
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/1/377F03CB1160F21D8C997DFEF33095D9F5E2536D.mft
File: 377F03CB1160F21D8C997DFEF33095D9F5E2536D.mft (raw, json)
Hash identifier: rZPOGBN8XKOz4v0Dx07P0DcdhfLod4qpCEkNl7q1F6s=
Subject key identifier: 05:DB:D0:39:A2:2F:A3:C8:8D:34:D1:61:AB:A4:54:E0:56:C9:9D:1A
Authority key identifier: 37:7F:03:CB:11:60:F2:1D:8C:99:7D:FE:F3:30:95:D9:F5:E2:53:6D
Certificate issuer: /CN=377F03CB1160F21D8C997DFEF33095D9F5E2536D
Certificate serial: 73C32120028ABA487116E1C34D091E798657E8EC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/377F03CB1160F21D8C997DFEF33095D9F5E2536D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/1/377F03CB1160F21D8C997DFEF33095D9F5E2536D.mft
Manifest number: 20
Signing time: Mon 02 Nov 2026 16:38:43 +0000
Manifest this update: Mon 02 Nov 2026 16:33:43 +0000
Manifest next update: Tue 03 Nov 2026 19:27:43 +0000
Files and hashes: 1: 3136322e342e33302e302f32332d3234203d3e20313339323333.roa (hash: Id+gOc5NV6UdpM/ghcl/HV1B4q7EczYfG3S0s8lSJMk=)
2: 377F03CB1160F21D8C997DFEF33095D9F5E2536D.crl (hash: qHJLcOcLfTysNe/np33sMcJCgVK/0ld8n9pTywQKav4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/1/377F03CB1160F21D8C997DFEF33095D9F5E2536D.crl
rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/1/377F03CB1160F21D8C997DFEF33095D9F5E2536D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/377F03CB1160F21D8C997DFEF33095D9F5E2536D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 11:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c3:21:20:02:8a:ba:48:71:16:e1:c3:4d:09:1e:79:86:57:e8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377F03CB1160F21D8C997DFEF33095D9F5E2536D
Validity
Not Before: Nov 2 16:33:43 2026 GMT
Not After : Nov 3 19:27:43 2026 GMT
Subject: CN=05DBD039A22FA3C88D34D161ABA454E056C99D1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:23:34:20:54:65:04:fa:6a:4b:fc:6c:d3:
54:b5:6b:6e:8f:02:cf:fa:2b:83:85:25:be:44:d2:
ba:5a:05:45:9b:ec:51:54:4e:13:a3:a2:6c:93:97:
3c:d1:0f:81:c8:c5:27:14:33:ce:de:2c:9d:2a:22:
b2:1e:03:12:55:46:ee:73:c2:f4:bc:12:49:67:d3:
61:75:37:de:89:ce:e3:43:dd:00:a2:3f:bf:68:7e:
48:f7:e5:8f:e1:bf:6c:b4:76:86:ff:9b:b1:11:09:
a2:92:63:e2:c6:9e:4b:b2:b6:97:d6:05:7c:96:fa:
72:bd:29:8c:e5:a6:b2:14:f0:f4:dc:21:37:b5:03:
7d:79:cd:d7:f4:6b:44:f3:66:dd:9e:09:bd:78:ac:
5a:14:c5:57:32:11:66:22:39:56:d5:9e:0d:c0:9c:
5a:bc:51:29:a0:5a:c7:d3:15:56:01:6a:4a:5c:e2:
79:bd:18:98:0a:50:8c:9e:8a:f2:db:d9:8b:bb:18:
ac:26:9c:9e:7a:c9:a6:b7:75:84:a3:22:86:50:7d:
3e:84:56:a8:64:e4:24:85:7d:90:77:7f:93:72:6f:
5e:27:26:06:e1:b0:37:29:49:05:83:69:4d:3f:49:
41:78:56:a2:d9:77:f3:1a:21:08:a5:4a:db:c8:6a:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DB:D0:39:A2:2F:A3:C8:8D:34:D1:61:AB:A4:54:E0:56:C9:9D:1A
X509v3 Authority Key Identifier:
keyid:37:7F:03:CB:11:60:F2:1D:8C:99:7D:FE:F3:30:95:D9:F5:E2:53:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/1/377F03CB1160F21D8C997DFEF33095D9F5E2536D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/377F03CB1160F21D8C997DFEF33095D9F5E2536D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/1/377F03CB1160F21D8C997DFEF33095D9F5E2536D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:81:8b:8f:5d:7d:08:7d:b1:32:55:2c:00:04:69:1a:e9:bf:
10:f5:0b:1b:e9:5a:ec:cf:fa:e9:f5:98:c7:aa:88:f0:b3:14:
26:dd:a3:31:b1:21:f8:c5:7a:a2:4f:d4:f9:c8:12:98:8f:06:
bd:66:5d:7c:59:7e:7c:88:90:96:fa:1c:75:99:91:51:34:6d:
55:f2:83:07:1e:dc:d4:c6:5b:1c:5a:fa:4c:26:cf:be:38:71:
74:f8:f1:c0:bd:c2:4e:52:d9:be:0f:30:94:73:a8:96:2d:67:
f5:f0:c1:74:29:63:ba:73:8b:8a:68:2f:e9:b3:64:61:b2:e8:
8c:8f:ab:f5:d6:a1:c8:45:c1:dc:13:15:9b:af:cf:42:d6:23:
7b:44:d6:cf:3e:38:a6:b2:c7:b5:b2:15:0c:08:73:b0:9a:4c:
f6:dc:a2:d7:ab:cc:d5:c8:26:aa:98:eb:28:76:61:b0:82:5e:
48:30:7e:84:cf:04:da:67:3c:1f:c1:7d:5b:3b:a1:54:5b:bf:
44:b4:6c:5d:08:a6:2a:d2:8a:ae:e7:ec:d2:e1:0a:94:b5:b5:
fa:9e:21:ad:1a:db:2b:04:b7:b1:f3:df:08:5e:fa:60:5a:44:
06:e5:f3:cd:e4:67:06:01:52:d1:f6:12:a4:f6:e4:d1:31:bc:
38:08:d4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:08:40 2026 by rpki-client