
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft
File: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft (raw, json)
Hash identifier: TFBrgyp5Mztg6d5+WdaYBLvQlQZmUqh1Zm4jYLz9PtA=
Subject key identifier: 35:AA:26:48:DC:CE:BB:F1:1A:84:17:D1:C7:CF:7F:53:FE:76:33:9F
Authority key identifier: C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4
Certificate issuer: /CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4
Certificate serial: 142109112C75389F1DB2FDDC799B418FF493EE23
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 06:32:58 +0000
Manifest this update: Thu 23 Jul 2026 06:27:58 +0000
Manifest next update: Fri 24 Jul 2026 08:27:58 +0000
Files and hashes: 1: C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl (hash: 4gBHvPImCtxvGary89lcbO5QD9lFeL1gplQrYRiimvo=)
2: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: Ufj1irifhgIIf9Z+cJ8JRj8meHiqH+Kv6sNyd7Vy/bM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl
rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:21:09:11:2c:75:38:9f:1d:b2:fd:dc:79:9b:41:8f:f4:93:ee:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4
Validity
Not Before: Jul 23 06:27:58 2026 GMT
Not After : Jul 24 08:27:58 2026 GMT
Subject: CN=35AA2648DCCEBBF11A8417D1C7CF7F53FE76339F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:28:0e:01:1a:e9:74:2e:8a:c2:dd:6f:a3:
49:c6:ab:80:bd:fc:ec:98:82:0b:b3:f6:bb:d3:31:
f5:3b:98:06:a8:a3:10:f3:25:43:11:09:2b:c3:d4:
43:5c:55:1f:d6:37:83:70:ba:d7:dc:78:f7:06:ad:
c2:d4:9d:87:0e:6c:d2:e4:a8:fe:f6:33:0a:10:c2:
e5:55:b1:77:77:9a:6e:67:8a:48:86:f6:9b:5a:e9:
9e:14:57:56:bd:04:84:85:3d:5a:eb:68:be:10:03:
2a:f9:0f:c6:f8:93:36:41:2a:ac:13:aa:7c:74:2c:
7a:a1:1d:fb:7b:eb:1e:db:ad:be:cc:e2:57:fd:5a:
bc:85:db:f0:af:96:0f:78:0d:b3:f7:e2:7d:81:c3:
16:84:bb:05:be:4c:32:94:54:f7:11:62:af:65:78:
1d:23:11:7c:40:b6:ef:d2:4d:c8:2f:ba:ba:ce:cb:
5b:aa:38:81:f5:20:72:6a:20:e6:2f:0e:77:e1:a1:
90:73:47:7b:f0:aa:7f:46:45:02:a6:df:5a:8e:59:
a5:ba:52:67:3d:ad:5d:48:f3:9f:df:33:97:8e:72:
d3:2e:1a:26:bd:df:e7:9f:f0:f2:6e:39:d7:11:25:
bb:09:a8:ae:bd:57:a6:12:fb:4a:d9:e7:76:f0:b8:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:26:48:DC:CE:BB:F1:1A:84:17:D1:C7:CF:7F:53:FE:76:33:9F
X509v3 Authority Key Identifier:
keyid:C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d9:60:7e:be:42:92:97:e9:6b:a2:52:42:1a:6d:7b:a7:bb:
06:0e:29:88:d8:0c:2f:b9:4c:f4:c5:4b:33:7a:f6:ea:84:f1:
c0:0b:c5:c6:ec:e0:42:e5:7e:77:b8:56:ef:da:7f:ec:13:c7:
72:aa:e0:32:23:85:ce:1c:d3:2c:15:8d:ea:11:64:a9:dc:10:
15:ae:0a:01:1c:2d:af:86:50:64:28:3c:6a:4c:6d:c3:94:7a:
91:c5:bf:3b:4c:fb:f2:6d:72:5e:14:94:73:33:03:d6:78:37:
b6:28:d8:e5:9f:81:f6:a0:72:45:cf:ce:00:9c:06:48:5e:66:
d2:ea:43:b3:7d:9f:9d:87:56:30:a8:4b:20:5e:18:f0:61:7f:
ff:51:19:08:93:ad:ea:ff:bd:e5:fe:07:ac:dc:f9:29:1d:d0:
63:fe:c8:fc:d4:68:0b:a6:2a:50:df:66:fa:15:fb:3d:1d:ec:
b4:c1:86:89:71:0e:ba:95:df:2f:05:e4:5d:f9:0b:ad:60:fa:
84:3e:de:7d:e1:f0:83:90:76:a2:2c:b6:04:d9:ef:90:bc:09:
14:5d:bd:51:02:a2:5d:f2:ea:2b:d4:cd:04:6d:98:d6:83:1e:
79:de:36:b3:92:0a:01:65:c2:27:1b:a7:7f:f7:d0:fb:fe:c7:
73:4e:4d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:39:43 2026 by rpki-client