
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
File: 2677581645A49D82B36AA830484865F4B9D0FC43.mft (raw, json)
Hash identifier: VfFX4IyLdH/zt6g+r0j/Jc3GxHAHlIPvOtGPNz4GWXw=
Subject key identifier: A1:86:20:51:1E:00:5C:50:B4:86:D8:6F:6B:7A:C8:5A:64:3F:DA:68
Authority key identifier: 26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43
Certificate issuer: /CN=2677581645A49D82B36AA830484865F4B9D0FC43
Certificate serial: 4F62A66E0AAEAF6ABE8B0FC2E59F978EC9CD2F23
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:22:08 +0000
Manifest this update: Tue 12 May 2026 20:17:08 +0000
Manifest next update: Wed 13 May 2026 20:55:08 +0000
Files and hashes: 1: 2677581645A49D82B36AA830484865F4B9D0FC43.crl (hash: niIFA+d9ljBuALBx7LStMBMEBVJzbVJ1MpTF6JF1X4U=)
2: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zMOWhJqH1J6fUN/OnJAxp19ayumIrg3uRIfyARwlsqI=)
3: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: 5qL4Akm0PbHI3eo3BSoRkovQkTSvAIBUTKI6uUAYPHA=)
4: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: ePHUQHjUtQqmubSQINVLXHx5bVCNeo3QJkNOBue6jYg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl
rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:62:a6:6e:0a:ae:af:6a:be:8b:0f:c2:e5:9f:97:8e:c9:cd:2f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2677581645A49D82B36AA830484865F4B9D0FC43
Validity
Not Before: May 12 20:17:08 2026 GMT
Not After : May 13 20:55:08 2026 GMT
Subject: CN=A18620511E005C50B486D86F6B7AC85A643FDA68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:ee:05:b4:0c:18:e9:02:32:f0:ef:4d:f1:
6a:ec:c4:af:ca:f5:08:7c:b3:d0:59:85:80:e6:b9:
54:37:d6:f6:c2:55:94:5f:48:58:9b:ac:3c:6d:82:
b5:34:7f:31:eb:7a:64:e8:88:fc:a0:ad:77:74:84:
75:84:09:d4:4f:78:1d:8f:52:9a:a5:e9:fe:d4:43:
12:34:f5:45:4e:43:f5:49:71:69:d4:db:08:8d:e4:
6c:b0:54:44:60:f8:99:5a:d7:25:04:bc:f4:dd:0f:
75:4d:e2:5d:9d:a0:15:49:d1:1c:f3:ec:24:41:22:
68:ce:3d:73:13:7d:a4:7f:15:ad:2a:23:15:55:cd:
df:db:b0:b3:cb:f9:57:8b:f9:96:ae:98:03:23:d0:
c6:eb:e2:64:5a:0d:d0:f5:11:0c:c3:5f:bb:06:a7:
bf:1c:c0:82:42:be:82:82:05:8e:27:69:84:64:9d:
68:98:2f:2e:2c:2b:f7:c5:d6:16:72:65:ef:8b:82:
9f:ef:62:64:5f:07:48:3c:28:da:5a:5c:9f:9f:0d:
8a:e9:65:62:76:f2:5e:c6:f6:73:3a:75:e2:81:1d:
f5:02:d9:b3:e0:9f:29:d0:c8:04:af:c6:77:f6:a4:
07:c3:72:69:d7:2f:c8:9c:ca:db:9c:01:08:7b:89:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:86:20:51:1E:00:5C:50:B4:86:D8:6F:6B:7A:C8:5A:64:3F:DA:68
X509v3 Authority Key Identifier:
keyid:26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:31:c5:21:bd:c6:75:a0:dd:2b:fd:b4:6f:39:ca:67:eb:d8:
2d:f5:ee:64:c7:94:a0:71:25:78:92:2d:9b:4f:ad:bd:cf:cd:
ac:d8:09:d5:85:91:ad:0c:23:79:f4:c6:91:7c:ea:b5:5a:fc:
ad:17:a0:9d:30:d9:ac:ee:6f:a9:fd:5f:92:de:21:ae:7e:82:
b5:f8:f4:35:df:d3:88:c1:e9:88:9d:7c:0e:e4:d5:88:a1:95:
aa:60:46:ef:10:1c:b2:06:be:0d:60:1f:ff:bf:76:54:62:6e:
91:38:a1:ac:a2:52:17:9a:67:c7:6b:72:7f:ec:98:2e:e3:2c:
00:69:f5:b5:2a:55:9a:85:e2:16:d2:98:02:5d:b8:ce:e3:76:
fe:2c:45:24:2b:2d:87:22:45:33:2c:e6:e9:66:60:b3:b3:cb:
80:83:5e:2f:40:67:5c:5e:79:1d:bc:6b:b4:db:73:ee:61:25:
97:85:50:64:56:52:b3:0d:09:61:a5:01:57:6f:4e:23:0e:f2:
28:e5:ec:ae:bb:b9:1e:e5:65:f8:fa:b8:f1:f4:ee:92:ef:a6:
ac:03:4d:ff:a1:2d:68:4b:15:6a:4f:26:51:70:40:ab:5e:89:
16:51:44:74:a6:63:38:e5:5f:e9:01:d4:f8:f7:33:72:ad:3d:
b1:c3:ee:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:30 2026 by rpki-client