
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft
File: C2F21005CDD8F19E492720297D0BA5C66395653F.mft (raw, json)
Hash identifier: XDSAA303G4NOIqtw182xLMVdGNcGZC69dnXXHyQSv+c=
Subject key identifier: 8E:5F:EC:92:31:E4:D6:EE:74:6A:FF:1D:0D:89:E4:3B:43:1E:AB:12
Authority key identifier: C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F
Certificate issuer: /CN=C2F21005CDD8F19E492720297D0BA5C66395653F
Certificate serial: 52B388BC46E9F418759AA69A3727A7C627DEAD9E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:53:07 +0000
Manifest this update: Tue 12 May 2026 20:48:07 +0000
Manifest next update: Wed 13 May 2026 23:52:07 +0000
Files and hashes: 1: C2F21005CDD8F19E492720297D0BA5C66395653F.crl (hash: if5a4Tqc30IlwA4wRCq7LIWmJVvptHDH0Zdvv1ETqj4=)
2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: 4WF38lDugkx4g5GWHdzVk5hRBqpGlU+mntDxAYWnRfU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl
rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b3:88:bc:46:e9:f4:18:75:9a:a6:9a:37:27:a7:c6:27:de:ad:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2F21005CDD8F19E492720297D0BA5C66395653F
Validity
Not Before: May 12 20:48:07 2026 GMT
Not After : May 13 23:52:07 2026 GMT
Subject: CN=8E5FEC9231E4D6EE746AFF1D0D89E43B431EAB12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f2:cd:02:ad:b5:21:38:21:27:2d:20:aa:dc:
13:90:3c:25:cf:93:7d:98:eb:ce:44:de:6c:f0:70:
70:0b:8e:23:1f:7d:1b:eb:58:fb:30:59:5f:1e:1c:
19:1b:35:3c:47:90:00:99:d2:06:0b:cf:d5:c7:0b:
59:35:2f:33:c4:e1:94:5d:f1:85:57:6b:c0:4f:ff:
ec:7d:e6:a6:b1:53:d9:d7:4c:e2:a3:c7:3b:b2:ff:
41:b4:ff:45:03:dc:b7:b7:b8:49:e4:d6:1f:55:9f:
4e:c6:c6:84:a0:58:a4:d1:c7:c7:ff:48:c6:26:41:
9b:2c:6c:84:45:76:bb:4c:b3:a9:61:3e:fe:b5:3a:
13:ed:ba:91:e1:dc:9c:4c:e5:70:86:f1:e6:74:0a:
d2:92:4f:34:17:27:9e:32:b3:33:89:bd:b7:c9:1d:
81:66:e6:6a:56:d4:a0:af:5e:38:41:e6:72:a9:32:
6f:42:2e:a8:0b:65:ab:0b:ec:b8:54:48:37:2d:ce:
8d:06:6d:d2:68:32:74:4e:07:de:4d:56:18:6b:93:
7b:b2:7e:f0:9b:04:a3:52:3c:49:a2:b8:58:72:f6:
f5:de:95:6b:5a:0a:f7:9f:c3:c9:f5:a8:18:3d:de:
31:e4:9b:3c:9e:46:75:54:ae:4f:25:b3:20:33:aa:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5F:EC:92:31:E4:D6:EE:74:6A:FF:1D:0D:89:E4:3B:43:1E:AB:12
X509v3 Authority Key Identifier:
keyid:C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:99:e0:97:84:40:88:1d:70:5a:7b:3c:55:eb:9d:c2:52:5a:
21:ab:8b:25:44:b1:1c:82:fe:7b:92:79:13:3e:2b:39:17:60:
52:58:8f:26:38:c3:12:0a:0d:33:d6:59:76:39:10:b9:b9:83:
0c:20:90:07:bb:97:e9:5d:1c:42:44:b9:90:f8:fa:24:92:32:
47:2d:9d:4f:aa:f6:58:e4:d3:b7:b9:21:ae:de:b8:5a:af:3f:
3f:36:75:5e:46:c6:0a:b9:fb:f8:d7:3b:e5:92:87:2e:2f:64:
9d:ea:4a:52:15:3d:6e:7a:66:cc:8e:47:6a:60:18:99:e6:81:
99:c8:7d:04:bc:97:6e:04:15:74:6d:6c:e6:3b:66:bf:c0:9b:
df:be:ca:0b:9e:a9:5c:bb:8a:c5:3b:3b:7e:b0:27:66:ce:6c:
0f:ed:66:1f:cb:39:6b:a6:be:8e:b8:29:e4:cb:8d:03:63:f5:
ee:e6:30:e7:7c:26:fa:8d:a6:05:a0:09:dd:2c:47:8b:fb:d6:
78:fd:50:c0:43:fc:6a:b7:50:b7:c3:50:58:e5:44:3e:b5:da:
33:db:97:d1:14:bd:b9:9e:8e:cd:aa:07:3f:04:f9:54:08:3b:
6f:04:3e:34:2c:77:04:c9:28:28:69:99:29:1f:7f:68:4b:3a:
cb:8b:b5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:35 2026 by rpki-client