
Hash identifier: FvEQWWma1uIaHENPzKdDxx7oDetb0zIJTgR96pivtqg=
Subject key identifier: 56:AC:48:C1:BC:B8:B3:00:B2:5F:6D:76:8C:1A:A6:79:18:44:D6:4E
Authority key identifier: 2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59
Certificate issuer: /CN=2BD3626FA7C4C8A787225E35241AD5992151D359
Certificate serial: 5827DA45EF252177C06E8784F59A7796AD1BB318
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 12:37:14 +0000
Manifest this update: Tue 28 Jul 2026 12:32:14 +0000
Manifest next update: Wed 29 Jul 2026 13:17:14 +0000
Files and hashes: 1: 3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (hash: Lts+nDghqdeOjHPLJupIS91t89Hz46DHGxSYyuVdlFI=)
2: 2BD3626FA7C4C8A787225E35241AD5992151D359.crl (hash: GQwOuMKtwUyxcOJVrt/UU/YcsasiVt9JaSQN7S+S13M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl
rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:27:da:45:ef:25:21:77:c0:6e:87:84:f5:9a:77:96:ad:1b:b3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BD3626FA7C4C8A787225E35241AD5992151D359
Validity
Not Before: Jul 28 12:32:14 2026 GMT
Not After : Jul 29 13:17:14 2026 GMT
Subject: CN=56AC48C1BCB8B300B25F6D768C1AA6791844D64E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:4b:5d:3c:f6:22:a9:c9:c0:f4:a2:0b:11:
1d:58:28:f5:68:b9:16:d5:4e:ac:b5:a3:80:52:e8:
ba:b4:6b:af:0a:68:48:ff:ee:99:ff:86:eb:ac:6e:
5e:b6:f9:c6:70:59:47:da:56:3c:b5:8b:f2:94:07:
dc:b2:2c:81:8a:e2:25:2f:d6:e0:9a:cd:39:bc:03:
7f:30:ac:f9:ae:f9:98:69:46:6a:02:0a:7d:26:12:
61:b4:61:9f:15:16:ee:07:d0:9a:e1:17:a6:47:2f:
75:b5:e0:b1:8d:e3:69:1b:89:bc:bb:9f:15:38:c5:
ed:08:1e:96:ae:b6:8a:43:1b:57:fc:1c:fe:15:96:
dd:4e:20:fd:56:0d:80:3d:7a:c7:28:6c:a3:62:d1:
93:7c:4c:3d:bd:b4:28:bf:20:23:ec:fe:21:93:03:
37:b3:89:03:b1:a0:d0:27:29:dc:ac:12:44:d3:61:
9b:e3:0c:50:47:5b:45:28:03:a8:04:10:0a:88:9f:
6a:e0:57:49:47:9a:b1:30:53:0d:ba:a6:b6:b0:3c:
02:06:78:78:ca:2e:8e:f5:44:01:3f:9e:0b:27:96:
d6:a7:b7:cb:ad:65:61:0f:c4:43:09:18:b4:cc:6c:
30:18:01:13:c5:d7:4e:d4:66:66:b2:b3:9c:70:91:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AC:48:C1:BC:B8:B3:00:B2:5F:6D:76:8C:1A:A6:79:18:44:D6:4E
X509v3 Authority Key Identifier:
keyid:2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:19:49:cd:eb:2d:66:c8:11:01:b1:d5:5d:22:21:3e:e1:4b:
1a:91:3c:4a:92:fd:0c:55:35:df:d7:54:06:3b:c4:c9:8f:3f:
4a:1b:c3:f2:6a:9b:19:42:ab:f2:21:36:92:4b:e0:47:aa:62:
5c:03:cd:02:b3:12:dc:99:36:11:dc:9f:5f:4a:00:67:4c:cc:
c7:93:cf:0a:1f:b7:12:26:28:22:75:80:96:ee:69:7b:fd:a3:
6a:26:fa:c0:e0:e8:f1:4a:35:e6:21:cd:7c:f6:8d:72:55:95:
a0:97:b0:96:98:34:0f:ea:06:af:bf:24:92:20:ba:02:ae:8f:
a6:6d:17:71:df:35:9a:16:48:f4:3e:9e:64:47:ad:b4:a0:0a:
d6:04:31:6f:5e:4a:af:d5:d4:23:b1:36:de:10:0f:e3:91:c2:
71:f0:97:48:6b:ef:a6:69:42:a9:dc:b5:df:3b:a1:27:82:64:
c9:ed:cd:ad:49:23:14:26:f7:35:26:73:91:d3:4a:44:e8:67:
ad:1a:da:a4:6a:49:64:03:9a:c3:60:dd:ef:40:80:b3:41:2b:
cd:17:f6:4f:fb:39:75:24:c1:31:e6:e2:74:1b:80:1a:49:fc:
f3:0f:b6:08:fb:fa:be:eb:65:a2:53:bd:64:73:30:9c:f9:ad:
24:e7:c1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:10:24 2026 by rpki-client