
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft
File: 2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft (raw, json)
Hash identifier: TGMUlk7unjmU33p3AM7XkQoshwNy0MGAMhKiEd35QTM=
Subject key identifier: 2C:F0:05:D2:C7:56:95:AD:38:DD:A1:A5:DA:09:D4:9B:C5:93:C5:77
Authority key identifier: 27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A
Certificate issuer: /CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A
Certificate serial: 55AB8DBF3E57F5B26DC07A4850ECE84914279C4F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 09:47:09 +0000
Manifest this update: Tue 02 Jun 2026 09:42:09 +0000
Manifest next update: Wed 03 Jun 2026 13:07:09 +0000
Files and hashes: 1: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: SxuSRhZVuQ01C/J4fBuk49O3beWTR2sEuK9CbWvLAoU=)
2: 2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl (hash: 8Zd6B7OnkIuF74zRAHnMdjq0PqFxDD4FE9EuJYWsAfk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl
rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ab:8d:bf:3e:57:f5:b2:6d:c0:7a:48:50:ec:e8:49:14:27:9c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A
Validity
Not Before: Jun 2 09:42:09 2026 GMT
Not After : Jun 3 13:07:09 2026 GMT
Subject: CN=2CF005D2C75695AD38DDA1A5DA09D49BC593C577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:cb:dd:ba:d3:84:85:30:48:dc:16:0c:0a:
a8:d6:14:48:c4:5e:0a:3f:04:3d:eb:9c:24:f1:2a:
58:01:b4:92:ea:f2:e1:a4:5a:63:ba:ae:9d:bc:a6:
cb:c4:2c:8a:d6:12:f2:73:34:18:90:f3:f8:c9:fb:
da:77:9f:1d:58:07:92:ac:7d:73:9d:a5:44:4f:84:
37:64:b1:09:db:6d:0a:2d:a4:32:74:64:0b:64:23:
6c:6e:bd:38:99:b2:8b:b1:f5:47:62:2f:a4:dc:d1:
98:e9:06:39:88:f7:6a:a5:d4:a5:d6:04:90:be:25:
00:ba:47:5f:5a:4b:b3:b1:12:18:dd:70:f2:df:b6:
ff:f4:4f:c3:aa:07:2c:b6:68:ea:24:69:de:cd:5c:
cb:be:2a:5a:7d:a0:40:a9:40:36:59:84:53:81:0e:
ee:51:97:35:72:6f:a2:72:61:77:2c:07:04:bf:36:
0f:1e:20:cd:e8:65:62:0a:fd:3c:db:71:61:39:e7:
5c:d7:2e:94:c8:0f:96:52:30:82:a4:0c:e7:a0:fb:
90:68:3a:80:c5:44:40:5c:3b:04:14:62:29:a1:b6:
2a:7c:73:26:ff:f5:fd:6a:61:70:26:df:c5:11:e1:
58:38:43:61:a3:fc:bf:7f:1e:d4:48:12:13:a5:50:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F0:05:D2:C7:56:95:AD:38:DD:A1:A5:DA:09:D4:9B:C5:93:C5:77
X509v3 Authority Key Identifier:
keyid:27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5f:7f:d8:b9:70:0e:1c:78:7a:34:29:d1:10:b2:89:1d:71:
5b:72:92:53:63:54:2c:59:aa:ce:c7:dc:64:7c:10:e6:4f:b5:
