
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft
File: 267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft (raw, json)
Hash identifier: MCgdCBABFaSQNFqR5c+jxAqMD2DHNidNNQ1Aooxql10=
Subject key identifier: DF:A0:73:32:C8:F9:FB:64:FF:72:4E:B8:87:28:F9:64:FE:71:F3:EB
Authority key identifier: 26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23
Certificate issuer: /CN=267E9A66F7A7C78F7CC7C04986D61B87DEBF5123
Certificate serial: 67EB4F685A805410E10512BEADCC08F32F9C3831
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 09:51:08 +0000
Manifest this update: Tue 12 May 2026 09:46:08 +0000
Manifest next update: Wed 13 May 2026 13:43:08 +0000
Files and hashes: 1: 267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl (hash: krIkoFFxusffmlHavxg5SE4GuQ/btcVTks3AfAtPx2k=)
2: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: vTNwoFQSRd6UXwDXhePDtYRySxnP7vYZs8QtGgvL7F8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl
rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:eb:4f:68:5a:80:54:10:e1:05:12:be:ad:cc:08:f3:2f:9c:38:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267E9A66F7A7C78F7CC7C04986D61B87DEBF5123
Validity
Not Before: May 12 09:46:08 2026 GMT
Not After : May 13 13:43:08 2026 GMT
Subject: CN=DFA07332C8F9FB64FF724EB88728F964FE71F3EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:9e:2a:73:58:6a:a0:ec:5b:aa:ce:6f:8b:
be:10:41:24:00:34:28:f2:81:d8:d6:07:be:b0:79:
a0:d1:a3:6e:c5:10:ad:55:44:8d:24:da:e9:50:82:
28:b1:7f:4d:5e:30:5a:56:59:a6:65:e0:79:67:df:
27:d1:ed:75:85:ab:c9:5a:4d:cb:b8:32:c5:7e:8a:
63:df:5e:3f:59:4f:28:ab:35:a3:8c:93:75:3b:f1:
f9:5b:22:98:0a:e8:f8:86:4b:a9:74:6d:72:b0:a0:
ee:9e:33:24:1f:a0:35:e9:99:41:08:b1:b1:41:d4:
1e:4f:71:8c:d2:80:a7:65:cd:8c:39:1a:33:6f:b3:
c7:71:61:d9:e2:03:90:91:fe:03:a7:81:bb:3b:85:
e4:99:b1:86:a2:47:36:72:2e:1b:02:1b:b6:43:73:
1e:d9:c0:fb:1e:ca:87:eb:4c:c6:85:b0:18:57:ba:
ae:a0:0f:75:c8:38:e6:c4:c5:bb:c9:42:f2:5d:9b:
54:d7:ec:1e:37:3e:70:34:76:44:62:4d:07:4b:03:
89:b5:be:80:c8:3b:ad:60:7f:f3:1e:62:1a:0f:2c:
b6:01:34:a5:44:cf:84:42:e9:78:ca:2a:d0:0c:73:
bf:68:6c:d4:a8:bd:32:37:e4:ec:60:2e:a1:11:d0:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A0:73:32:C8:F9:FB:64:FF:72:4E:B8:87:28:F9:64:FE:71:F3:EB
X509v3 Authority Key Identifier:
keyid:26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:11:b9:d2:3a:93:99:ba:eb:78:d7:a7:dc:08:40:a9:3a:53:
d4:98:19:ac:8c:1d:d6:ef:32:48:28:79:22:9c:6c:de:0f:e5:
be:29:c7:a2:1e:81:7a:05:3a:ae:17:69:b6:73:e9:f1:61:8e:
b2:00:2f:41:c6:cc:74:9a:be:92:c9:93:ab:8c:b9:e9:a0:e7:
9e:99:9a:1a:f0:18:f3:4d:14:b1:5c:fc:25:32:c8:cd:b9:04:
60:61:ec:4b:68:0b:04:ca:7d:6d:a1:4e:19:e5:5c:e7:42:3a:
7b:b6:1a:01:ee:d1:5f:49:d4:a5:ae:89:9b:31:08:bf:38:6e:
b7:68:c0:30:3c:7b:8c:7d:63:3c:6c:7b:8a:87:cd:d1:0e:b4:
03:6e:96:05:75:03:d5:ab:51:dd:e7:4f:09:e9:96:5b:75:66:
7e:42:8e:ea:0b:28:09:f1:e5:63:5b:49:06:46:55:6c:d1:a2:
1e:ab:d8:58:4f:ed:db:50:09:8b:b5:6e:75:58:b2:c2:13:a0:
43:ae:af:08:37:24:f2:2c:81:60:da:49:9c:49:da:5d:e0:9e:
2f:90:40:77:4f:db:ad:d8:9c:07:cb:f0:a5:4a:5d:b4:c6:d5:
9d:28:c1:bf:6f:0c:25:a9:a4:1d:1c:e0:e3:e0:4b:49:a0:9b:
31:00:a0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:59 2026 by rpki-client