
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft
File: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft (raw, json)
Hash identifier: o+AECI1e9uveLWnGSvt/sj5U7D5Ua++KNhy0/W9d9xc=
Subject key identifier: 66:88:CF:15:74:2A:E7:90:46:30:2E:76:D9:3D:2D:80:1A:71:14:F7
Authority key identifier: 05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF
Certificate issuer: /CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF
Certificate serial: 2728215E0C9889B509A538B438C80D21696438C1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 02:59:26 +0000
Manifest this update: Thu 24 Sep 2026 02:54:26 +0000
Manifest next update: Fri 25 Sep 2026 06:41:26 +0000
Files and hashes: 1: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl (hash: wE96Eyps26EgZq4Wy+Leuk12hdijiZJACeOKZo1qRU8=)
2: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: DKOQH9+FY5KWIJZ/d+jpR5uVEMysXkF+IGiRwUECgAs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl
rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:28:21:5e:0c:98:89:b5:09:a5:38:b4:38:c8:0d:21:69:64:38:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF
Validity
Not Before: Sep 24 02:54:26 2026 GMT
Not After : Sep 25 06:41:26 2026 GMT
Subject: CN=6688CF15742AE79046302E76D93D2D801A7114F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:20:2e:93:ee:ea:fa:26:6d:5c:25:1a:f0:
48:c9:54:b8:3a:c6:0a:32:d1:b5:59:0b:a9:82:a8:
08:79:56:5c:93:a6:da:bd:36:94:40:02:bc:26:9e:
8f:5c:bd:7f:93:f9:cb:f3:06:3f:d7:b1:0d:93:db:
1d:e8:a5:d9:ee:ae:66:84:75:e5:4d:4a:0f:30:a1:
99:94:c2:a3:f2:08:7f:e1:6c:08:7a:3d:63:b0:51:
d5:22:dc:07:b1:28:30:ad:0d:c7:ad:7f:aa:da:5a:
19:e1:c3:f6:71:04:73:92:d7:a7:df:c8:96:dc:d5:
80:b3:f4:07:6c:12:9f:0e:4f:69:aa:8c:e2:be:ff:
0d:77:4b:fc:e6:51:f9:19:05:c3:ee:ef:65:94:ba:
12:a4:3a:3e:f3:8e:6f:aa:9c:5e:5c:05:ae:f6:4a:
1a:68:66:78:50:37:15:80:be:a4:bc:a2:56:cd:b3:
7e:5d:c4:2f:a1:b6:08:95:1c:b1:cd:27:63:c3:54:
4a:40:b3:07:f0:17:4f:9e:c8:17:06:42:aa:f5:d9:
97:6c:56:f8:73:fb:dc:c1:7d:d4:e2:4e:dd:f7:22:
8d:25:bd:be:28:69:18:19:5b:8e:ec:a1:73:fc:66:
e5:44:2b:6d:3a:c2:67:15:04:ac:49:83:74:99:88:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:88:CF:15:74:2A:E7:90:46:30:2E:76:D9:3D:2D:80:1A:71:14:F7
X509v3 Authority Key Identifier:
keyid:05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:64:f7:57:06:51:7c:ca:a5:e0:db:d0:66:a6:9d:cc:cc:a5:
16:6f:52:ea:65:b7:de:1a:22:49:4b:35:e3:44:63:dc:1a:a1:
09:b8:fd:9f:7e:db:2b:77:db:e0:46:b2:36:bd:7f:1c:0a:a9:
a4:d8:b7:24:88:d3:4c:4e:84:04:04:27:fc:df:c4:7a:a6:10:
3d:76:fb:7e:6c:82:5e:38:8b:8f:60:71:78:0f:4f:b5:94:88:
55:4b:2c:3e:34:30:9e:ac:40:44:12:0f:57:1b:fe:10:94:11:
90:47:30:f8:8b:96:0b:ab:90:db:d8:f7:8f:16:68:c1:e3:1b:
12:4c:14:09:63:20:de:81:d5:41:0b:2c:be:9a:01:7c:95:bf:
e5:35:1c:65:c9:19:a5:54:f2:5d:d5:d7:b3:e2:2d:e2:04:14:
24:fc:57:3f:75:60:e8:4a:64:68:1a:8c:c4:61:3d:ac:ab:d7:
ec:f7:f7:ea:7a:ed:cd:17:b2:94:3e:25:9f:ef:38:5c:bb:2f:
37:13:54:95:4c:99:91:af:85:fb:f0:9a:8f:89:73:ac:70:da:
14:63:b5:38:a4:29:66:4f:e7:1d:b3:7c:4d:68:97:71:2a:e8:
13:7a:44:37:ab:1b:15:60:30:a8:9f:bd:07:da:28:e4:33:05:
c8:ae:ca:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:56:45 2026 by rpki-client