
$ rpki-client -vvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft
File: 2DFC13D85715AA04782C2A3D86F83844385F896D.mft (raw, json)
Hash identifier: E3wXRMqUHnY/Y9YAJDwJolHeivTbsdZUlcWfva2gUK0=
Subject key identifier: 99:8E:4A:7A:71:6A:6F:19:AE:A6:EF:68:23:86:58:6A:7F:B9:A5:2E
Authority key identifier: 2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D
Certificate issuer: /CN=2DFC13D85715AA04782C2A3D86F83844385F896D
Certificate serial: 47413487ABB6B91813AD1FEC68B74EF581407468
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 17:21:20 +0000
Manifest this update: Thu 23 Jul 2026 17:16:20 +0000
Manifest next update: Fri 24 Jul 2026 18:41:20 +0000
Files and hashes: 1: 2DFC13D85715AA04782C2A3D86F83844385F896D.crl (hash: 4/92qMq7rOl9fNpVkzIFoSbUkI+9d3pYZDl+BdCzWQA=)
2: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: 2yToa31P3viNdlJSz6LX8aSdNJBJoeEJaRZoiY3wK8c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl
rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:41:34:87:ab:b6:b9:18:13:ad:1f:ec:68:b7:4e:f5:81:40:74:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DFC13D85715AA04782C2A3D86F83844385F896D
Validity
Not Before: Jul 23 17:16:20 2026 GMT
Not After : Jul 24 18:41:20 2026 GMT
Subject: CN=998E4A7A716A6F19AEA6EF682386586A7FB9A52E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:08:69:f1:08:02:88:e1:cb:9a:66:24:e8:
9f:ba:c3:da:af:bf:5d:a9:da:6f:ea:cd:49:1f:b2:
e2:15:03:b3:06:48:4c:63:48:79:95:b5:e7:7c:3c:
f4:c5:1a:66:3c:c9:b4:b1:db:7a:69:43:f3:75:b9:
60:19:a4:04:4d:3f:21:71:89:24:82:02:c7:58:80:
6a:fe:44:ca:e4:9c:a4:89:ad:de:e8:e1:77:bb:29:
51:97:b4:90:6d:56:83:7d:dc:9f:62:9c:5d:1f:dc:
15:51:32:bf:74:34:b8:d4:e5:2e:95:c3:d6:8a:96:
e8:f9:a5:bf:ae:71:73:52:74:fe:6b:f6:91:c4:f7:
95:b1:45:3f:60:0e:27:c4:51:38:ee:52:87:c2:42:
f4:00:07:e7:bb:ce:83:f8:b5:e7:2a:12:b4:dc:e8:
d6:9b:e9:3a:90:2b:2f:bc:c8:e9:62:49:0f:f6:a7:
fc:48:c3:04:df:24:e1:8a:8e:d9:b2:e8:8a:f0:f9:
f0:2e:54:45:29:20:06:5f:68:c0:89:d8:6a:e9:27:
1a:d6:04:58:c8:3a:52:91:e6:98:7b:68:be:24:7b:
37:12:bc:3c:4f:7a:a5:9d:a4:50:c4:46:63:52:03:
f9:f3:07:d8:c0:a1:19:c7:66:0b:7f:47:c1:e6:6a:
a6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8E:4A:7A:71:6A:6F:19:AE:A6:EF:68:23:86:58:6A:7F:B9:A5:2E
X509v3 Authority Key Identifier:
keyid:2D:FC:13:D8:57:15:AA:04:78:2C:2A:3D:86:F8:38:44:38:5F:89:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2DFC13D85715AA04782C2A3D86F83844385F896D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/2DFC13D85715AA04782C2A3D86F83844385F896D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:35:e6:96:f9:77:c4:4e:2e:09:31:ad:3a:c1:07:4a:df:50:
