
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft
File: 284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft (raw, json)
Hash identifier: r5s8sY7VHfcF3zWBLe5X1WFNfcHq6TDupDUZ+SSVOSY=
Subject key identifier: 17:BB:96:83:6F:C2:C6:C5:83:42:99:B4:8F:B1:E7:3B:76:03:E3:A9
Authority key identifier: 28:41:32:D9:17:9D:6A:10:5A:D3:8E:8C:B4:7C:2E:2D:87:7E:8D:8B
Certificate issuer: /CN=284132D9179D6A105AD38E8CB47C2E2D877E8D8B
Certificate serial: 276EB066609D22A1A1EF306F1827562818DCAD4D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 13:38:41 +0000
Manifest this update: Tue 12 May 2026 13:33:41 +0000
Manifest next update: Wed 13 May 2026 16:48:41 +0000
Files and hashes: 1: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: K06HluoUSneBunwOTMkxMJ0GcJy62PXja/IY39krYJE=)
2: 284132D9179D6A105AD38E8CB47C2E2D877E8D8B.crl (hash: 8k+tWLiw8bKGan/YENmuntL+rgT/OkuZ8VqMUr9ZWhw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.crl
rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6e:b0:66:60:9d:22:a1:a1:ef:30:6f:18:27:56:28:18:dc:ad:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284132D9179D6A105AD38E8CB47C2E2D877E8D8B
Validity
Not Before: May 12 13:33:41 2026 GMT
Not After : May 13 16:48:41 2026 GMT
Subject: CN=17BB96836FC2C6C5834299B48FB1E73B7603E3A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:72:f3:92:f9:dd:d5:9e:6d:83:63:0d:c9:
97:c5:c3:96:3c:9e:11:89:ef:73:b5:66:0e:31:c1:
85:49:63:ac:fe:35:8f:7e:ca:84:bf:df:a0:67:10:
b2:9e:6b:a0:62:f2:80:6d:0b:b7:7a:f1:d6:c8:91:
66:c1:f1:02:03:e6:7a:88:2f:a1:de:49:31:d0:2b:
25:e9:28:dc:f1:5c:f2:77:ee:78:d3:b8:5e:8f:ea:
d0:81:dd:20:90:22:96:d1:15:27:8e:a9:5e:70:f9:
c9:c7:6d:b1:73:2b:7c:7a:b5:91:18:5f:18:a9:b1:
5b:2a:1b:7a:c9:71:fb:f3:d0:49:09:4d:a1:b2:35:
28:a8:51:ef:e4:0d:89:fe:4a:b3:43:d8:15:9e:5a:
93:af:77:e2:31:bb:44:8d:ad:6b:34:22:6c:06:27:
88:f8:b1:17:89:c3:e8:e3:39:69:9b:76:65:13:ef:
38:65:08:ba:f1:b0:2d:a3:7f:2c:f8:27:a0:34:2f:
a6:18:f4:85:d9:c3:4e:4d:d4:35:04:18:f2:b8:67:
a0:f1:a6:8a:80:21:f1:96:a3:8c:13:20:23:4e:84:
6c:3e:a9:63:a5:2d:b0:f5:f7:e7:dd:5f:03:37:43:
b3:b9:1b:16:79:2f:29:a4:18:a3:58:33:db:74:31:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BB:96:83:6F:C2:C6:C5:83:42:99:B4:8F:B1:E7:3B:76:03:E3:A9
X509v3 Authority Key Identifier:
keyid:28:41:32:D9:17:9D:6A:10:5A:D3:8E:8C:B4:7C:2E:2D:87:7E:8D:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:36:61:8e:31:bf:3e:c7:83:a0:3f:f5:01:fd:87:fa:d2:e3:
5f:dd:c7:c3:ad:f6:cb:fc:20:bd:b3:c8:1f:a5:f7:4f:38:a4:
53:f2:65:f2:a3:1a:58:ba:29:17:e8:19:d7:6a:1f:cc:7f:9f:
9d:d0:0f:3f:a1:4a:a8:53:81:90:ad:92:49:a1:f8:bc:b2:b7:
6f:33:7c:b0:21:75:4b:ce:e5:79:ac:e2:b6:ba:04:dc:88:35:
49:6e:bc:09:54:fc:b3:a9:10:58:c9:66:fd:8e:af:90:da:27:
5e:bf:5d:c5:98:03:49:f0:18:65:2b:2b:01:72:63:4d:d0:32:
11:60:22:2e:8f:f7:e1:16:f5:26:e0:58:38:19:65:4d:55:ee:
d6:f0:a6:44:0c:a7:7a:d2:da:ba:ef:6c:5f:93:7e:59:b5:ce:
9b:b4:ba:84:f0:31:8a:31:d1:c5:d6:b7:ee:46:0c:df:8b:ec:
32:ab:cb:1c:39:b9:21:5b:59:23:ce:f1:14:d1:ad:20:23:bb:
15:50:92:c0:36:37:4a:85:5e:7a:5e:55:d1:6a:a3:22:d5:97:
4a:0d:84:30:68:82:e3:26:9a:df:cf:cd:48:54:e8:f7:76:9e:
ef:7e:99:ba:2f:fc:49:c3:fd:b7:41:80:24:11:01:2c:11:47:
91:ff:d1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:25 2026 by rpki-client