
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft
File: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft (raw, json)
Hash identifier: qCdGsBsv0llmxzx0FkzH0pdXIcb/KKUwPrQYQf5ESF8=
Subject key identifier: AE:78:08:EC:1C:F2:68:35:31:2D:4B:56:11:A5:99:6F:93:44:C4:23
Authority key identifier: 2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74
Certificate issuer: /CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274
Certificate serial: 0D83A6A93E23E627A973A94A0A9C1662BD43C8FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft
Manifest number: 69
Signing time: Sun 19 Jul 2026 20:01:39 +0000
Manifest this update: Sun 19 Jul 2026 19:56:39 +0000
Manifest next update: Mon 20 Jul 2026 22:14:39 +0000
Files and hashes: 1: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 1IjnkMC3ga8KbKp+1i4junuLJGtmG26jgGjukZ4rmxk=)
2: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: V2s2v2zyv88cwsslpUJdds/b+6l6rcgW5NHb7V5SYWY=)
3: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: iezQTzMxWp3Coix5fz9eGS/c/h2ulbbwObi3kCUHkW4=)
4: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl (hash: Bs7AFujK3Y4AcKE0/QGzQXO5IIXRC17PwJp91KiA/kw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl
rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:83:a6:a9:3e:23:e6:27:a9:73:a9:4a:0a:9c:16:62:bd:43:c8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274
Validity
Not Before: Jul 19 19:56:39 2026 GMT
Not After : Jul 20 22:14:39 2026 GMT
Subject: CN=AE7808EC1CF26835312D4B5611A5996F9344C423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:99:e8:78:52:b3:8f:2c:0a:c1:e3:a4:59:
cb:2c:e2:63:31:25:27:09:fa:57:8f:c6:02:e6:d6:
ce:0f:e9:af:3d:4e:fc:7b:bc:bc:78:08:b4:51:68:
79:b6:f7:3c:d1:31:d5:48:83:09:39:b4:ea:6a:39:
8e:c4:7a:a2:1d:4e:1b:60:a9:e4:e0:c3:5f:21:5b:
6b:1f:77:0b:9e:f3:30:80:0a:51:85:55:33:71:70:
51:75:d1:1b:b8:88:1d:0d:33:ec:38:5b:ec:30:e6:
5b:43:ac:e9:51:9e:e4:57:86:d7:1f:f2:54:03:07:
12:7f:01:f7:68:28:ad:67:fb:74:26:ca:d1:5c:55:
3d:aa:a4:e5:f4:81:24:e4:f3:20:46:e5:b0:3d:4f:
fa:0e:33:cc:be:3b:91:ef:26:48:cd:bc:ea:2b:23:
34:92:60:87:f2:4c:99:55:16:df:14:30:de:11:e3:
19:e3:1a:9c:74:91:3b:d9:d9:36:aa:d1:2a:ae:a4:
17:0d:c2:0f:54:bb:ac:49:3c:78:66:3a:d1:3a:71:
29:d7:5e:74:c1:09:ba:8f:5b:75:c3:14:4e:05:f1:
c5:10:7d:08:be:7d:16:b7:4a:8f:38:57:ef:a2:a1:
a6:e7:22:9c:70:a9:00:ab:d6:29:03:8f:3a:bd:f8:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:78:08:EC:1C:F2:68:35:31:2D:4B:56:11:A5:99:6F:93:44:C4:23
X509v3 Authority Key Identifier:
keyid:2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:20:92:ec:f5:50:06:ac:bb:7e:a9:04:50:14:a3:3b:7f:dc:
58:79:4e:02:ef:9f:b3:2a:3c:a3:ce:6e:35:aa:6f:0a:38:f1:
9c:9d:5b:95:51:00:b5:ac:bb:06:2e:cc:8e:ed:f7:69:3d:f4:
34:c7:37:2d:14:62:bd:01:d7:1d:25:40:9a:78:78:6d:2f:fb:
d7:a6:25:78:02:30:b4:0a:c8:ac:a7:7e:9b:2c:f7:07:c6:85:
1b:01:94:7c:4c:75:96:73:6a:7b:a9:78:33:02:82:09:c6:9c:
43:7a:0f:c7:75:8b:2c:09:80:d2:20:55:49:52:e8:8e:2f:b3:
a6:ad:19:a5:6f:26:48:63:ee:96:d6:73:60:9b:55:a0:ce:39:
2f:58:73:ef:e3:65:58:10:a7:cb:80:17:11:a1:c7:f7:be:e2:
4c:33:49:7f:bc:5d:1f:8b:15:f3:e7:7d:fc:b7:54:77:5a:d3:
81:19:4b:fd:d8:92:3d:2f:f3:0c:e8:76:9d:c9:a0:93:85:eb:
87:2c:f8:c8:1e:d0:50:75:c6:51:bd:c8:91:76:17:f4:98:7a:
04:c6:22:75:ca:62:7a:00:8a:5a:57:03:f1:55:ee:0b:98:95:
aa:a6:8d:bf:55:7a:e0:44:a1:3c:8c:fa:bc:08:99:fe:eb:78:
a5:65:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 23:58:07 2026 by rpki-client