94:9c:df:95:4c:a7:e5:e0:0e:f2:28:98:0f:aa:21:d4:8a:1d:
2f:2a:6f:4f:6e:d3:76:a3:fb:39:5a:0d:cc:70:f6:b6:3b:84:
f9:b7:fb:15:a2:76:9f:a5:fd:fa:e7:ab:cd:59:ca:22:2c:5e:
44:72:c6:85:eb:7a:bc:f8:af:79:85:db:9a:ad:f6:37:f7:1a:
93:59:4e:e7:fd:33:85:85:51:92:08:c8:c4:19:ca:5b:c6:7d:
30:b6:f4:47:15:c4:cf:21:57:92:70:33:90:78:e1:37:2b:8d:
80:c2:f1:9a:17:bc:d3:3b:4c:aa:c1:66:67:67:e0:6d:03:c2:
f6:bc:50:e9:0d:57:66:0c:d2:45:41:53:11:ef:06:49:27:fc:
57:40:e5:31:1e:97:cd:d5:2f:ad:35:28:65:04:ef:78:6d:eb:
00:24:5d:cd:98:76:c0:b1:4e:9b:07:41:b4:20:5b:74:42:21:
08:32:46:62:45:ce:65:19:19:e6:d5:96:f9:56:59:d3:18:a3:
5c:e6:ac:7e:21:64:0b:41:9e:c4:19:f3:aa:09:66:3d:13:dc:
62:1a:04:1c:14:ab:4e:41:4e:72:a8:68:69:b9:23:6b:4f:50:
22:53:8e:a8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUR0E0h6u2uRgTrR/saLdO9YFAdGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4NDQz
ODVGODk2RDAeFw0yNjA3MjMxNzE2MjBaFw0yNjA3MjQxODQxMjBaMDMxMTAvBgNV
BAMTKDk5OEU0QTdBNzE2QTZGMTlBRUE2RUY2ODIzODY1ODZBN0ZCOUE1MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07whp8QgCiOHLmmYk6J+6w9qv
v12p2m/qzUkfsuIVA7MGSExjSHmVted8PPTFGmY8ybSx23ppQ/N1uWAZpARNPyFx
iSSCAsdYgGr+RMrknKSJrd7o4Xe7KVGXtJBtVoN93J9inF0f3BVRMr90NLjU5S6V
w9aKluj5pb+ucXNSdP5r9pHE95WxRT9gDifEUTjuUofCQvQAB+e7zoP4tecqErTc
6Nab6TqQKy+8yOliSQ/2p/xIwwTfJOGKjtmy6Irw+fAuVEUpIAZfaMCJ2GrpJxrW
BFjIOlKR5ph7aL4kezcSvDxPeqWdpFDERmNSA/nzB9jAoRnHZgt/R8HmaqYjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUmY5KenFqbxmupu9oI4ZYan+5pS4wHwYDVR0j
BBgwFoAULfwT2FcVqgR4LCo9hvg4RDhfiW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1
NzE1QUEwNDc4MkMyQTNEODZGODM4NDQzODVGODk2RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8yREZDMTNEODU3MTVBQTA0NzgyQzJBM0Q4NkY4Mzg0NDM4NUY4
OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk
MmEtYTZlNjg4NGJjYmJiLzAvMkRGQzEzRDg1NzE1QUEwNDc4MkMyQTNEODZGODM4
NDQzODVGODk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABg15pb5d8ROLgkxrTrBB0rfUJSc35VMp+Xg
DvIomA+qIdSKHS8qb09u03aj+zlaDcxw9rY7hPm3+xWidp+l/frnq81ZyiIsXkRy
xoXrerz4r3mF25qt9jf3GpNZTuf9M4WFUZIIyMQZylvGfTC29EcVxM8hV5JwM5B4
4TcrjYDC8ZoXvNM7TKrBZmdn4G0Dwva8UOkNV2YM0kVBUxHvBkkn/FdA5TEel83V
L601KGUE73ht6wAkXc2YdsCxTpsHQbQgW3RCIQgyRmJFzmUZGebVlvlWWdMYo1zm
rH4hZAtBnsQZ86oJZj0T3GIaBBwUq05BTnKoaGm5I2tPUCJTjqg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:17:37 2026 by rpki-client