
$ rpki-client -vvf rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
File: C3CDEFC1D42DBC526894B49382D693AB81922151.mft (raw, json)
Hash identifier: kPsLAZpYKX5CnYD8x3YgFUfEjwQsq40E7eJkQUMkqfw=
Subject key identifier: 2E:E0:35:87:86:E1:27:1D:2A:0E:1B:C7:87:62:F8:06:BE:F5:B6:18
Authority key identifier: C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51
Certificate issuer: /CN=C3CDEFC1D42DBC526894B49382D693AB81922151
Certificate serial: 3F80F44246C6F728085DEFD75E939C5AB805F367
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 01:56:34 +0000
Manifest this update: Fri 24 Jul 2026 01:51:34 +0000
Manifest next update: Sat 25 Jul 2026 04:46:34 +0000
Files and hashes: 1: C3CDEFC1D42DBC526894B49382D693AB81922151.crl (hash: VAsyU9dwr0OrVR0llvzen0T6ee0IlucRnGDZRzQRZoQ=)
2: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: U7/0nIu+Bj5x9bRwZDPcfh3tl44rRdCnsM5J63akTiA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl
rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:80:f4:42:46:c6:f7:28:08:5d:ef:d7:5e:93:9c:5a:b8:05:f3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CDEFC1D42DBC526894B49382D693AB81922151
Validity
Not Before: Jul 24 01:51:34 2026 GMT
Not After : Jul 25 04:46:34 2026 GMT
Subject: CN=2EE0358786E1271D2A0E1BC78762F806BEF5B618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:a3:53:84:b6:bf:6d:22:16:53:9e:2a:77:
1f:fc:a0:0f:58:e6:f7:20:55:1d:72:c9:ab:c4:77:
aa:c0:0b:11:5e:64:ea:6a:1f:60:03:0b:91:9a:c6:
8f:03:4b:8e:d1:bb:c5:05:f7:f8:c4:cc:b1:a4:cc:
d5:08:19:e8:e1:ce:70:15:a5:6a:40:5d:f1:b9:8d:
27:27:b6:d5:0c:74:e4:04:90:b0:74:8d:f9:09:48:
57:a4:dc:69:a2:58:71:2f:a2:58:5c:82:be:d3:e8:
15:eb:98:83:cf:8b:09:58:ef:93:01:35:b8:14:83:
81:8f:ba:0d:ca:89:87:ca:0e:b5:07:ba:e9:90:38:
66:73:08:b7:22:43:8e:7b:7e:bc:b3:38:36:3b:6b:
94:fd:77:d8:f1:05:87:41:50:97:82:70:03:53:cd:
ef:5a:12:c2:21:be:50:e5:d8:dd:d4:8f:c7:6c:a0:
65:44:ea:6f:04:15:5c:9b:21:6a:f4:82:7f:1d:e7:
3f:46:6f:a3:b8:56:97:96:1a:d8:d2:46:5f:f3:9d:
60:19:18:40:a6:8b:8a:ea:27:30:32:79:f1:77:f5:
5c:8e:36:ae:68:cc:94:66:0d:e7:c8:93:92:a9:7a:
a6:f1:42:f4:34:1d:90:c5:05:97:dc:38:64:7b:18:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E0:35:87:86:E1:27:1D:2A:0E:1B:C7:87:62:F8:06:BE:F5:B6:18
X509v3 Authority Key Identifier:
keyid:C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1c:bb:47:89:48:24:13:14:d7:ca:39:5a:44:79:7d:c0:a9:
40:46:7d:c3:d6:f2:63:6d:2b:88:51:3f:cd:5a:d6:c8:ed:cc:
e9:be:8d:83:db:67:92:8c:d4:4a:f8:50:d3:7a:a7:b3:d8:6d:
4d:22:a9:58:25:03:10:a3:5e:fd:12:a0:a7:1a:17:1d:f1:48:
53:28:d0:30:28:0f:6f:07:3a:bc:b9:0d:ff:b4:87:66:0c:7b:
e8:fa:7a:11:c3:59:b0:3f:ba:ca:4a:c5:a5:60:a0:23:a5:e8:
02:7f:53:2a:66:35:12:f0:91:9a:c6:c5:9f:76:18:07:14:f1:
45:9a:82:7f:52:96:20:7b:26:ef:61:0b:d0:6e:83:3b:a3:06:
b2:4d:ee:53:48:22:d9:c5:75:11:73:65:8f:1f:84:e7:ff:ef:
1c:f1:49:ee:03:50:60:75:5e:41:4b:9e:7e:81:10:36:74:00:
f7:f2:28:66:7c:03:51:6b:6e:40:53:f3:70:eb:6d:22:bc:3d:
01:29:d1:3f:ba:2d:7b:ea:9d:59:53:f5:37:7b:05:36:f1:6f:
81:b2:00:04:9a:20:06:62:c6:e0:85:38:26:ba:02:36:d5:a9:
19:56:48:93:e4:b5:67:22:65:c0:d0:e7:12:e6:bb:b1:e0:14:
9b:57:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:29:09 2026 by rpki-client