
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
File: 2BD3626FA7C4C8A787225E35241AD5992151D359.mft (raw, json)
Hash identifier: VjkPO/INEbew42pv4ykRpCOet+CA2nopFHvNLzefP3Q=
Subject key identifier: 1D:5C:20:69:5E:D1:2B:D3:83:06:15:E5:A3:91:A7:90:E1:7C:BD:E5
Authority key identifier: 2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59
Certificate issuer: /CN=2BD3626FA7C4C8A787225E35241AD5992151D359
Certificate serial: 5F5C65FFA04FF9A167EC96BB34C2D6C3246214A6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 02:57:38 +0000
Manifest this update: Sat 13 Jun 2026 02:52:38 +0000
Manifest next update: Sun 14 Jun 2026 05:14:38 +0000
Files and hashes: 1: 2BD3626FA7C4C8A787225E35241AD5992151D359.crl (hash: MC8Y/W4H22ZZhtX3wnoHYYCj6Ueq1XaUuALSLR9CLRs=)
2: 3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (hash: Lts+nDghqdeOjHPLJupIS91t89Hz46DHGxSYyuVdlFI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl
rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 05:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:5c:65:ff:a0:4f:f9:a1:67:ec:96:bb:34:c2:d6:c3:24:62:14:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BD3626FA7C4C8A787225E35241AD5992151D359
Validity
Not Before: Jun 13 02:52:38 2026 GMT
Not After : Jun 14 05:14:38 2026 GMT
Subject: CN=1D5C20695ED12BD3830615E5A391A790E17CBDE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:77:bc:03:89:03:3f:67:bf:e9:54:9d:3b:
a2:9d:76:fc:7b:dc:af:74:08:d0:cb:c2:8d:36:05:
54:35:b4:23:84:eb:b1:3c:9f:3f:a9:22:85:e1:37:
c4:01:8d:db:3b:d5:39:11:28:13:6e:7b:01:af:f6:
42:59:c0:3f:c6:cd:3b:98:10:1b:94:b2:03:ce:22:
82:4b:3c:cb:b3:89:c3:86:c9:e2:33:e8:ce:e5:ca:
e7:23:d3:76:d2:ed:49:85:ba:4c:2b:6a:a0:bb:3f:
26:97:2a:96:8e:2a:b7:51:4d:e0:7b:e7:58:d6:1e:
71:d0:39:4a:95:11:b1:ed:c5:ad:7d:06:89:bf:ea:
e6:56:db:40:97:9e:4f:cc:97:fc:3b:f2:a6:88:d7:
14:49:03:31:35:fb:95:27:98:65:65:c5:87:c0:42:
69:57:8d:b1:16:04:49:62:6d:03:ce:02:3c:39:62:
45:08:74:ee:6a:b1:47:7e:45:dc:2f:b4:b1:ed:1a:
db:00:83:7e:8e:c6:7a:11:be:26:4b:59:f1:7f:af:
dc:44:8d:00:97:b1:ec:c8:6b:73:89:96:b3:57:89:
a8:74:2e:b2:e3:1a:45:17:fd:91:54:58:9c:f6:28:
43:86:8b:26:f2:ea:f9:f7:15:af:da:b8:66:c2:c1:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5C:20:69:5E:D1:2B:D3:83:06:15:E5:A3:91:A7:90:E1:7C:BD:E5
X509v3 Authority Key Identifier:
keyid:2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2b:ae:f0:ee:47:60:8b:2f:12:88:5d:1c:f1:32:96:ba:72:
3f:dc:13:d9:ae:5b:c5:40:fb:c6:c0:8a:16:2a:cf:3d:3f:28:
3a:64:bf:18:bb:cd:a9:12:29:41:b6:22:ae:de:ef:a1:23:05:
8d:e4:76:3e:46:dd:73:e3:e4:ee:20:93:de:47:73:6b:9f:8f:
29:96:0d:bf:ad:64:20:38:e6:ab:e6:38:7a:23:ac:61:fd:94:
ff:a1:80:f0:2b:84:bf:14:8e:ad:b4:77:e9:88:f2:16:98:ba:
c9:33:de:8b:c3:5f:b2:3c:a8:bb:4e:bc:b6:44:d4:36:c4:ba:
c2:0b:86:5b:8d:8a:63:b2:8e:6a:c3:13:1a:cd:84:5e:0f:a9:
a3:5b:dd:c5:4e:54:d9:79:49:a0:52:0f:b6:93:6a:7c:e3:b5:
cc:fc:b4:d6:12:a6:80:3d:60:15:0a:41:a4:2e:7e:b6:d9:4d:
80:37:6b:3f:35:6e:5f:0a:a9:05:e7:88:2f:b9:17:0a:76:f5:
91:f7:c8:90:08:a7:e1:8b:6d:b1:68:88:0d:d3:6c:c8:3a:a6:
26:4c:f0:75:78:e0:d7:3e:1b:a2:c8:60:08:a6:ff:c0:e6:19:
f2:76:73:d8:2b:cd:a3:2a:3d:bb:11:2d:5d:73:3f:aa:4d:c6:
d1:f5:47:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:51:38 2026 by rpki-client