
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft
File: D6344C556CB88A244AE43DD23D620550C754F24F.mft (raw, json)
Hash identifier: BQHBNzLEENykXLFqx/8cjotbCqJYCIQLn4Kj3O9Uxsw=
Subject key identifier: B5:06:E9:86:54:5A:48:F9:9A:E5:0B:24:CA:11:0F:92:D7:19:6E:DD
Authority key identifier: D6:34:4C:55:6C:B8:8A:24:4A:E4:3D:D2:3D:62:05:50:C7:54:F2:4F
Certificate issuer: /CN=D6344C556CB88A244AE43DD23D620550C754F24F
Certificate serial: 1AF84DDEB34BE7506579444156549623B3338D29
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft
Manifest number: DB
Signing time: Wed 14 Oct 2026 04:05:16 +0000
Manifest this update: Wed 14 Oct 2026 04:00:16 +0000
Manifest next update: Thu 15 Oct 2026 05:38:16 +0000
Files and hashes: 1: D6344C556CB88A244AE43DD23D620550C754F24F.crl (hash: W4OWG4/bEBW3GswILwjgQxLG3vQutvhl7StkOngZqSE=)
2: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (hash: ks4tQxKb/HT7mZZsol2xTOY4z3gIixS1lQAzEE6O77U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.crl
rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 05:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f8:4d:de:b3:4b:e7:50:65:79:44:41:56:54:96:23:b3:33:8d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6344C556CB88A244AE43DD23D620550C754F24F
Validity
Not Before: Oct 14 04:00:16 2026 GMT
Not After : Oct 15 05:38:16 2026 GMT
Subject: CN=B506E986545A48F99AE50B24CA110F92D7196EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:66:80:6d:99:c4:ff:a4:43:c2:4b:b2:e0:e7:
f6:e9:a7:c9:fb:87:5f:f1:1f:95:f8:75:83:75:ac:
a2:9a:0b:5f:c5:a5:87:f1:f0:09:db:59:77:ea:06:
ad:77:62:90:c3:7c:1e:9b:7b:f6:a7:76:41:e8:9e:
64:52:60:67:71:c5:ff:d8:75:5f:71:fd:5b:d7:16:
b5:e3:47:8c:85:76:5d:85:0a:a7:9a:97:fa:5c:95:
00:b3:ca:70:72:00:ba:d6:8b:7e:a4:c1:04:bf:25:
43:9b:5c:59:c1:cb:90:ad:91:f4:54:d2:18:5a:5e:
1e:95:1e:21:7f:ec:e5:4e:51:63:2a:1e:bf:13:04:
3c:30:7f:b8:8d:6c:fd:9e:59:84:c0:a1:14:3e:18:
d2:8a:a0:9f:45:98:9f:ca:53:aa:48:fb:a6:33:ea:
2f:dd:2e:64:52:79:22:de:da:77:e2:cb:93:9f:43:
e0:22:81:d5:8c:f9:d5:0b:3b:26:79:31:50:d7:ae:
95:d1:dc:7a:d2:5e:43:f6:e1:ee:c7:2f:3c:f6:9e:
94:16:a5:a6:51:8f:d8:18:aa:29:8b:fe:ad:6f:32:
f9:de:08:43:a6:d1:c6:83:a0:c1:b2:4e:21:5f:3b:
43:63:30:b7:b1:7f:90:b6:1f:63:06:d0:fa:31:37:
1c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:06:E9:86:54:5A:48:F9:9A:E5:0B:24:CA:11:0F:92:D7:19:6E:DD
X509v3 Authority Key Identifier:
keyid:D6:34:4C:55:6C:B8:8A:24:4A:E4:3D:D2:3D:62:05:50:C7:54:F2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:eb:17:6f:80:20:4c:60:d6:1f:ea:85:df:83:7c:62:bd:5a:
