
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft
File: 2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft (raw, json)
Hash identifier: 7CUGz0GSDTqAM8mk+e0rUQLyZf2zjfiP2qRPAV5JjYs=
Subject key identifier: A2:98:81:AE:0C:16:C1:D2:F7:99:E2:A1:DB:27:A6:6A:87:E3:CF:08
Authority key identifier: 27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A
Certificate issuer: /CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A
Certificate serial: 77E766F8B47710327979615DCDFF71D06C3AAE89
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 00:31:31 +0000
Manifest this update: Tue 21 Jul 2026 00:26:31 +0000
Manifest next update: Wed 22 Jul 2026 04:01:31 +0000
Files and hashes: 1: 2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl (hash: kdbRRTunLlACKDu02jalMpRP0+j17S/ozWoywv05Tvc=)
2: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: SxuSRhZVuQ01C/J4fBuk49O3beWTR2sEuK9CbWvLAoU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl
rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e7:66:f8:b4:77:10:32:79:79:61:5d:cd:ff:71:d0:6c:3a:ae:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A
Validity
Not Before: Jul 21 00:26:31 2026 GMT
Not After : Jul 22 04:01:31 2026 GMT
Subject: CN=A29881AE0C16C1D2F799E2A1DB27A66A87E3CF08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:b1:ce:a7:fc:40:d9:dc:1e:6b:2f:57:6d:
51:5a:24:54:4b:c2:68:2a:05:46:3d:6a:3b:58:bf:
61:42:a0:64:3c:74:f7:b0:6b:ce:f8:1b:77:d6:53:
80:c2:78:a2:85:c8:c8:e2:cf:16:29:9a:f2:fe:4d:
60:e0:09:49:e4:53:47:91:6f:5c:55:4d:8d:80:9f:
db:4c:98:43:e3:3f:56:6c:4e:22:4b:a9:a4:4c:1a:
8a:f6:bf:14:76:cc:25:63:5c:21:33:66:e7:8b:41:
34:3c:8e:98:dc:aa:e1:c7:a9:ea:49:c7:99:3a:33:
7b:bc:23:98:c0:89:20:92:b7:a9:2d:c0:e7:23:33:
60:32:53:5c:51:98:ba:b3:e6:d5:13:63:56:2e:d0:
64:00:a5:7c:42:09:0e:b4:5a:e1:6c:82:29:ab:a6:
46:84:38:98:f1:52:c8:81:e7:07:0a:dd:02:a0:3c:
17:c9:50:40:a5:91:13:d1:77:f1:4b:2f:1b:68:cf:
d2:29:59:d8:0e:48:07:3f:49:14:c3:42:19:17:ba:
ed:e7:51:0a:a8:a1:2a:cd:44:db:10:9c:58:99:1c:
18:77:7d:95:c5:34:85:ab:cf:72:47:c4:a5:00:bc:
52:85:dc:e8:00:28:62:7b:e0:aa:f1:cc:a7:9a:cb:
bc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:98:81:AE:0C:16:C1:D2:F7:99:E2:A1:DB:27:A6:6A:87:E3:CF:08
X509v3 Authority Key Identifier:
keyid:27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:12:89:33:8e:48:37:ec:15:c8:97:a3:76:7c:50:d8:14:87:
f8:78:c2:fa:5e:c2:0d:5b:ac:5e:e7:b4:36:cd:f7:d3:50:14:
13:18:17:d0:c5:5e:d2:d8:2d:aa:d3:1f:0f:cd:4d:3d:8a:96:
0f:b6:5c:7b:2f:78:18:15:62:74:51:26:f3:66:ac:19:20:ce:
99:77:01:4e:32:08:0c:7d:2a:6f:5f:08:2b:90:62:60:62:61:
fc:79:62:0f:21:de:6f:9a:a7:25:46:13:14:2c:0c:05:b2:63:
bc:b3:89:8a:a7:25:8d:33:8d:5c:e6:7a:52:b7:f1:59:5a:d2:
07:01:20:6c:cc:3c:53:84:62:6e:ff:1b:16:6f:6a:d4:ca:ef:
16:01:b2:60:83:69:b6:a3:23:21:0f:85:aa:b3:9a:7d:62:5f:
6d:ef:2c:f1:cc:69:4d:a2:6e:b2:89:e9:02:43:0d:64:92:8c:
34:24:a1:30:57:3e:a5:fc:99:de:3e:d3:f6:89:14:df:54:ec:
b5:d5:34:8f:e9:35:1f:21:49:2d:9a:01:8f:a2:20:d2:cf:e2:
e4:20:23:88:74:31:eb:c5:01:8f:c9:74:f8:d3:2e:03:ec:04:
73:f0:b1:38:6d:d8:3d:cb:04:7e:59:65:16:e4:15:67:68:90:
f9:e7:91:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:36:27 2026 by rpki-client