
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
File: ADF61245661464C6C8800AFF335206958F2DA807.mft (raw, json)
Hash identifier: LFpFeh9MJDXl/NmvzQbIryvplG336/1fSaE+DzMVSmE=
Subject key identifier: 09:AD:B9:EA:D2:CB:76:A1:3D:22:11:2A:5D:E8:7D:C3:EC:AF:8E:39
Authority key identifier: AD:F6:12:45:66:14:64:C6:C8:80:0A:FF:33:52:06:95:8F:2D:A8:07
Certificate issuer: /CN=ADF61245661464C6C8800AFF335206958F2DA807
Certificate serial: 38A36762CA2BF670073EA4E577A92C9977332178
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF61245661464C6C8800AFF335206958F2DA807.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 18:33:58 +0000
Manifest this update: Wed 23 Sep 2026 18:28:58 +0000
Manifest next update: Thu 24 Sep 2026 20:11:58 +0000
Files and hashes: 1: ADF61245661464C6C8800AFF335206958F2DA807.crl (hash: PsKl3+NZ1lAg3Ls9G/ylZQGheXGDmKmjOHAtkTMj9yE=)
2: 3130332e38392e3234332e302f32342d3234203d3e20313530393133.roa (hash: mnmK9VjAzZX2nXMP/Hz0WV6eU5IRZ0uI7bQgiKIuUvQ=)
3: 3130332e38392e3234322e302f32342d3234203d3e20313530393133.roa (hash: owSfTkypHLSK5DikAhWXjes3F0fNiVqc3tZbIOFlw4s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.crl
rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF61245661464C6C8800AFF335206958F2DA807.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 20:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a3:67:62:ca:2b:f6:70:07:3e:a4:e5:77:a9:2c:99:77:33:21:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADF61245661464C6C8800AFF335206958F2DA807
Validity
Not Before: Sep 23 18:28:58 2026 GMT
Not After : Sep 24 20:11:58 2026 GMT
Subject: CN=09ADB9EAD2CB76A13D22112A5DE87DC3ECAF8E39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:0a:30:be:b9:ea:48:18:e0:23:49:63:18:
d1:70:bf:d7:e7:e1:f4:a5:e1:14:a9:48:7a:3e:ca:
c1:a6:f3:85:a5:a9:f9:76:1f:24:98:37:85:90:f2:
80:bb:26:c6:ef:8c:c8:31:51:ee:d5:08:46:9b:70:
ff:26:ea:81:94:f1:21:87:ec:e4:b8:d6:78:49:02:
89:77:0f:43:a1:56:c3:c8:ee:a7:8a:21:af:02:36:
e3:4b:f1:90:c2:1d:db:90:07:94:08:38:4a:41:e0:
26:4d:a4:4d:a1:90:61:d5:6e:dd:f8:e1:10:c7:d3:
82:19:74:c5:44:b1:13:2b:eb:cb:3a:e5:88:14:f7:
65:7d:43:44:f8:38:f3:ed:d7:d9:f3:18:d3:a1:62:
1d:21:91:cc:b2:d7:3c:4e:cf:ef:95:d6:16:7e:e8:
bc:c5:46:98:54:04:9f:ab:bd:9b:c9:36:68:15:42:
a2:ae:2f:f1:17:13:0b:db:16:34:33:c5:4a:27:c5:
0e:58:d9:93:6d:f4:5d:b7:03:ea:b4:7d:e8:e2:2a:
b8:b9:b6:cf:1e:ee:e6:e3:e4:fc:a4:83:9f:15:1d:
e7:37:c9:9b:b5:78:ab:9b:58:00:10:61:76:4f:fc:
13:1a:30:21:36:7c:45:4f:45:9f:90:1b:8b:ac:d8:
8f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AD:B9:EA:D2:CB:76:A1:3D:22:11:2A:5D:E8:7D:C3:EC:AF:8E:39
X509v3 Authority Key Identifier:
keyid:AD:F6:12:45:66:14:64:C6:C8:80:0A:FF:33:52:06:95:8F:2D:A8:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF61245661464C6C8800AFF335206958F2DA807.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a6:e5:98:1e:46:2d:e0:f2:c7:00:00:5b:16:95:77:87:07:
47:d6:89:ac:46:ea:cb:6d:f0:bd:f8:e1:10:cf:94:7c:74:b4:
58:92:d5:7c:63:27:39:c0:3a:81:48:0f:fa:7b:54:56:26:67:
b1:f1:7c:5e:9e:ec:3d:e0:61:9e:20:6e:58:7b:1d:a8:f4:d0:
c9:29:ce:db:b1:16:85:10:6b:aa:f3:d7:98:6f:b6:d8:76:4a:
fc:ca:55:8d:0e:99:1e:59:6d:c5:8f:45:ce:7b:5a:de:57:76:
5c:c5:38:e7:93:52:61:ad:32:7e:d3:03:d9:cc:1e:d8:dc:8e:
07:51:96:2d:db:74:22:a0:a6:b5:2b:77:6f:54:a5:60:d9:ef:
f9:61:ca:cd:8a:c0:3b:b2:bb:0a:c5:24:1b:c8:6c:17:59:17:
77:aa:71:25:a8:97:f2:ae:aa:65:78:7c:7e:ad:d1:3b:67:cd:
a3:18:22:44:58:67:6b:f6:d4:16:5e:2c:62:ea:32:cc:0d:38:
fd:8c:56:25:97:29:e2:db:4e:5c:48:fd:32:d5:19:02:65:23:
3b:22:9f:48:d1:47:88:e7:53:d9:b3:26:86:74:c8:db:87:ce:
b3:8f:5a:94:a9:62:98:10:e6:b9:62:cf:86:2b:24:5f:d6:fa:
29:26:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:16:24 2026 by rpki-client