
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
File: C771ADE0100457DC61EB95A71BB4E63885DC542F.mft (raw, json)
Hash identifier: MNQfCz91eZgCjcIisn33Hhei6mkOKD0gXpEHSzyF3iI=
Subject key identifier: F0:D9:24:60:C0:BD:7B:2E:17:85:E5:C6:19:F4:4B:5B:63:E3:FB:D3
Authority key identifier: C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F
Certificate issuer: /CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
Certificate serial: 5B2963ABE163AC4550EA78375CD1B7062089DF78
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 01:28:48 +0000
Manifest this update: Tue 12 May 2026 01:23:48 +0000
Manifest next update: Wed 13 May 2026 05:21:48 +0000
Files and hashes: 1: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: cnrnucshQjB1HR7ilM8foFskZiCRkLLcdgQGq/I0/j4=)
2: C771ADE0100457DC61EB95A71BB4E63885DC542F.crl (hash: 6ChfAzMhz5+qRCzQTwwQayzeZdRO67QCeobqbPYXYY4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl
rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 05:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:29:63:ab:e1:63:ac:45:50:ea:78:37:5c:d1:b7:06:20:89:df:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
Validity
Not Before: May 12 01:23:48 2026 GMT
Not After : May 13 05:21:48 2026 GMT
Subject: CN=F0D92460C0BD7B2E1785E5C619F44B5B63E3FBD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:db:93:97:3f:bf:73:bc:d5:b9:c8:58:0d:
41:84:c8:9a:d2:a4:4c:6b:59:96:b3:46:87:61:2d:
f4:73:7e:1b:96:a4:33:bd:f3:87:ff:7f:70:28:88:
c3:6d:b8:2f:07:ce:a6:47:4d:26:08:dc:46:65:fa:
85:7f:87:00:07:cc:5d:59:1f:0c:1d:04:6c:22:4f:
49:d1:a2:bb:36:4f:4d:3b:73:cc:df:e5:d0:08:0c:
b6:d5:d2:e8:a9:c3:5c:0c:3f:07:0b:fe:ac:f7:43:
42:81:d0:6b:d3:94:91:fe:cb:75:b8:63:5c:7c:52:
1a:33:41:fd:16:10:e2:f7:c5:a7:73:70:39:e7:15:
d6:26:0c:c3:de:d7:ca:b9:58:56:5c:80:c8:8e:de:
b3:78:77:d7:a5:0e:e2:1a:44:5d:c1:7e:81:e5:a3:
ba:11:c4:27:f6:32:7f:6e:3a:5b:39:ae:fc:7a:66:
3f:49:ae:c9:7f:93:73:89:82:52:9c:4c:41:9b:c9:
d2:11:6c:c3:ff:6d:cc:0e:0d:e6:13:ac:a8:e9:75:
71:b9:a0:e1:5d:fc:10:3c:2a:5d:a7:7a:e4:0a:01:
62:cc:eb:ff:a1:8d:5c:d2:bb:f4:51:ac:99:4c:29:
65:c7:8d:35:2e:51:19:fa:b9:95:e9:61:7c:26:bf:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D9:24:60:C0:BD:7B:2E:17:85:E5:C6:19:F4:4B:5B:63:E3:FB:D3
X509v3 Authority Key Identifier:
keyid:C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:15:27:c5:b0:d5:62:ba:b0:15:ea:cd:7e:c3:36:8f:ee:3d:
10:6d:c9:68:06:1f:65:46:c1:ac:61:62:ba:19:d4:40:61:0e:
9d:53:48:4a:8e:d4:9a:fd:ed:56:ae:8a:75:fa:56:99:a7:e2:
6e:6a:1f:d4:2d:91:20:e3:51:46:db:4b:1d:b4:31:94:f9:5c:
2a:42:6a:ce:2f:48:c9:fd:b0:2b:93:4c:34:6e:84:b4:fd:0c:
e4:1c:d4:db:5a:1d:db:f0:76:69:6f:b7:07:b3:88:77:24:09:
9b:76:8a:57:3a:4f:1a:af:8d:60:b9:4e:96:47:b0:be:64:e4:
09:a0:d9:6d:cb:c2:cf:1c:25:a2:e3:c4:79:13:74:d4:46:ea:
20:70:02:ad:b7:f9:9d:c8:f6:e1:b5:ec:a4:49:a8:ab:34:7f:
15:0f:02:21:06:51:44:1c:29:08:ea:2d:0d:2b:46:0c:57:90:
68:7d:f2:e8:f5:21:e3:4e:5f:21:89:77:55:c2:7d:23:06:4a:
ec:c0:0b:38:1e:14:93:2a:a1:28:f6:34:da:29:93:e1:b1:2c:
2a:f5:d4:83:83:20:fe:cc:57:e2:92:10:26:3c:ee:b0:de:d2:
a4:59:94:9f:e2:1b:76:48:63:d7:91:ac:34:46:f0:e6:d9:26:
ad:f9:0b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:50:05 2026 by rpki-client