
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
File: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft (raw, json)
Hash identifier: CHpok6fRhqbni3D4iFV8EvHmGGH+Nwvny0EROJMHAD8=
Subject key identifier: 77:6C:0C:80:30:FD:0E:14:B7:88:7C:06:EE:55:26:DC:C5:47:3E:DE
Authority key identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06
Certificate issuer: /CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06
Certificate serial: 30DEE0535788E7E0539E53B9C1BB0BB5057B9946
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
Manifest number: 54
Signing time: Sat 04 Jul 2026 07:11:18 +0000
Manifest this update: Sat 04 Jul 2026 07:06:18 +0000
Manifest next update: Sun 05 Jul 2026 07:15:18 +0000
Files and hashes: 1: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: KRDZJxi0FxgUIEi2fP8SirXZmXhHmW7JJ3jDoLiPW4M=)
2: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl (hash: ZqON6CpZ/KzMGbDsMPF7Pu5+dSRHL+7ofd+Oc98nu9Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl
rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Jul 2026 05:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:de:e0:53:57:88:e7:e0:53:9e:53:b9:c1:bb:0b:b5:05:7b:99:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06
Validity
Not Before: Jul 4 07:06:18 2026 GMT
Not After : Jul 5 07:15:18 2026 GMT
Subject: CN=776C0C8030FD0E14B7887C06EE5526DCC5473EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:78:d4:88:b4:05:ba:61:4c:4d:dc:3c:1d:
66:f2:b5:58:0c:50:23:d5:26:e1:9f:25:b2:80:af:
2e:f0:52:e6:c1:9c:98:66:8b:7e:22:9a:07:d9:6f:
ba:4a:ee:51:ad:98:87:37:d3:84:6e:c5:fd:6b:a0:
ab:19:83:58:9e:16:8b:08:59:b3:a6:33:c7:39:2d:
71:93:80:bf:6d:8b:50:50:ec:9a:da:55:c6:9f:78:
26:ee:84:37:c8:0a:e4:78:3d:39:cb:94:38:ec:67:
eb:ed:63:fa:ec:dd:9d:c3:04:b0:d8:b6:44:1e:dd:
57:8a:5a:07:8d:54:df:24:ce:65:f8:1c:6d:90:09:
b4:da:0d:61:bd:02:2b:3f:ed:7e:21:fb:7c:da:3d:
fe:64:95:7d:73:23:32:9b:3d:cc:b1:14:a0:88:79:
d9:97:f8:6a:14:b8:52:41:06:b5:95:7b:d8:08:8d:
e8:34:47:57:12:ea:bd:26:83:c5:3e:16:d4:62:e6:
d2:5d:f2:49:be:ae:f9:84:71:44:d3:7a:3f:fb:f0:
71:e2:bf:4e:99:35:41:a6:42:7e:62:72:5e:9a:0a:
bc:3c:5f:fa:dc:12:81:c0:16:e8:b7:e7:7e:1c:85:
47:cb:f3:35:21:6b:ba:43:d7:08:04:92:97:29:a5:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6C:0C:80:30:FD:0E:14:B7:88:7C:06:EE:55:26:DC:C5:47:3E:DE
X509v3 Authority Key Identifier:
keyid:D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6f:52:db:84:07:09:8e:a3:c3:53:c5:5d:53:2e:3f:3c:44:
0c:74:43:3c:23:96:a1:b4:d8:c5:28:72:a5:3c:11:64:f3:55:
1a:53:da:3a:e3:05:3b:0c:c9:05:9f:05:b6:24:14:d5:9d:dd:
03:f2:92:fd:3d:c2:0b:98:4f:ee:d4:20:4b:47:cd:ae:6f:40:
62:6e:88:e2:ca:19:43:dd:bf:10:88:e8:8b:19:b7:5b:0a:92:
2b:ab:c9:e8:29:b7:fe:76:b8:b0:34:79:20:55:38:d8:29:0d:
3c:fe:1c:51:dd:1d:32:88:88:18:3b:16:4c:00:87:83:2c:f6:
53:1d:1d:df:58:a7:0e:15:58:20:8d:d2:76:e7:3f:40:a4:d6:
da:79:a2:d5:7b:c1:45:74:83:69:51:2e:e4:47:49:ed:08:05:
e3:92:d5:cd:22:82:2f:80:e5:50:0f:b0:ed:a0:35:95:01:2f:
6b:dc:85:52:26:0b:fb:cd:7d:c7:a6:53:63:cb:5f:43:12:27:
72:14:0d:7e:3e:9b:25:be:df:08:53:0f:bf:2a:59:d0:7e:40:
e6:4a:77:d1:ae:0c:c0:17:8f:46:90:45:40:b8:fd:e5:c6:ce:
df:66:41:a6:a6:ca:39:c1:58:3a:7b:bc:17:0c:2f:51:0c:a1:
f1:3e:3e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 21:08:01 2026 by rpki-client