
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
File: D769452C15749C457029AB81E06B7D36C9F48804.mft (raw, json)
Hash identifier: sw5wffjSh/Y2D/zbxXlMqwiJ6x1dbwz3eEMq5YYWgjc=
Subject key identifier: 01:65:D0:AB:8D:BD:78:58:ED:76:69:82:18:B0:B4:D1:27:06:08:C2
Authority key identifier: D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04
Certificate issuer: /CN=D769452C15749C457029AB81E06B7D36C9F48804
Certificate serial: 6F8FFB4D4641DA10E4A2EC7B2CE173F877617E36
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 03:53:20 +0000
Manifest this update: Tue 12 May 2026 03:48:20 +0000
Manifest next update: Wed 13 May 2026 05:41:20 +0000
Files and hashes: 1: D769452C15749C457029AB81E06B7D36C9F48804.crl (hash: jJDFyYyGx1KMKkZvHmi1T/CqrWANTWipZMCPl8/8+kY=)
2: 3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (hash: FxemyMpIsKKyeyZF+nt8pq/Wh2yMuBg7NUlyoxRZXT8=)
3: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: Wgp2Ly277xiC/SJ4ahqqMWo1yKBGTp7hlr1qa44tvrs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl
rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 05:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:8f:fb:4d:46:41:da:10:e4:a2:ec:7b:2c:e1:73:f8:77:61:7e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D769452C15749C457029AB81E06B7D36C9F48804
Validity
Not Before: May 12 03:48:20 2026 GMT
Not After : May 13 05:41:20 2026 GMT
Subject: CN=0165D0AB8DBD7858ED76698218B0B4D1270608C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c5:53:1f:da:6e:8e:c1:2c:a4:d2:d9:a2:b6:
27:45:bb:9c:96:fb:7b:f6:b7:eb:05:e9:e1:8b:30:
f0:c4:06:ac:99:92:2e:29:df:b2:94:ec:b1:cb:64:
0e:fc:3c:0e:33:13:f8:be:75:85:00:e1:ac:aa:64:
cd:ef:f3:81:47:32:ea:cb:01:6d:e5:56:1a:87:70:
b8:48:60:ad:d8:17:d3:70:e5:15:a9:97:6d:77:f3:
85:c6:ed:e0:1b:ca:2c:f8:eb:e2:23:2b:c2:9b:5c:
3b:b3:a8:eb:a2:ed:08:8d:b7:18:54:72:fb:7f:9e:
4e:c9:fd:bf:3a:44:88:f8:40:59:15:3b:7f:c8:f8:
49:12:ae:1e:d4:a9:87:9f:a6:b8:f0:a3:9f:ad:3b:
9c:7b:eb:e0:39:b0:79:5a:f2:a1:64:f6:7d:89:e8:
c4:34:af:c6:90:b7:ac:e9:17:c1:22:db:9d:9d:96:
f7:a3:c4:03:e4:06:e6:a5:2b:b1:93:9c:9e:d3:2c:
75:58:c3:c9:af:78:8d:68:00:5a:55:13:fb:07:a7:
91:7c:0d:05:3d:db:b9:56:2a:55:ae:ba:16:15:92:
fc:06:d0:4a:23:df:f0:1c:b0:d7:fd:e7:5f:f7:ae:
0d:c1:15:2f:75:a2:a0:7a:b3:47:03:04:a6:3d:bf:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:65:D0:AB:8D:BD:78:58:ED:76:69:82:18:B0:B4:D1:27:06:08:C2
X509v3 Authority Key Identifier:
keyid:D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:82:d4:bd:3b:d0:7e:af:f6:cb:21:27:f7:e4:29:8e:bf:3a:
83:b4:5e:22:3a:a2:91:52:47:fc:6e:9d:a2:e8:37:2c:31:32:
c4:b4:14:05:62:1b:47:e0:03:7a:3f:92:cf:3b:41:c8:2d:d0:
d1:e7:d1:47:db:7f:16:fa:ef:b0:2e:4d:1d:4d:d2:b3:7b:b2:
2e:14:e1:f5:f2:c4:90:a1:04:f9:91:7d:c0:53:3e:61:33:35:
e6:22:08:0d:e5:53:8d:f7:4a:17:8a:37:9d:7b:b9:78:4f:04:
9f:e9:98:ba:e9:f8:38:f9:59:f6:d4:b4:75:dc:11:31:e1:9c:
b4:3a:f2:c7:7c:36:2a:44:bf:a2:af:e5:e9:3c:43:8e:4b:98:
75:3a:81:0a:a4:06:40:6e:6f:d6:25:e2:d6:d0:14:3c:e4:b5:
ac:6d:6b:24:14:6b:f2:42:64:32:4b:4f:44:c5:2e:56:02:55:
bb:0e:72:c4:85:f3:58:62:2e:c0:3a:8f:05:63:68:ef:b9:ac:
84:35:6c:fe:87:65:40:30:c7:4e:75:ad:73:3b:c3:e7:2a:f5:
c3:4f:23:52:6c:e6:2b:74:f6:fe:10:80:85:76:b7:03:94:7f:
3c:d1:3d:0d:78:25:e8:f6:d4:ce:91:bf:fa:d3:ec:30:07:6b:
bc:b1:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:26 2026 by rpki-client