05:ae:8e:60:5f:e6:1f:f3:f1:f2:60:04:91:3e:e6:c8:3f:ac:
62:a8:a3:bf:fb:5d:07:43:fe:33:01:d9:79:fe:17:a0:62:fd:
46:b8:10:66:59:04:73:21:64:5a:3b:e5:04:87:4a:5f:45:06:
81:85:bd:49:25:e2:9a:77:e3:81:4a:9c:ec:ec:89:53:ba:00:
94:11:39:f2:d3:d2:8e:e7:16:a0:d3:68:68:8b:1b:ef:b0:23:
64:b0:d8:85:62:41:b9:85:b5:a6:e8:10:a5:9f:a3:6c:a4:92:
17:f2:1f:d6:c6:dc:4b:02:82:98:fc:b4:e9:02:20:9a:08:13:
dd:88:ef:08:83:53:27:c1:86:c9:4b:8d:12:fb:b9:f5:b9:14:
fe:b7:2e:94:70:43:68:49:54:18:70:f3:04:30:22:8b:18:86:
87:c8:92:d4:2b:07:1e:c4:50:df:50:eb:10:e0:53:83:88:13:
1c:b1:f6:7a:ed:e7:d5:64:11:c8:7c:be:a5:e1:cf:11:33:a7:
da:5b:d2:36:a4:0e:30:90:ba:b4:48:15:02:22:fd:02:29:10:
dd:7b:46:8a:45:3e:09:be:a0:e4:1f:50:64:52:e3:1a:7f:6c:
65:e1:f8:d6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGvhN3rNL51BleURBVlSWI7MzjSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzNDRDNTU2Q0I4OEEyNDRBRTQzREQyM0Q2MjA1NTBD
NzU0RjI0RjAeFw0yNjEwMTQwNDAwMTZaFw0yNjEwMTUwNTM4MTZaMDMxMTAvBgNV
BAMTKEI1MDZFOTg2NTQ1QTQ4Rjk5QUU1MEIyNENBMTEwRjkyRDcxOTZFREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiZoBtmcT/pEPCS7Lg5/bpp8n7
h1/xH5X4dYN1rKKaC1/FpYfx8AnbWXfqBq13YpDDfB6be/andkHonmRSYGdxxf/Y
dV9x/VvXFrXjR4yFdl2FCqeal/pclQCzynByALrWi36kwQS/JUObXFnBy5CtkfRU
0hhaXh6VHiF/7OVOUWMqHr8TBDwwf7iNbP2eWYTAoRQ+GNKKoJ9FmJ/KU6pI+6Yz
6i/dLmRSeSLe2nfiy5OfQ+AigdWM+dULOyZ5MVDXrpXR3HrSXkP24e7HLzz2npQW
paZRj9gYqimL/q1vMvneCEOm0caDoMGyTiFfO0NjMLexf5C2H2MG0PoxNxzJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtQbphlRaSPma5QskyhEPktcZbt0wHwYDVR0j
BBgwFoAU1jRMVWy4iiRK5D3SPWIFUMdU8k8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTcyZDE3NTItNDg1My00Yzc0LWI1NzQtOTk0ZDNiMTI0MDkwLzAvRDYzNDRDNTU2
Q0I4OEEyNDRBRTQzREQyM0Q2MjA1NTBDNzU0RjI0Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9ENjM0NEM1NTZDQjg4QTI0NEFFNDNERDIzRDYyMDU1MEM3NTRG
MjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcyZDE3NTItNDg1My00Yzc0LWI1
NzQtOTk0ZDNiMTI0MDkwLzAvRDYzNDRDNTU2Q0I4OEEyNDRBRTQzREQyM0Q2MjA1
NTBDNzU0RjI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAETrF2+AIExg1h/qhd+DfGK9WgWujmBf5h/z
8fJgBJE+5sg/rGKoo7/7XQdD/jMB2Xn+F6Bi/Ua4EGZZBHMhZFo75QSHSl9FBoGF
vUkl4pp344FKnOzsiVO6AJQROfLT0o7nFqDTaGiLG++wI2Sw2IViQbmFtaboEKWf
o2ykkhfyH9bG3EsCgpj8tOkCIJoIE92I7wiDUyfBhslLjRL7ufW5FP63LpRwQ2hJ
VBhw8wQwIosYhofIktQrBx7EUN9Q6xDgU4OIExyx9nrt59VkEch8vqXhzxEzp9pb
0jakDjCQurRIFQIi/QIpEN17RopFPgm+oOQfUGRS4xp/bGXh+NY=
-----END CERTIFICATE-----
Generated at Wed Oct 14 22:15:57 2026 by rpki-client