
$ rpki-client -vvf rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
File: CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft (raw, json)
Hash identifier: XYxGPUedvhuVp5s+/gKXK63RsjWxOZ+pKPKcaCrjk44=
Subject key identifier: 69:D7:85:D9:AC:DC:DF:57:08:94:C0:0A:05:8F:83:BE:05:29:13:4C
Authority key identifier: CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30
Certificate issuer: /CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
Certificate serial: 4F5AC610F1D0ABAF7A5E835E32CD33FE691EE9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:22:12 +0000
Manifest this update: Tue 12 May 2026 17:17:12 +0000
Manifest next update: Wed 13 May 2026 18:20:12 +0000
Files and hashes: 1: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: 9B18d/9Mq6o8AyxG94Kdqz2+xtB5eaKcmGvgMOaUWzk=)
2: CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl (hash: 3ywhVfLU9Qv8sI1O/DOpRdkZi3DY2pVj+4QQNpN4+ak=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl
rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:5a:c6:10:f1:d0:ab:af:7a:5e:83:5e:32:cd:33:fe:69:1e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
Validity
Not Before: May 12 17:17:12 2026 GMT
Not After : May 13 18:20:12 2026 GMT
Subject: CN=69D785D9ACDCDF570894C00A058F83BE0529134C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:99:7f:d1:fc:5c:1b:9d:6b:21:0c:45:53:
d9:a9:3d:c2:0d:82:3b:a1:c0:68:2e:4b:56:af:f0:
46:e7:59:e3:98:db:fd:57:fb:d6:85:f5:2b:79:1f:
6e:88:1f:bf:d6:59:b5:05:fb:d2:db:22:e1:fb:a8:
e5:30:a9:5e:63:dd:66:dd:b7:b6:cd:e9:39:10:a6:
23:10:b5:52:8f:ab:3b:52:0b:e9:6b:83:ae:fa:95:
0d:c6:aa:f2:44:a3:f9:95:22:98:e5:89:a7:4d:66:
08:c5:5e:e2:cc:08:a3:4d:e3:cc:b9:a8:4d:3f:69:
e6:87:b7:75:52:06:b5:04:6a:95:15:f2:37:eb:5b:
e0:58:81:89:90:e8:fc:d4:8f:5b:5a:e3:ec:d3:b2:
b9:23:63:8f:9e:96:3d:04:51:75:ba:95:c6:42:3c:
d8:98:dc:19:a8:5b:ac:77:49:a8:69:02:4e:51:5b:
bf:64:be:c4:1e:2d:f1:b7:6c:4a:5c:b3:51:46:1d:
77:c8:96:13:f9:67:fc:f9:98:4a:5d:35:89:4e:d0:
d1:5f:e4:e8:ac:39:cd:10:af:85:fc:39:6c:24:0c:
a3:11:9d:70:57:d6:f2:74:18:3f:53:d1:da:74:d5:
18:1a:ef:e3:90:8a:71:e3:bd:1d:b1:aa:6b:ee:52:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D7:85:D9:AC:DC:DF:57:08:94:C0:0A:05:8F:83:BE:05:29:13:4C
X509v3 Authority Key Identifier:
keyid:CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a9:da:af:2e:55:d4:fc:cb:81:f9:27:95:29:df:93:2b:9b:
95:0c:64:35:fe:97:e1:f4:3f:01:a9:30:0f:53:ec:1e:44:fc:
1b:da:8e:76:0e:38:f9:c4:e7:06:86:ec:dd:64:27:4f:80:c2:
92:27:44:2c:ed:e1:9f:6f:58:34:a3:ac:23:20:d4:ea:0c:d0:
ca:02:d2:aa:06:3c:4a:fa:a9:88:e8:e5:03:fb:9c:27:2d:93:
3a:3a:6b:d2:de:e3:4e:d2:c1:a0:f9:7c:89:d9:1a:58:c6:a4:
cf:48:9e:02:0d:5b:89:f1:b3:de:15:f0:a4:8b:34:b5:7e:41:
7f:f4:90:82:66:d3:43:df:65:14:29:8d:49:00:e3:72:4c:bb:
b2:fc:d0:9c:3f:a0:88:89:14:1e:73:fa:61:4e:7b:9e:4f:ce:
46:77:7b:f8:49:a8:03:51:10:e8:56:9e:5b:c3:39:ac:dc:b1:
f9:b8:de:f7:f2:d4:78:9a:75:31:d7:ac:6a:3e:5d:66:3f:3e:
47:3f:d3:75:ea:d4:11:04:1c:4f:a8:e2:ee:45:79:3e:af:58:
46:d5:b4:f9:56:b3:a2:a1:0e:f4:bb:f1:00:1a:85:e3:78:c0:
99:17:6b:dc:ad:83:86:95:3e:b7:bd:99:cd:be:55:40:f5:45:
dc:3c:96:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:20 2026 by rpki-client