
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
File: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft (raw, json)
Hash identifier: wxcEKzC8/OrUC1/We+Xnv0+1sAi4prt9N+gw6K5p7xk=
Subject key identifier: D2:1F:AE:9A:C2:48:F8:9C:5A:E3:C9:9F:B0:0A:EB:BD:A9:20:73:B6
Authority key identifier: 20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E
Certificate issuer: /CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E
Certificate serial: 7BE283C7AD63A459CE3B5728B603B044FCCEFE0F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
Manifest number: D0
Signing time: Sun 04 Oct 2026 01:26:50 +0000
Manifest this update: Sun 04 Oct 2026 01:21:50 +0000
Manifest next update: Mon 05 Oct 2026 02:08:50 +0000
Files and hashes: 1: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl (hash: 1qE9RuS9sVR3bNPvZVU7mrEngIQGJdy31eeto1I7I5k=)
2: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: D52uwwzpgaxCjAFI9GaZMm7APMN7ImtqrU9yyVklPWk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl
rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e2:83:c7:ad:63:a4:59:ce:3b:57:28:b6:03:b0:44:fc:ce:fe:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E
Validity
Not Before: Oct 4 01:21:50 2026 GMT
Not After : Oct 5 02:08:50 2026 GMT
Subject: CN=D21FAE9AC248F89C5AE3C99FB00AEBBDA92073B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:4c:ce:d7:37:b4:12:da:58:78:4d:9d:41:
15:cb:de:d1:26:f3:3a:84:1d:37:71:c2:21:8e:9c:
56:16:a6:c0:14:75:04:20:cd:bc:aa:7b:0c:a9:34:
af:d6:dc:14:4a:b3:cb:d9:60:7b:4c:34:f2:94:8c:
90:86:0d:4a:93:44:00:e6:68:7b:f7:af:91:47:9e:
fc:c4:b7:45:0f:02:8d:c1:78:a4:ba:35:db:b6:b4:
27:33:84:ff:3d:ed:2f:e1:43:ed:5c:92:38:1c:f5:
a4:5a:bb:84:51:9f:10:56:a0:44:14:58:62:9d:5d:
87:38:15:08:2f:7f:a8:90:f7:6e:03:19:d6:1a:82:
5d:a2:8a:6a:4f:64:3c:8f:07:68:48:68:c1:b8:51:
4c:4f:f6:cf:72:36:12:44:b0:e1:21:52:ee:5e:e8:
81:9b:f4:cf:cb:0a:d5:53:a9:d8:d6:74:96:3c:b3:
07:97:11:4e:cf:ed:ba:50:f8:5c:54:54:73:52:af:
45:9c:49:44:55:6d:27:eb:35:98:39:b7:1f:e7:55:
2f:8c:a4:09:03:d5:69:69:af:84:7f:eb:99:db:63:
19:19:89:44:85:5c:1d:e4:fe:b4:c7:df:aa:6c:30:
06:da:81:a7:1d:cf:06:bd:67:dd:e1:a4:21:60:fa:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1F:AE:9A:C2:48:F8:9C:5A:E3:C9:9F:B0:0A:EB:BD:A9:20:73:B6
X509v3 Authority Key Identifier:
keyid:20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:11:b2:3b:09:bd:e1:08:f2:cf:f2:e5:4b:ff:bb:98:72:57:
94:a8:0a:4b:10:ac:2d:dd:22:7e:63:37:b7:32:4d:0e:c0:eb:
65:36:ae:53:c6:41:e1:fd:0c:2f:3f:3b:7a:1b:2d:14:c7:38:
c0:28:0a:e8:be:10:01:d1:d0:a2:6c:2c:08:17:f7:b2:41:79:
ec:53:cd:8b:aa:10:51:74:75:93:1d:7b:47:fd:22:b4:0d:cd:
a2:50:ff:7c:fd:b8:d2:4c:ca:4d:d0:21:3d:66:4c:46:0c:03:
ae:c3:13:e8:09:66:8e:aa:01:bd:c5:42:a4:8d:d1:fd:4d:e7:
93:04:c2:0b:ae:4b:a2:f8:98:34:f3:3f:09:c7:f2:63:f6:99:
21:95:7e:1e:c9:df:62:97:22:38:e3:e7:ed:a9:7f:43:02:d1:
be:75:a7:11:a9:1d:4a:fb:f6:eb:6d:d7:98:66:b3:1e:ca:ab:
c0:4f:7d:27:92:4a:2e:39:49:70:10:b1:a5:6e:00:f2:17:5c:
b4:03:68:3a:ac:dc:4b:4a:e1:45:13:be:00:41:a1:30:ac:67:
93:52:75:09:9c:03:38:a3:66:19:b3:10:4a:b3:cf:67:36:15:
21:aa:b0:10:c7:90:c6:00:57:90:89:65:e1:ec:35:c8:1e:c2:
52:20:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:21:59 2026 by rpki-client