
$ rpki-client -vvf rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft
File: 01D21CF844B21F1A9486A445F946566129AD4A58.mft (raw, json)
Hash identifier: Ua5FGdcKn+hq3RcaLpFbuXWiLQL1f8fPxT9op2xRUDQ=
Subject key identifier: 2E:35:C9:6E:4E:C1:66:EB:46:CA:71:E3:B9:ED:50:77:4D:45:1F:C8
Authority key identifier: 01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58
Certificate issuer: /CN=01D21CF844B21F1A9486A445F946566129AD4A58
Certificate serial: 3237BB4D3F46F65BCA85DA593CF1995C28D116C1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 18:12:15 +0000
Manifest this update: Thu 23 Jul 2026 18:07:15 +0000
Manifest next update: Fri 24 Jul 2026 18:52:15 +0000
Files and hashes: 1: 01D21CF844B21F1A9486A445F946566129AD4A58.crl (hash: 8awyvu6JlrSCXuH+j+xwAsDar/FRpGU8pE1CW47+bHQ=)
2: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: ufsOCUOJb9bQMTjSTFriIXnfAAEVhWffzH9OME9bvBM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.crl
rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:37:bb:4d:3f:46:f6:5b:ca:85:da:59:3c:f1:99:5c:28:d1:16:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01D21CF844B21F1A9486A445F946566129AD4A58
Validity
Not Before: Jul 23 18:07:15 2026 GMT
Not After : Jul 24 18:52:15 2026 GMT
Subject: CN=2E35C96E4EC166EB46CA71E3B9ED50774D451FC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:11:24:2f:f6:b6:a0:4d:63:b4:89:42:13:
d2:bf:08:b2:2c:9f:d7:92:b6:a0:e6:57:29:e3:bd:
31:9d:5d:d0:32:58:e2:0f:f5:b7:90:0e:04:ef:10:
70:53:27:0e:a6:d8:5d:0d:6c:7d:75:05:dd:c5:15:
eb:35:11:cf:22:37:d8:c9:90:76:8b:3c:35:d2:3c:
e0:e9:7b:3f:23:cd:6e:6d:02:57:ff:fc:02:9e:78:
c8:49:29:58:8c:46:c3:e5:82:74:b7:21:b6:98:88:
94:2b:3b:7a:61:ea:aa:92:4b:e8:ab:95:63:df:31:
30:72:9c:5e:cf:d9:ad:9d:c9:8e:63:0e:fa:40:2d:
71:e5:76:c6:34:f9:10:15:a3:3e:90:30:f2:c5:87:
11:04:2b:c6:23:0c:28:5e:37:3c:13:62:e4:9e:39:
fa:9f:85:3e:06:30:a9:a5:82:88:32:a5:64:81:8b:
59:e0:3b:f3:ce:e2:18:e3:34:ad:70:1e:78:de:3d:
73:3e:25:a7:0e:4e:82:53:6e:a9:4d:f6:5d:31:22:
d2:99:7d:f6:34:05:ce:f2:05:f9:1e:62:a3:8c:02:
06:04:91:34:4d:01:5e:f0:21:f4:70:b6:6f:dc:ff:
d0:91:f1:1f:ca:23:dc:54:32:29:07:b6:5a:f9:46:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:35:C9:6E:4E:C1:66:EB:46:CA:71:E3:B9:ED:50:77:4D:45:1F:C8
X509v3 Authority Key Identifier:
keyid:01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:87:2e:ed:eb:e2:5c:20:52:ec:a3:2b:65:63:a0:09:8e:5d:
b9:10:9c:05:7b:b6:92:5a:1e:a6:8e:a3:cb:3b:c8:3c:e4:87:
b8:f4:a1:55:de:86:c1:d5:17:b5:87:16:c1:2f:89:c3:78:1b:
47:1b:3f:50:57:f8:d6:c3:31:20:2b:b5:7f:a5:72:ab:38:c6:
43:a4:fe:25:d9:95:72:33:97:c3:72:7c:3f:b2:ce:da:2d:e3:
83:b8:d5:9c:53:61:2d:34:90:93:35:33:91:b9:7e:60:87:86:
87:1b:75:af:83:ff:39:46:ac:5c:0a:61:20:d7:5d:0f:b4:d5:
0e:48:1a:bc:49:ad:b2:47:4d:75:96:65:29:19:7f:e3:e2:74:
56:2c:01:1c:97:52:e7:30:bf:06:45:fd:6c:4c:4d:27:37:49:
0a:05:7f:1c:82:54:3e:13:9b:f5:93:dd:92:7b:e1:74:29:4d:
2a:87:d0:57:6c:8e:46:ff:ed:8a:8a:1f:de:42:1c:c8:2c:a8:
94:4b:f1:e3:42:4d:55:55:bc:b4:ec:14:3d:9d:69:aa:73:a7:
ef:78:08:32:39:d3:39:f1:d7:d0:5a:4b:af:6b:b1:cc:71:c0:
87:a0:2d:0b:2b:f0:b0:e8:fe:99:09:e1:9c:36:a9:d2:23:92:
09:af:0f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:07:00 2026 by rpki-client