ea:78:1b:75:d7:4a:60:56:df:04:25:61:42:b9:9f:d5:be:de:
a5:25:60:29:6c:81:99:56:c6:c6:0d:00:ee:9d:0e:43:67:81:
cf:fb:21:4d:86:80:d5:4b:05:1a:e1:2c:97:92:a5:03:c5:bd:
ec:00:58:6e:bd:0e:61:f1:e6:c7:30:d4:b1:49:d4:91:e0:7a:
42:0e:e9:07:22:95:0b:30:57:74:19:13:63:13:fd:fb:61:90:
53:ec:91:f3:60:c4:16:73:b5:e3:42:a5:4e:70:83:58:7c:ba:
3b:d5:d3:d3:71:6c:3d:c1:69:56:bc:e5:b2:4e:f9:75:dc:92:
03:96:d7:65:96:c4:23:31:56:36:95:0a:9e:77:84:a4:8c:b9:
ca:cc:af:fa:14:4c:fb:9e:35:65:50:f6:6c:2e:e5:69:d4:a6:
d8:79:a3:fd:bf:c1:cc:5f:68:7f:66:7d:d7:8f:c3:46:1c:f0:
52:ca:60:57:42:57:0a:3c:d7:d9:65:ab:70:94:ee:10:a3:3b:
df:d5:f6:74:98:5a:1b:45:f5:15:b4:a3:31:64:05:ba:a5:e7:
c5:0b:8c:2c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVauNvz5X9bJtwHpIUOzoSRQnnE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc2OURDQTNGODlGMEI0NDgxMTI3RkY0RTdEQjM0RDc5
NTdCOUI5QTAeFw0yNjA2MDIwOTQyMDlaFw0yNjA2MDMxMzA3MDlaMDMxMTAvBgNV
BAMTKDJDRjAwNUQyQzc1Njk1QUQzOEREQTFBNURBMDlENDlCQzU5M0M1NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbJMvdutOEhTBI3BYMCqjWFEjE
Xgo/BD3rnCTxKlgBtJLq8uGkWmO6rp28psvELIrWEvJzNBiQ8/jJ+9p3nx1YB5Ks
fXOdpURPhDdksQnbbQotpDJ0ZAtkI2xuvTiZsoux9UdiL6Tc0ZjpBjmI92ql1KXW
BJC+JQC6R19aS7OxEhjdcPLftv/0T8OqByy2aOokad7NXMu+Klp9oECpQDZZhFOB
Du5RlzVyb6JyYXcsBwS/Ng8eIM3oZWIK/TzbcWE551zXLpTID5ZSMIKkDOeg+5Bo
OoDFREBcOwQUYimhtip8cyb/9f1qYXAm38UR4Vg4Q2Gj/L9/HtRIEhOlUKCbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULPAF0sdWla043aGl2gnUm8WTxXcwHwYDVR0j
BBgwFoAUJ2nco/ifC0SBEn/059s015V7m5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmUzYTEzOGUtYTJiMi00NjA0LWFkNTAtM2NhYjc1MGE3NWU3LzAvMjc2OURDQTNG
ODlGMEI0NDgxMTI3RkY0RTdEQjM0RDc5NTdCOUI5QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yNzY5RENBM0Y4OUYwQjQ0ODExMjdGRjRFN0RCMzRENzk1N0I5
QjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk
NTAtM2NhYjc1MGE3NWU3LzAvMjc2OURDQTNGODlGMEI0NDgxMTI3RkY0RTdEQjM0
RDc5NTdCOUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGJff9i5cA4ceHo0KdEQsokdcVtyklNjVCxZ
qs7H3GR8EOZPtep4G3XXSmBW3wQlYUK5n9W+3qUlYClsgZlWxsYNAO6dDkNngc/7
IU2GgNVLBRrhLJeSpQPFvewAWG69DmHx5scw1LFJ1JHgekIO6QcilQswV3QZE2MT
/fthkFPskfNgxBZzteNCpU5wg1h8ujvV09NxbD3BaVa85bJO+XXckgOW12WWxCMx
VjaVCp53hKSMucrMr/oUTPueNWVQ9mwu5WnUpth5o/2/wcxfaH9mfdePw0Yc8FLK
YFdCVwo819llq3CU7hCjO9/V9nSYWhtF9RW0ozFkBbql58ULjCw=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:08:52 2026 by rpki-client