
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
File: D61B761F0598B8998BF802A069F51103270C6CC0.mft (raw, json)
Hash identifier: AVb2PvkDG+hnVZIGqe42Hr2+KTclITIwOLRRdq/UY4g=
Subject key identifier: E8:DB:EE:AE:14:D9:EB:7F:0B:E4:A1:C8:65:9D:A4:5C:16:40:96:1F
Authority key identifier: D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0
Certificate issuer: /CN=D61B761F0598B8998BF802A069F51103270C6CC0
Certificate serial: 42889F8C364F6BFCC35F367E4FA9BE4710627DCE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
Manifest number: 0105
Signing time: Sat 14 Nov 2026 22:27:20 +0000
Manifest this update: Sat 14 Nov 2026 22:22:20 +0000
Manifest next update: Mon 16 Nov 2026 01:22:20 +0000
Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: JV7kYNU81vIjUMbIQ9WaFlRn0Vf3tZeMtDHyZF3sYe4=)
2: D61B761F0598B8998BF802A069F51103270C6CC0.crl (hash: coH7piefXAV2cwFV4AKKG+g/XbNUrZOrIZJMgmqGcbA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl
rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 01:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:88:9f:8c:36:4f:6b:fc:c3:5f:36:7e:4f:a9:be:47:10:62:7d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D61B761F0598B8998BF802A069F51103270C6CC0
Validity
Not Before: Nov 14 22:22:20 2026 GMT
Not After : Nov 16 01:22:20 2026 GMT
Subject: CN=E8DBEEAE14D9EB7F0BE4A1C8659DA45C1640961F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d4:54:d6:3a:81:a0:54:25:e9:5e:b6:5b:24:
31:ab:a4:c2:9b:f0:0e:1f:1d:37:1b:31:4b:f9:7d:
68:32:cb:21:78:e6:aa:4b:c7:c6:bc:5f:1b:98:88:
89:a8:a6:bd:7e:2b:5b:9f:8b:93:2d:47:2d:dd:c8:
04:eb:c0:83:00:1c:2f:10:60:be:00:c8:fd:72:75:
4b:d6:dd:cb:5f:09:07:d6:63:ce:1e:ee:11:ed:74:
8c:71:46:f3:53:d4:82:b3:6a:d7:fc:cb:03:10:3e:
c8:d8:ea:9b:5a:63:7c:b1:e6:bc:95:62:8d:ee:09:
8d:fb:7a:38:10:25:82:c1:bc:2a:6e:9b:83:08:a0:
58:c0:ad:43:f2:09:ba:cc:c1:30:cd:0a:ff:79:85:
19:02:21:12:3e:13:ed:8e:62:a8:73:40:0e:70:64:
23:72:8a:b0:d8:60:a3:b0:b8:96:36:cb:80:f0:a0:
d5:07:f5:c9:40:25:05:d4:7e:c5:3b:c3:a3:1d:d9:
f4:2a:86:10:d6:83:3b:2b:31:63:e9:b5:b6:67:01:
f6:c4:32:c7:78:0f:92:2c:8d:46:81:5c:48:64:b7:
e2:38:75:71:66:30:28:f2:ff:2c:9c:51:82:22:1c:
83:9c:e9:a4:ee:e8:e1:9c:92:23:04:35:0b:12:45:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DB:EE:AE:14:D9:EB:7F:0B:E4:A1:C8:65:9D:A4:5C:16:40:96:1F
X509v3 Authority Key Identifier:
keyid:D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e8:7b:8b:77:54:81:6a:f7:d8:db:f0:94:23:88:12:20:b2:
c5:91:1e:d1:61:d4:5b:82:ba:d1:8c:97:45:2c:8e:8e:cc:b8:
9b:6b:e8:86:bb:d4:ff:06:0a:77:32:13:5c:0b:db:e2:4d:02:
54:b7:a5:18:67:3a:66:65:2a:11:8e:48:7f:8c:3d:c1:43:67:
c8:98:2a:4c:1a:da:b1:c5:71:0d:4d:72:19:1b:9e:ed:d6:6b:
38:f5:11:21:73:52:5a:d0:59:14:c9:bb:41:bc:da:e4:ad:fa:
c9:82:4c:ee:0a:8f:d6:63:86:62:3c:d3:af:2c:ee:ff:47:d6:
15:c6:00:67:73:b6:43:99:26:99:b2:83:84:b8:20:a2:67:4f:
bc:a0:01:1e:9e:67:ac:81:61:20:e4:68:ea:ea:fb:a3:98:86:
3c:e0:ff:ed:3a:38:72:96:4e:bb:68:31:3d:5d:4b:21:6b:6e:
f7:c8:5b:1b:3e:e2:ac:d2:2f:a5:08:44:21:b2:86:d5:b0:d4:
63:08:1c:f4:71:77:f9:07:dc:db:20:8a:3f:55:7e:f4:6d:a6:
c2:74:2f:b3:12:cd:48:e8:08:92:71:e4:13:7d:ba:1c:1d:7f:
6e:3b:5a:40:90:67:36:ca:e3:4e:8f:38:79:ef:6d:92:d8:f3:
f9:77:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:02:12 2026 by rpki-client