
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft
File: 33280920734014336A0249C909A38E7BC1B49F29.mft (raw, json)
Hash identifier: 0R+gq2zLpmcyuNtMUECusMKHe9JDhp+1K5LpAfdgq6s=
Subject key identifier: FD:14:0A:37:27:7C:29:E2:8B:90:EE:76:29:E1:4F:59:DA:8A:84:5B
Authority key identifier: 33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29
Certificate issuer: /CN=33280920734014336A0249C909A38E7BC1B49F29
Certificate serial: 7281FC7781B43BA39977DE556F60DE263FCC6D52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft
Manifest number: BF
Signing time: Wed 23 Sep 2026 01:28:01 +0000
Manifest this update: Wed 23 Sep 2026 01:23:01 +0000
Manifest next update: Thu 24 Sep 2026 05:05:01 +0000
Files and hashes: 1: 33280920734014336A0249C909A38E7BC1B49F29.crl (hash: d3zUhF+Gw71WUYBGJjQsXD5c+ZtEeJDj2YolXGrkjQo=)
2: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: xR2Y5HZPSCwBzoLVtmjeFWlOGn7Q6tcdXN9P57xpYxw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl
rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 05:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:81:fc:77:81:b4:3b:a3:99:77:de:55:6f:60:de:26:3f:cc:6d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33280920734014336A0249C909A38E7BC1B49F29
Validity
Not Before: Sep 23 01:23:01 2026 GMT
Not After : Sep 24 05:05:01 2026 GMT
Subject: CN=FD140A37277C29E28B90EE7629E14F59DA8A845B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:08:75:76:3b:40:6a:88:b8:16:7c:4c:63:
0d:8c:b2:0a:e4:b3:d6:60:77:96:f2:7d:d2:11:bf:
b4:6b:62:21:20:72:0f:a9:54:85:03:93:c6:e3:ad:
88:ab:f2:6a:24:86:da:ac:96:4f:69:22:97:a0:1c:
2c:15:05:76:7f:e3:61:89:a4:5d:6a:f2:bf:e3:cd:
16:82:91:25:1a:17:74:3e:35:09:00:d0:af:45:a9:
7d:88:fe:8b:95:b2:90:84:ff:d1:77:54:50:3e:b9:
c8:8c:e4:34:d8:0b:24:16:a6:38:72:cb:2e:66:a2:
4b:c9:a2:1c:9f:ab:60:0f:18:d0:59:d7:7e:fc:69:
c8:a6:94:89:ab:56:7c:a4:1d:03:0c:51:e5:bb:3d:
7b:b2:83:4c:15:6a:93:b4:3e:ff:ee:08:8e:da:32:
b9:7a:c4:c9:a8:95:21:64:ef:ac:4a:99:73:06:a5:
b5:da:e4:80:59:cc:4f:ee:82:9a:5e:fd:2a:b9:f4:
bb:3a:69:09:bf:34:60:8d:45:f3:78:78:a1:0f:0d:
a9:42:84:23:cc:51:3a:f2:86:70:56:9d:20:f3:86:
82:e8:dd:b7:10:d3:f3:71:4b:17:08:0b:75:f2:60:
b5:77:85:9c:10:f8:72:df:07:5e:ca:4d:80:6c:32:
73:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:14:0A:37:27:7C:29:E2:8B:90:EE:76:29:E1:4F:59:DA:8A:84:5B
X509v3 Authority Key Identifier:
keyid:33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:69:84:ba:58:42:93:36:66:d7:f0:f5:a9:09:88:ef:fa:f3:
57:0e:67:e7:e5:99:4d:9b:00:54:26:6c:f0:29:ce:e8:16:91:
60:63:99:a9:64:21:c6:da:a7:d6:ea:e2:28:90:77:f4:02:2e:
54:20:82:ae:c1:6d:19:9a:d3:2c:b2:a6:53:97:de:6e:5b:69:
29:60:17:f5:b9:bb:22:fc:b2:f0:95:2c:dc:13:40:23:00:92:
a1:13:53:ce:2d:86:2b:61:4e:4c:02:e1:3c:34:33:a7:40:8f:
87:9e:12:85:0f:fb:b8:16:e5:46:09:8e:45:7c:04:9b:99:79:
37:69:0d:b7:1e:29:15:8b:99:99:aa:6a:b1:05:ed:ec:92:82:
1f:bb:18:42:10:71:2b:b5:59:06:ba:cc:08:03:3b:3b:11:03:
07:8e:bb:bb:ba:42:a3:01:99:8c:83:fc:54:59:d6:44:0d:75:
1f:fa:56:6f:27:e8:49:c9:c4:f0:a6:01:44:6e:58:7a:9e:65:
ed:61:80:c7:53:b5:95:b2:4c:4e:56:a6:19:9a:05:8f:e9:47:
b7:3b:22:b8:44:49:44:20:33:00:b6:11:c6:46:24:67:a6:3d:
87:f9:1d:9d:7d:38:04:d6:3d:25:b5:ed:2a:c5:22:22:23:cc:
7c:e9:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:59:40 2026 by rpki-client