
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft
File: 56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft (raw, json)
Hash identifier: ceKh3f3law5F47YyYDqMP5Bv0tXIsawZBJZYO3latOs=
Subject key identifier: 1F:51:52:AE:E3:D5:F6:39:A4:33:1A:17:63:19:BE:A4:C8:F3:ED:EA
Authority key identifier: 56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C
Certificate issuer: /CN=56B769F2B369FF1E22C3ADCD3D50EC1DC015246C
Certificate serial: 72CDA3EB891443112138E52F2E09DEA33717245B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 11:04:49 +0000
Manifest this update: Wed 23 Sep 2026 10:59:49 +0000
Manifest next update: Thu 24 Sep 2026 13:49:49 +0000
Files and hashes: 1: 56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl (hash: /E4rGgXLk0U+HspbEAeOISb5n8XOIfab4FEtqL7fdpM=)
2: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: wt9Ra/tPcAxIL+26JpZjFnizoxFKjLikDqtb0PRy/D0=)
3: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: lmjjWgjg6JFV781/I03PASkaI491yTg94cYWOgkDO5Y=)
4: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: Mw0Zx/sSQWD0MgxT9iC938oEtx/GmaYcvCuMJEo7uW0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl
rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 13:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:cd:a3:eb:89:14:43:11:21:38:e5:2f:2e:09:de:a3:37:17:24:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56B769F2B369FF1E22C3ADCD3D50EC1DC015246C
Validity
Not Before: Sep 23 10:59:49 2026 GMT
Not After : Sep 24 13:49:49 2026 GMT
Subject: CN=1F5152AEE3D5F639A4331A176319BEA4C8F3EDEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:1b:9c:69:25:19:2a:6e:22:51:cb:f7:2e:
aa:49:bb:3e:a8:a4:19:94:11:8d:da:ea:11:d5:16:
90:23:bf:3d:c6:fe:38:5a:6e:7e:85:1a:01:34:77:
ba:3a:93:16:ae:7a:47:27:17:8e:cb:9f:61:8f:46:
df:1a:74:56:54:eb:29:7c:93:0d:7f:7f:fd:b1:28:
93:7c:80:e8:c6:e3:00:5b:c8:f4:2a:43:13:66:54:
59:32:a7:57:95:d2:7f:e3:9b:f5:43:5d:0d:8f:6f:
58:5e:63:6a:b8:23:2b:b1:42:f8:94:6f:0e:51:cb:
36:fb:41:f1:73:53:da:60:da:54:64:50:2a:1d:0c:
40:00:71:1e:c1:c0:c9:da:79:b9:c3:61:3d:ce:f9:
1f:11:f4:87:b1:88:19:78:df:dd:55:6c:02:78:c2:
fa:80:3f:29:53:d1:d2:e3:51:b7:c8:d0:32:af:9b:
0d:b1:71:a2:0f:14:c2:6f:35:bd:5e:55:ec:d9:54:
6f:70:f9:a9:5f:30:15:d2:40:b5:f7:9d:44:6d:3f:
2a:41:76:50:7f:e4:4b:e9:a5:06:e1:cf:64:f3:43:
73:34:23:c1:9c:c8:61:27:bb:af:c7:86:40:60:b8:
bf:74:6d:6f:fd:33:c6:b4:5b:df:d4:8b:01:da:04:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:51:52:AE:E3:D5:F6:39:A4:33:1A:17:63:19:BE:A4:C8:F3:ED:EA
X509v3 Authority Key Identifier:
keyid:56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6f:97:d1:04:ef:87:92:cf:c6:f2:0b:9f:2a:de:8a:43:d3:
63:47:d8:ab:33:84:45:25:f7:b1:7c:c6:03:c3:65:36:ab:5f:
e8:0c:46:32:ae:30:f5:91:d6:a2:be:da:7a:f8:05:3c:3a:a5:
69:ba:49:d8:b7:24:2a:d7:08:7a:af:2d:79:e0:d0:f0:ee:9a:
5c:27:59:cc:60:c0:e5:77:0a:ca:42:c3:6e:ae:fd:be:d8:ea:
32:34:24:e4:fd:a6:d0:1c:1b:62:1c:72:38:48:86:fe:5d:77:
c7:0c:ee:e1:44:b6:a3:ba:9b:42:33:a5:b6:7a:3a:65:6c:a2:
a0:57:5c:b0:3c:8f:f7:34:fa:db:6a:29:37:db:3b:c2:10:eb:
c7:b3:aa:8b:32:b3:a7:61:05:ef:e8:97:62:17:25:1b:80:9c:
e7:3d:5b:da:4a:c5:4b:05:57:c8:b3:d8:9d:19:86:73:ea:ce:
3d:60:df:72:e2:04:e8:43:bd:dd:f9:b0:c2:8b:0f:66:2c:77:
29:0f:ce:e0:43:63:c5:d5:bf:03:87:9a:b7:78:e9:cd:a4:25:
86:c9:24:3f:d5:57:ed:a6:ab:2f:95:f6:58:cc:82:d2:b6:a8:
c7:42:c9:ed:fa:e2:47:b2:7a:c0:56:f5:8d:d2:87:fa:7b:2a:
78:32:a4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:43:17 2026 by rpki-client