
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft
File: 2CFE6C04191B28EDA13984F5549231D1840AACEC.mft (raw, json)
Hash identifier: O4UvbSl+dezk6XxVk2yCFgH1ivB7cXemtXMPmX+S03Q=
Subject key identifier: 12:7D:F9:19:80:8D:17:4B:22:7D:DD:AD:44:B9:04:2D:2D:3A:5D:15
Authority key identifier: 2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC
Certificate issuer: /CN=2CFE6C04191B28EDA13984F5549231D1840AACEC
Certificate serial: 2C07BDEFBAC495574050857494C55C425F1AB9BE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:39:07 +0000
Manifest this update: Tue 12 May 2026 18:34:07 +0000
Manifest next update: Wed 13 May 2026 20:42:07 +0000
Files and hashes: 1: 2CFE6C04191B28EDA13984F5549231D1840AACEC.crl (hash: vMlFGfQil7saJXUY4iJIh5RZJTu3jumT1DEzIF/pvgs=)
2: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: z7Lqa5CkkfTSXbCBFY/k+Fz/ISz+SJw0HySx4HiNPMc=)
3: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: dFGJI1S/FQoqvRu6ehr7n/qth/1SKexx3mS7zWvVonM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl
rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:07:bd:ef:ba:c4:95:57:40:50:85:74:94:c5:5c:42:5f:1a:b9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CFE6C04191B28EDA13984F5549231D1840AACEC
Validity
Not Before: May 12 18:34:07 2026 GMT
Not After : May 13 20:42:07 2026 GMT
Subject: CN=127DF919808D174B227DDDAD44B9042D2D3A5D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:1d:24:ae:28:88:d2:93:75:23:50:41:01:
2e:7e:28:a1:ed:8e:4b:8b:58:1d:6b:70:d5:ca:43:
8a:9d:d3:a6:a2:67:58:46:fd:8a:55:77:0e:a4:4e:
7d:da:f2:06:69:ec:51:05:5d:e4:c9:bc:22:6f:c4:
db:68:ae:4d:c4:9e:3b:17:cd:6b:bb:23:1d:f2:66:
03:af:14:39:1a:c8:8e:cf:ff:79:1c:fd:35:b2:0a:
50:d7:ed:df:93:7a:b9:6c:87:44:3f:bc:af:78:95:
57:6e:99:79:c8:7e:e6:24:a7:56:ba:2c:e5:06:9b:
6d:40:4e:24:ea:bc:32:b8:d6:df:b1:db:96:50:37:
12:2e:89:b1:59:48:d3:a9:65:b8:a4:08:93:20:ae:
38:43:ff:2a:c0:a0:db:ae:9a:86:35:d0:7f:ca:72:
c9:90:83:7b:76:8b:3a:11:47:9d:0b:7b:48:87:3c:
8b:10:88:a1:95:b3:67:d6:3b:62:28:3c:21:3b:1e:
17:30:3b:96:b6:b5:13:cf:5d:b0:63:a8:77:53:af:
67:ef:fa:d4:a2:f4:95:63:77:0a:7a:1f:b1:8a:51:
64:e8:2d:fa:b4:60:ac:37:07:7e:f6:25:e6:4a:a5:
82:0b:ea:5e:6a:a4:10:4d:ad:eb:92:7e:9c:f4:a5:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7D:F9:19:80:8D:17:4B:22:7D:DD:AD:44:B9:04:2D:2D:3A:5D:15
X509v3 Authority Key Identifier:
keyid:2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:55:4b:04:58:81:9e:6c:3d:e8:49:49:60:23:16:63:4c:36:
65:59:d3:98:10:c5:ef:bc:70:64:97:12:29:9d:06:d2:0b:ca:
c1:36:ba:8e:7d:33:0e:4e:55:c7:dd:99:6e:99:11:d4:54:e9:
dd:1b:bb:17:1e:0c:dd:c2:b0:02:91:78:e2:1b:9e:f4:df:b1:
6b:c1:e7:8f:cc:8b:17:47:b7:37:22:75:42:23:a1:c1:a4:17:
05:70:0a:f7:c9:17:1d:a7:a6:56:8d:a1:c8:50:a8:ec:de:25:
89:70:e9:bc:56:69:e9:9a:01:76:c7:21:7d:fe:82:bd:0c:4a:
5e:1f:9a:9f:7a:42:ef:37:7e:e6:7a:3b:e9:ab:ee:89:ea:55:
73:90:d4:4f:59:ef:e7:74:75:64:59:88:6d:26:c5:21:d5:d7:
86:bb:c5:09:93:56:ec:91:60:9c:d5:9e:e6:c7:35:a0:6d:5d:
c0:f6:24:82:df:68:a9:0b:79:48:26:0a:83:48:3f:e6:25:f2:
d9:e4:ba:a1:60:b4:4f:03:92:b3:f0:c0:a6:12:06:ef:3b:64:
78:cc:0c:ee:b7:08:f6:7f:ea:e6:2b:d1:d1:1a:5e:53:43:0a:
7a:11:ae:b4:bb:08:f5:29:d1:9b:0a:c5:c9:d5:1c:31:7c:51:
83:be:e0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:52 2026 by rpki-client