
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
File: 2BD3626FA7C4C8A787225E35241AD5992151D359.mft (raw, json)
Hash identifier: UueyaU/QV86MNyqSoMUoy+iyhin4JjJ2/oHROgtJ1FU=
Subject key identifier: 20:7D:20:36:53:15:F8:B7:6D:C5:C8:FE:46:78:43:E8:BB:4B:2E:8B
Authority key identifier: 2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59
Certificate issuer: /CN=2BD3626FA7C4C8A787225E35241AD5992151D359
Certificate serial: 7B4DFE5BEF60355C53B4F2BACE96207C95B9CB27
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
Manifest number: C7
Signing time: Sun 27 Sep 2026 06:53:01 +0000
Manifest this update: Sun 27 Sep 2026 06:48:01 +0000
Manifest next update: Mon 28 Sep 2026 07:50:01 +0000
Files and hashes: 1: 2BD3626FA7C4C8A787225E35241AD5992151D359.crl (hash: hYvaoqL+8mD1jjEZ4Lol5dekcxCye29biuZ5xVNYqmU=)
2: 3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (hash: Lts+nDghqdeOjHPLJupIS91t89Hz46DHGxSYyuVdlFI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl
rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:4d:fe:5b:ef:60:35:5c:53:b4:f2:ba:ce:96:20:7c:95:b9:cb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BD3626FA7C4C8A787225E35241AD5992151D359
Validity
Not Before: Sep 27 06:48:01 2026 GMT
Not After : Sep 28 07:50:01 2026 GMT
Subject: CN=207D20365315F8B76DC5C8FE467843E8BB4B2E8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:55:79:20:0e:72:b8:2f:cb:43:5b:d1:d5:
34:d9:52:b4:2c:19:86:22:a2:96:26:4c:99:2a:93:
0d:c7:69:34:4f:e2:8f:cf:75:31:80:cc:98:c6:49:
8e:d8:ad:e1:f5:7a:53:ea:d3:75:77:70:bf:19:b2:
00:77:f5:79:d4:b9:4d:8d:6a:f4:8e:91:91:ea:a2:
81:11:70:36:f5:dc:fd:0f:3f:da:8d:0d:96:16:b5:
e8:65:9d:99:ae:27:66:02:91:fd:94:52:42:6f:29:
6d:b8:2e:07:37:67:61:c1:fb:ab:f3:a9:ad:aa:61:
ff:2e:64:64:d6:37:0c:b5:fc:d0:02:7c:53:b3:3e:
52:ca:c7:9a:dd:0a:ec:57:c5:c3:95:ee:58:03:cc:
bc:c4:e7:ae:06:83:96:0b:36:66:f2:b9:ee:1c:86:
f9:e9:fd:ec:99:29:46:82:c3:94:90:e3:31:e1:da:
eb:d9:1f:38:6c:09:25:11:3c:2c:d9:b3:48:2b:09:
8e:8b:dd:81:a6:f5:7c:c3:19:85:2a:bb:8f:65:df:
65:76:1b:ed:fe:cc:c1:ac:a2:98:41:25:fa:6d:02:
be:73:8c:9a:4d:6f:fb:a2:ab:0a:e7:95:a4:66:7b:
9d:22:9d:a1:59:75:33:8f:2b:e2:3b:1d:3c:41:9d:
f5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7D:20:36:53:15:F8:B7:6D:C5:C8:FE:46:78:43:E8:BB:4B:2E:8B
X509v3 Authority Key Identifier:
keyid:2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8e:c9:72:a5:05:07:f0:26:2d:0e:1e:3a:05:43:86:3a:72:
2f:1b:ac:fc:a9:ed:19:0c:fb:b3:7d:a4:f7:50:2e:4f:73:d5:
65:30:30:00:b9:ae:30:da:55:66:22:74:63:d9:ce:14:58:ac:
8d:d2:0f:f4:d9:62:b5:20:42:88:c0:5e:51:32:bd:de:d0:ae:
f0:70:19:86:28:c6:81:e3:68:f0:e8:7b:1f:ae:35:73:5e:92:
8d:e5:2d:27:b4:fa:7c:81:01:61:43:1b:85:6f:a7:aa:24:64:
24:85:68:98:74:fb:04:b4:57:8e:80:5f:4e:2c:c8:7c:fe:ed:
51:03:10:0d:fe:74:e1:1c:3d:02:1c:52:06:9d:4c:2c:8b:49:
6a:91:30:1c:a4:78:76:ce:17:b4:ef:85:7b:0a:37:93:69:d0:
48:9b:b6:63:df:0b:2c:58:ae:13:9e:ef:2e:4a:76:19:05:60:
44:91:b2:fe:3e:7f:e8:a9:d5:6e:e5:0c:67:a3:8b:ab:96:72:
ab:41:97:4b:60:96:7d:b4:f2:8a:cb:ee:6f:93:cb:ad:5c:03:
66:66:3a:03:3f:3d:28:6b:a1:a0:b0:31:ab:c7:f4:bf:83:c1:
0e:30:fc:6e:62:a7:3a:41:6e:c4:10:fd:e9:de:da:34:e7:24:
ee:01:29:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:25:59 2026 by rpki-client