
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
File: D61B761F0598B8998BF802A069F51103270C6CC0.mft (raw, json)
Hash identifier: Ln5U4s83MlKr9L+rxsdko2XLABRmOel1RmvMtVNQnbM=
Subject key identifier: 15:8D:8C:F3:0A:BE:CE:9A:79:87:CD:30:ED:5B:CF:45:34:9D:72:DE
Authority key identifier: D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0
Certificate issuer: /CN=D61B761F0598B8998BF802A069F51103270C6CC0
Certificate serial: 1920E5234AC2E65096297FCAB1B764C7E4942564
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
Manifest number: 13
Signing time: Fri 15 May 2026 22:29:03 +0000
Manifest this update: Fri 15 May 2026 22:24:03 +0000
Manifest next update: Sat 16 May 2026 23:58:03 +0000
Files and hashes: 1: D61B761F0598B8998BF802A069F51103270C6CC0.crl (hash: 8kDUlzdcG23Qo1wbYPltwWrq/VOwZDX4oOiHjBiPCaw=)
2: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: JV7kYNU81vIjUMbIQ9WaFlRn0Vf3tZeMtDHyZF3sYe4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl
rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 23:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:20:e5:23:4a:c2:e6:50:96:29:7f:ca:b1:b7:64:c7:e4:94:25:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D61B761F0598B8998BF802A069F51103270C6CC0
Validity
Not Before: May 15 22:24:03 2026 GMT
Not After : May 16 23:58:03 2026 GMT
Subject: CN=158D8CF30ABECE9A7987CD30ED5BCF45349D72DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:b4:79:41:3a:f5:7c:8d:dd:a3:5a:ef:cf:
93:b1:94:33:99:12:52:87:ae:df:e6:50:fb:2e:28:
2e:83:dd:1f:fd:fb:df:20:08:59:23:7f:a8:75:2c:
eb:b4:50:43:3f:ba:24:66:a0:7a:4e:c9:2c:5d:ae:
5a:21:aa:1f:5f:4a:94:34:e4:8f:9b:91:2d:0f:52:
61:8b:2f:5e:ca:01:89:5c:21:f4:d4:90:40:48:9a:
4e:5b:d2:a1:aa:35:d1:f7:ca:5b:8f:51:8f:27:53:
05:fb:26:8b:da:c1:4a:11:bc:6a:7b:59:70:bf:48:
de:14:7f:20:39:eb:86:98:dd:d8:55:51:7f:1c:f5:
60:c1:0e:9a:52:67:ef:f7:a8:22:9a:1f:97:b6:99:
17:0e:ef:3f:31:26:58:c8:e5:f6:de:df:9e:fb:a5:
d5:5d:19:00:d7:68:63:9f:f5:39:48:d6:a3:85:33:
af:39:0c:7a:6a:50:05:04:79:22:ac:c6:02:2a:61:
45:93:c3:cc:c9:ee:77:ac:cd:51:43:d6:af:59:7b:
be:06:31:b0:47:dd:b3:10:62:32:91:45:62:28:82:
90:2d:48:31:1d:ea:8a:f4:e0:0d:6d:69:4b:4e:79:
8b:03:35:9a:2e:44:c5:77:db:e4:34:cc:8f:32:ca:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8D:8C:F3:0A:BE:CE:9A:79:87:CD:30:ED:5B:CF:45:34:9D:72:DE
X509v3 Authority Key Identifier:
keyid:D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c1:c3:d3:7d:e3:dd:c3:67:b9:79:cc:4b:1f:24:ce:e9:4a:
88:ac:c0:e5:44:36:dc:61:93:1a:4e:42:ea:cd:d9:f2:a0:f9:
11:a9:49:e2:fb:24:2c:1d:54:dc:76:3f:8b:d5:58:4b:19:da:
ab:05:62:28:1f:9b:0c:c7:e1:f3:19:b5:7e:a5:ea:44:7b:3d:
6d:e8:6d:5f:c2:54:9d:33:17:bc:07:c7:78:91:39:79:e3:b3:
b6:ca:f6:7f:33:ee:48:ee:eb:72:d4:2b:66:7d:b3:1d:01:78:
29:e1:73:5b:e7:74:46:93:23:28:4c:dc:24:dd:17:fb:fc:02:
6f:d7:2e:66:9c:49:24:7c:c2:3c:8b:a6:fb:25:bc:26:e0:d8:
fc:46:a6:4c:c3:b7:41:45:fe:2a:e3:1a:ed:fb:dc:f0:49:2d:
27:d6:a2:c1:d5:cc:b4:8d:f8:3b:0e:ed:8b:da:81:2e:e5:90:
97:67:5e:ba:4e:a7:94:d7:04:69:6d:b7:59:c2:1f:a4:f7:71:
02:f7:80:ec:cf:a6:fe:69:db:0f:c9:ef:d1:9c:4c:26:13:c4:
7e:c3:b7:e6:e6:cf:d6:08:92:22:cc:ec:2c:b0:fd:9b:51:2a:
58:7f:57:3c:c1:23:07:39:7a:4a:e7:51:0a:09:b0:b8:fb:50:
90:00:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:40:55 2026 by rpki-client