
$ rpki-client -vvf rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft
File: C73043EA966F0F810C22E736459E7122F2FD0AE0.mft (raw, json)
Hash identifier: 1Y/nx5pb2LLVzWv1uRepNxjmalXfzF3Di36FCFrgxxU=
Subject key identifier: 35:C8:61:51:AE:A6:05:CC:A6:99:A1:40:E0:AE:32:C1:37:C8:2D:39
Authority key identifier: C7:30:43:EA:96:6F:0F:81:0C:22:E7:36:45:9E:71:22:F2:FD:0A:E0
Certificate issuer: /CN=C73043EA966F0F810C22E736459E7122F2FD0AE0
Certificate serial: 101E1A7701F16C718EECB11B1193F8DC542F30D2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 09:40:59 +0000
Manifest this update: Tue 12 May 2026 09:35:59 +0000
Manifest next update: Wed 13 May 2026 12:21:59 +0000
Files and hashes: 1: C73043EA966F0F810C22E736459E7122F2FD0AE0.crl (hash: jHH+YvBb6BKpxn3sJnhBBcb8h+20eHTydOfpdbVnQXE=)
2: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: Amg7n/J1kB55PVPfhSf4dolGpwcgp004+ynKN8Iqa0A=)
3: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: MV2xIGxIBgdx5AyOkaAkD+fjhmUbspGn/aDtyM22cf4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.crl
rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1e:1a:77:01:f1:6c:71:8e:ec:b1:1b:11:93:f8:dc:54:2f:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C73043EA966F0F810C22E736459E7122F2FD0AE0
Validity
Not Before: May 12 09:35:59 2026 GMT
Not After : May 13 12:21:59 2026 GMT
Subject: CN=35C86151AEA605CCA699A140E0AE32C137C82D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:93:d6:f3:1b:4d:56:0a:9e:32:4d:d8:c9:
40:7c:af:b2:41:16:e1:ec:85:de:5c:be:47:90:12:
8f:dc:a9:c5:69:3f:91:6c:17:c3:83:fe:f5:1a:cf:
0a:08:19:be:db:7c:0a:9d:1f:20:62:39:c4:65:87:
47:34:bc:09:96:db:89:18:a1:3b:e1:d2:c1:fb:ed:
34:17:d8:ce:cb:a2:03:41:7b:58:35:a8:87:0c:6d:
06:d1:d3:dd:77:0c:e5:3f:e6:a7:a1:df:86:03:0f:
24:ad:c2:b9:41:02:54:50:2d:e8:dc:45:ad:b8:12:
9f:e4:30:cf:5d:4e:c0:a3:9d:50:10:a5:d3:d2:96:
13:20:cf:a6:8f:f3:31:86:9a:d9:9d:ca:ab:8d:f8:
13:f5:99:3d:4d:d5:91:a6:3a:2a:53:45:fc:58:59:
c6:44:e3:a0:13:ca:0c:d7:b8:4d:43:47:c4:87:1f:
21:90:69:3e:77:62:fe:91:18:ef:ce:66:6c:13:00:
a0:66:7d:89:e0:5b:b2:7c:0b:4d:e1:96:6f:e6:bd:
c8:5a:ac:d0:90:e6:d0:ea:56:4e:70:89:75:4c:bb:
52:18:49:b5:dc:02:9e:53:ab:f5:2f:a5:f2:f1:bf:
a1:d4:88:d2:4e:5a:b2:61:f8:63:68:b6:dc:e4:db:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:61:51:AE:A6:05:CC:A6:99:A1:40:E0:AE:32:C1:37:C8:2D:39
X509v3 Authority Key Identifier:
keyid:C7:30:43:EA:96:6F:0F:81:0C:22:E7:36:45:9E:71:22:F2:FD:0A:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:60:75:0c:a8:9d:e8:28:03:11:a0:f6:c4:2f:cf:2a:1c:33:
31:8c:8d:3c:22:0d:1c:2c:c1:03:7d:ae:cc:6c:2f:a0:e2:ce:
d4:66:80:7e:02:18:d6:a7:fb:bf:50:92:06:9b:11:76:a4:c8:
6e:0b:52:f9:cd:1a:c2:0e:35:84:45:a3:4b:53:b6:d2:5e:84:
e1:37:7d:3b:80:41:ca:ec:99:ad:b4:ca:3c:4e:86:6f:2d:0a:
71:a7:e1:e9:bc:c2:ab:ca:ce:3b:bf:d6:fe:9d:b8:bc:9f:da:
eb:ff:18:a8:7d:7c:5d:97:85:ce:af:b0:e6:86:d3:1d:f8:d2:
da:2c:fe:47:b0:40:f7:3d:96:7f:cc:22:f9:be:4f:f0:94:8a:
b0:7a:f4:e5:a7:a5:17:4d:b7:93:6f:da:b4:38:b1:a8:c8:17:
cf:73:c0:65:56:48:fe:65:ee:4f:75:90:4a:64:4d:df:b2:cd:
53:e3:34:64:69:e6:16:dd:2c:79:57:e5:db:cb:ad:ab:bb:be:
81:94:b8:f5:d4:ef:03:04:d2:c8:62:4c:5b:79:b6:40:8b:23:
48:fa:46:6e:01:f8:36:bb:20:c5:dc:3c:fe:da:1d:af:88:08:
a6:ed:9b:19:30:b5:22:ed:46:fc:27:d5:52:4b:a7:5f:bd:d7:
d7:bf:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:23 2026 by rpki-client