
$ rpki-client -vvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft
File: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft (raw, json)
Hash identifier: MR+a+kVCePABwZxjctLWxzYqo/cJRhoT3rB4zgDV+00=
Subject key identifier: 1D:3A:E9:C5:07:5C:AB:8D:54:26:0C:A2:92:AA:9A:46:60:9D:FD:4A
Authority key identifier: 10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3
Certificate issuer: /CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3
Certificate serial: 3C35E6EB870C872AD74A962756E1CAE83214996E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 22:32:22 +0000
Manifest this update: Thu 23 Jul 2026 22:27:22 +0000
Manifest next update: Sat 25 Jul 2026 02:21:22 +0000
Files and hashes: 1: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl (hash: E8YvZro/lvK13U6Vm3Rx7uSGGflB7qJ541AEWy0OUic=)
2: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: qQsYjjc0UOS4U0mqMilyLxWp2Jg/oy/EO/6yTd0J1SE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl
rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:35:e6:eb:87:0c:87:2a:d7:4a:96:27:56:e1:ca:e8:32:14:99:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3
Validity
Not Before: Jul 23 22:27:22 2026 GMT
Not After : Jul 25 02:21:22 2026 GMT
Subject: CN=1D3AE9C5075CAB8D54260CA292AA9A46609DFD4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a9:35:76:14:10:f9:a1:5a:89:f6:cd:82:27:
5b:c6:a0:12:b6:b2:d5:0a:4a:7d:7d:89:36:6a:0e:
f9:fd:9f:be:e3:a6:01:2c:fa:46:5e:8b:20:94:3c:
89:37:ac:90:cf:c4:bf:07:9e:ba:9d:32:bb:3e:55:
b3:d8:00:dc:77:4f:d3:c7:4a:88:d7:7a:9c:94:82:
ad:5f:89:02:66:6b:94:b0:aa:5c:42:48:5b:de:92:
3a:17:d5:d9:a4:6b:f5:1b:50:72:dd:cc:74:d5:f8:
04:ac:b8:cb:b9:7b:a3:f4:08:be:d3:5f:c5:41:8f:
31:36:ce:18:e6:bf:bf:89:88:6f:55:1b:6d:4a:bf:
8f:41:5f:e3:d7:15:6d:95:f4:97:a4:3d:8e:78:5a:
ed:65:c9:21:ec:58:a5:d5:fb:28:91:df:8c:41:3b:
86:7c:7c:0b:d3:73:29:a1:75:2b:25:05:e8:2a:dc:
d7:ea:0a:cf:c7:e2:05:c5:c0:59:42:e8:ea:92:86:
92:bf:fc:c2:f8:40:1a:ff:2b:32:2c:c3:58:27:89:
11:79:19:cd:b4:50:d2:91:e1:14:31:8a:e9:fe:eb:
b3:c8:3f:2c:3e:5b:d1:cf:5e:26:e4:92:8e:3d:d9:
9c:72:f1:2f:46:69:ac:27:2d:24:c6:b2:c3:7f:99:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3A:E9:C5:07:5C:AB:8D:54:26:0C:A2:92:AA:9A:46:60:9D:FD:4A
X509v3 Authority Key Identifier:
keyid:10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e9:de:17:8e:be:12:0b:8b:1f:e8:88:ce:58:aa:33:0e:5b:
6e:72:0f:f2:e0:6c:e4:94:55:dd:67:6c:66:c0:ba:82:23:78:
7e:dc:3e:6a:db:cb:e1:68:41:64:a0:31:01:9d:d8:87:ad:d1:
8c:0c:ff:36:6e:16:40:59:dc:21:ff:f1:0d:ab:87:07:3a:37:
cb:99:67:ee:d9:a3:a3:58:cb:85:bf:51:45:44:59:bc:e5:9f:
e7:91:d9:2b:51:87:46:49:1d:7f:b9:28:da:55:6a:96:71:be:
e1:f8:7a:e3:18:50:99:cc:cd:d2:94:d5:e3:84:0c:68:98:40:
cc:00:2e:69:c7:bb:ba:fa:52:14:e3:93:2a:07:f9:23:e8:f0:
6e:f7:ef:31:d8:5c:db:ee:e5:ce:88:4d:48:a8:87:5f:9a:e5:
48:65:9b:a0:7f:92:4e:c0:48:06:66:17:a3:dd:a6:8c:30:3a:
7b:50:56:af:a5:f3:5e:b0:c5:0c:ff:1b:19:60:9f:4b:75:b9:
23:a2:f3:f1:1a:8d:e8:5c:68:e9:1d:c5:a8:dc:aa:93:1d:7e:
0b:34:dd:12:1b:ff:bf:c0:94:b9:d8:fd:2d:a4:0b:2e:3b:78:
9a:91:60:df:0c:65:07:60:84:b8:aa:da:c9:3a:0c:af:c3:a3:
ce:3d:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:04:13 2026 by rpki-client