
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.mft
File: E2807BC52478D8B3952B24F68408B7477218FD9C.mft (raw, json)
Hash identifier: DGDIbnvS6hnCGcIgO4nSJG/BQC1BohAtI3X7iF7Ugag=
Subject key identifier: 7B:27:1A:E5:8D:47:7F:42:53:D4:07:30:06:67:B7:0F:64:E1:DC:C2
Authority key identifier: E2:80:7B:C5:24:78:D8:B3:95:2B:24:F6:84:08:B7:47:72:18:FD:9C
Certificate issuer: /CN=E2807BC52478D8B3952B24F68408B7477218FD9C
Certificate serial: 1F2C1513516C8CC99A9A0A1213CEB3455BB6C9C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2807BC52478D8B3952B24F68408B7477218FD9C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 12:46:41 +0000
Manifest this update: Thu 24 Sep 2026 12:41:40 +0000
Manifest next update: Fri 25 Sep 2026 16:21:40 +0000
Files and hashes: 1: E2807BC52478D8B3952B24F68408B7477218FD9C.crl (hash: BMPtp/M5QGuMfJkBBLxGGdTBE55DIofctSUStox1wcY=)
2: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: dt4pmE76WMWzPNZkKU1y0T8GmeM++xgUm8+x5NAeCc4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.crl
rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2807BC52478D8B3952B24F68408B7477218FD9C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 16:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:2c:15:13:51:6c:8c:c9:9a:9a:0a:12:13:ce:b3:45:5b:b6:c9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2807BC52478D8B3952B24F68408B7477218FD9C
Validity
Not Before: Sep 24 12:41:40 2026 GMT
Not After : Sep 25 16:21:40 2026 GMT
Subject: CN=7B271AE58D477F4253D407300667B70F64E1DCC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:4e:f9:ab:67:f3:7c:28:cf:0c:5f:78:34:
cc:78:ab:e9:b4:2b:31:4e:9b:41:b0:a8:45:61:01:
d4:5f:0c:2f:7c:8e:23:22:f3:c8:d3:7a:0c:8f:e1:
63:2d:8e:2a:9e:02:87:c3:a3:cc:56:df:60:64:2c:
f1:71:97:9d:91:10:a1:d4:35:9f:9e:e9:45:0b:8e:
cf:de:96:36:6c:96:62:dc:f0:1f:de:61:e1:db:9c:
1a:8a:66:25:dc:0b:f3:e7:c6:b2:87:9a:db:ab:86:
30:cf:d6:97:d8:73:8e:09:aa:db:35:86:54:17:38:
b7:9d:43:03:08:f0:82:35:fe:cd:73:45:5a:a7:74:
7e:9b:39:5d:5c:a1:11:c9:bb:33:f0:4f:66:ca:2e:
51:1c:05:cb:8a:b6:45:bc:b2:40:80:87:20:9e:96:
17:33:ae:7e:a2:d1:74:4b:88:a9:fd:64:b1:f9:9e:
c1:cd:ce:bc:e4:07:4b:08:ce:2e:fb:8b:02:86:a1:
b2:6c:e6:b4:63:37:c3:e6:7b:07:2d:0b:97:d9:35:
53:61:b5:83:aa:27:c4:97:31:49:25:07:5c:13:45:
56:02:77:c7:3f:f2:2c:a1:ea:e5:3c:4a:90:38:21:
38:82:7f:e9:cb:f0:64:a2:2e:68:87:c8:e6:1e:d4:
6f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:27:1A:E5:8D:47:7F:42:53:D4:07:30:06:67:B7:0F:64:E1:DC:C2
X509v3 Authority Key Identifier:
keyid:E2:80:7B:C5:24:78:D8:B3:95:2B:24:F6:84:08:B7:47:72:18:FD:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2807BC52478D8B3952B24F68408B7477218FD9C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5f:bf:02:84:08:c0:33:27:57:98:30:8d:87:65:9b:d3:46:
b9:76:e3:62:b1:0c:9c:16:af:a6:11:22:88:7b:f1:ae:46:d3:
4c:f0:1f:56:17:be:1a:84:8e:ba:c1:02:55:32:a6:2c:89:92:
09:ec:96:e6:0e:5b:27:dd:cf:c6:2a:b1:94:7e:40:68:0a:01:
ee:bd:03:72:18:07:21:e7:b1:12:ad:ba:a6:ee:9d:ca:26:a9:
f7:f3:1b:26:b3:ea:41:da:de:60:06:08:6c:85:3f:49:6b:46:
da:92:d7:a6:92:25:80:fc:d9:0c:6c:66:e8:2a:d9:60:e8:13:
92:2f:00:0d:83:28:c7:27:1e:70:35:5b:c7:e7:ba:8a:61:88:
a7:49:1d:fa:15:9b:89:1c:8e:c5:54:67:c3:ac:63:0a:29:20:
2b:6c:8b:80:4d:70:fc:e6:68:b6:19:7a:41:b3:f3:5b:3c:b2:
9a:61:48:7e:ea:fe:c0:aa:6c:85:fe:59:e9:91:78:b6:a3:a7:
07:09:4c:df:95:87:9c:95:1d:f8:19:31:6b:f9:49:03:0e:10:
59:e5:17:ed:90:80:d9:a2:0d:8a:34:86:44:f4:02:c8:3d:66:
53:4d:b1:35:e9:da:e7:40:22:aa:db:91:45:e3:88:8b:5b:c3:
9e:75:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:52:44 2026 by rpki-client