
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
File: 73AC68F9F57E709948037DADDAC8DC88616BF980.mft (raw, json)
Hash identifier: jsVfxUHZAoyilHAB1a0fJ83PuitMU4T1ljSWs4tK/E8=
Subject key identifier: 70:2B:40:34:23:2E:CF:93:4D:FC:41:61:E6:89:5B:34:C0:7F:EF:1E
Authority key identifier: 73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80
Certificate issuer: /CN=73AC68F9F57E709948037DADDAC8DC88616BF980
Certificate serial: 646B3723FD600E7F99C5E6DF03B748E9670637E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:51:29 +0000
Manifest this update: Tue 12 May 2026 16:46:29 +0000
Manifest next update: Wed 13 May 2026 20:44:29 +0000
Files and hashes: 1: 73AC68F9F57E709948037DADDAC8DC88616BF980.crl (hash: d94IMNXPls44W5E+5EW3TCcA3BJ8MHher0K6+jHnyGk=)
2: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: vd1S4Z6+zmIZSCdC4Qdy1PZIz8w97xUXmpTWkwwvVQE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.crl
rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:6b:37:23:fd:60:0e:7f:99:c5:e6:df:03:b7:48:e9:67:06:37:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73AC68F9F57E709948037DADDAC8DC88616BF980
Validity
Not Before: May 12 16:46:29 2026 GMT
Not After : May 13 20:44:29 2026 GMT
Subject: CN=702B4034232ECF934DFC4161E6895B34C07FEF1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:d3:87:5d:58:66:32:1b:e8:a6:e1:21:d2:
c6:24:e6:f5:d4:ac:30:b3:70:9e:0d:04:ef:84:f5:
00:ee:22:db:bd:fa:25:1e:37:ac:5b:1f:90:1a:5a:
74:96:cb:6c:39:64:78:75:8b:63:ee:7c:69:67:10:
d6:79:c5:73:4d:2b:57:41:f6:9d:2a:79:f0:da:01:
ef:1d:32:31:c8:20:30:b9:ea:88:17:85:0c:1c:e6:
40:28:42:4f:68:a0:c7:88:62:4c:26:ce:fd:1e:89:
0d:7a:9a:2d:9a:ff:73:46:77:95:22:37:3d:29:6b:
55:96:29:06:5e:b5:b5:7b:a2:4e:ce:e1:d4:8d:c0:
47:00:e8:3b:26:65:83:a6:b4:8c:58:bd:c7:6f:62:
b2:3f:c8:17:ef:48:3d:d0:2a:e2:9a:a2:a1:e3:60:
28:a2:6a:30:a2:ed:70:24:d1:67:1d:5f:0b:b0:45:
a1:32:19:43:9a:51:df:ff:09:7b:9b:fd:7c:f4:61:
11:0e:b3:aa:4e:92:cf:d9:23:2a:7b:4f:e6:d6:b3:
39:01:34:69:b9:02:7a:2a:9c:a6:66:87:e0:d4:61:
b0:a3:3f:41:bf:6c:f0:41:7c:26:e5:cd:9c:66:02:
83:e0:3d:25:77:a6:72:4e:3a:d2:5c:1b:79:b4:87:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2B:40:34:23:2E:CF:93:4D:FC:41:61:E6:89:5B:34:C0:7F:EF:1E
X509v3 Authority Key Identifier:
keyid:73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f9:42:02:44:f6:42:42:f4:b1:32:2f:14:4d:61:a9:ad:9c:
81:6c:71:dc:55:04:76:3d:36:87:ab:52:e9:0a:73:7e:13:24:
a1:36:71:18:62:d2:77:fd:3e:4c:6c:3a:20:0a:e8:e5:f9:42:
20:1f:56:e7:38:68:ab:2d:88:5e:79:5f:c2:13:33:d9:8d:fe:
98:09:9a:fe:4f:98:a0:10:e3:c6:6f:85:5e:cb:a4:30:f0:2d:
4a:16:d8:dc:e2:6e:bf:f2:5b:c9:bd:00:9a:4a:f1:0a:7a:82:
2d:4d:be:83:e7:44:19:1c:98:35:33:47:2f:f0:e8:d3:92:f4:
5c:50:64:77:64:4f:58:50:50:eb:d4:29:51:7a:05:b0:9c:9c:
a2:8d:1c:9e:12:bf:75:8c:fc:65:09:fe:c2:6e:70:c4:99:01:
d3:86:1e:01:34:c2:15:c3:52:01:a2:1a:f1:66:2e:1e:0f:72:
07:5d:ef:c3:71:86:02:72:0f:7d:18:8f:1f:44:51:09:ed:3c:
34:f5:46:d4:44:7c:57:da:a2:01:3c:cf:10:e5:dc:22:7a:68:
4e:a1:0f:ae:81:a1:3c:4c:85:2b:ff:0c:91:ce:e3:ce:e6:c1:
59:c6:c0:92:cb:35:1a:6a:be:1f:f0:e3:a4:7c:ea:7d:a2:43:
fb:53:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:12 2026 by rpki-client