
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
File: C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft (raw, json)
Hash identifier: Rf4a+Bn/4A2iB/eqjChzix0RGQCL60KNooD6qHdZTJc=
Subject key identifier: F2:79:AB:09:E4:71:2F:BB:58:93:41:C5:2D:18:40:12:84:2E:0F:FD
Authority key identifier: C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19
Certificate issuer: /CN=C81C7BADCE1CC5075C398F6A91BF29C79B9D2419
Certificate serial: 2F422D00864121053D159627A8B3EFBBF148B747
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
Manifest number: A3
Signing time: Wed 02 Sep 2026 09:35:22 +0000
Manifest this update: Wed 02 Sep 2026 09:30:22 +0000
Manifest next update: Thu 03 Sep 2026 12:25:22 +0000
Files and hashes: 1: C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl (hash: z3ys+8PuvBYToZbZavnUWTRmKsxZN3eZvWETUUAvcRc=)
2: 3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa (hash: l8WWbVdsfCxIG53KEYuD2G886pY6gWcw9Sl2OeYKNN0=)
3: 3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa (hash: IVfgbGei5sG8aHxKcQ03LzSWtbMPZQoN7TQZBqmMcs8=)
4: 3130332e36382e3231332e302f32342d3234203d3e20313530353330.roa (hash: IpOu0hw1kU1giNWGBV8+r7d/kylv24hX1J5iHuymIp0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl
rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 12:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:42:2d:00:86:41:21:05:3d:15:96:27:a8:b3:ef:bb:f1:48:b7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C81C7BADCE1CC5075C398F6A91BF29C79B9D2419
Validity
Not Before: Sep 2 09:30:22 2026 GMT
Not After : Sep 3 12:25:22 2026 GMT
Subject: CN=F279AB09E4712FBB589341C52D184012842E0FFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:13:10:ac:67:11:03:90:c6:2a:ba:e5:e1:
17:54:6c:02:55:43:b4:33:ff:19:4c:32:4a:14:ef:
29:90:d6:10:8d:f1:0b:10:65:2f:24:83:3f:1d:e8:
89:1a:1c:bb:2e:93:cf:58:f8:37:bc:d0:0f:81:14:
90:bf:db:90:ab:29:aa:e8:39:0c:92:58:6e:c9:7c:
7d:54:e2:98:5e:9d:68:dd:2a:3e:71:de:10:49:ea:
10:e4:c1:9b:d3:d9:23:74:d3:b9:13:c6:d1:c7:79:
e8:81:db:00:a5:01:65:37:32:e9:d5:ca:2f:b1:8d:
eb:b5:94:2e:6b:c0:e9:59:d5:dd:25:0e:ff:1b:2a:
cf:8b:3c:8e:2e:ca:b9:c9:d4:71:80:4a:c0:c7:7a:
53:12:13:e9:1d:b1:c1:d7:77:d6:6f:3e:b6:34:e6:
5c:dc:df:9a:c3:c4:43:c2:a6:64:d9:77:a9:df:1e:
71:1f:95:85:5a:f2:bb:d9:8c:3e:e5:f4:d2:f8:29:
32:69:4a:40:24:9f:ea:2c:73:64:b7:dd:b6:a1:49:
10:5d:d9:e3:19:72:b7:61:db:a8:83:cd:10:ec:65:
bc:7d:8e:55:08:c1:12:8a:9e:98:21:cd:6c:61:e2:
3d:75:da:ca:82:e0:b9:9c:91:80:87:6b:8b:ca:cb:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:AB:09:E4:71:2F:BB:58:93:41:C5:2D:18:40:12:84:2E:0F:FD
X509v3 Authority Key Identifier:
keyid:C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:31:e5:8a:83:86:e0:4b:51:2a:59:0d:09:aa:39:7b:3f:91:
45:88:36:04:2b:c4:bd:ca:cb:f8:fb:be:d7:13:9d:3e:4e:63:
b2:3a:3c:76:8e:a9:52:00:a7:04:26:8b:f5:59:56:11:b0:d0:
f1:73:73:28:ee:ce:17:63:30:78:10:6c:c2:6a:1b:e3:36:53:
25:5e:4b:87:f4:c8:08:c2:88:6f:7b:f7:9d:01:cf:32:03:96:
77:5e:07:51:a5:ff:d6:c6:7c:02:63:43:6c:9e:23:33:5b:dd:
cf:86:f7:b4:e2:de:3e:38:65:71:db:6b:5f:9d:7d:ec:c2:1f:
34:66:29:d8:51:cc:f9:73:43:ef:7e:cf:a0:43:c2:3c:84:b3:
3d:84:19:35:7a:fa:70:7c:5e:b0:83:0e:df:cd:89:b6:83:bb:
63:a8:3d:92:93:fe:75:b7:bf:51:b7:3d:95:ac:e7:42:66:db:
06:6c:07:a4:9b:0a:89:85:bc:2d:32:59:35:ea:4d:c1:e9:b9:
70:c6:77:9f:f2:0f:eb:24:1d:3e:20:a4:af:bb:5c:c6:bf:f9:
25:2d:6a:12:9f:0b:51:46:2f:68:88:55:26:71:cf:71:fb:c0:
c7:4d:13:59:42:cb:95:0a:d1:68:ac:d9:f0:29:aa:95:9a:eb:
72:77:49:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:56:22 2026 by rpki-client