
$ rpki-client -vvf rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
File: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft (raw, json)
Hash identifier: NHRPLl2qYrsmuYNMUB3AV7/IsXlIiyvIRu7NLumx9+M=
Subject key identifier: D7:D0:35:95:4C:5A:E4:82:F1:CD:47:4A:97:D9:9E:D4:FF:5D:10:0C
Authority key identifier: 70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9
Certificate issuer: /CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9
Certificate serial: 3DCC4029481E3AB2B6CDCDB62116376BAA7BD16A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
Manifest number: 2C
Signing time: Wed 03 Jun 2026 00:35:37 +0000
Manifest this update: Wed 03 Jun 2026 00:30:37 +0000
Manifest next update: Thu 04 Jun 2026 04:04:37 +0000
Files and hashes: 1: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl (hash: +pRIUNXJWIv+CC7Hee8RXmCTSmEtGAXTcJRqt+2hgTg=)
2: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: B2JBhxZBgB0va+fccB3dL51mK3TG1i5CCqVPp24i9Qw=)
3: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: 4bKBlVxqedWSCh5v8weNHekAQ9GKb4xy7LR81Mjy5FE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl
rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 04:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:cc:40:29:48:1e:3a:b2:b6:cd:cd:b6:21:16:37:6b:aa:7b:d1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9
Validity
Not Before: Jun 3 00:30:37 2026 GMT
Not After : Jun 4 04:04:37 2026 GMT
Subject: CN=D7D035954C5AE482F1CD474A97D99ED4FF5D100C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:4f:b0:07:1d:27:e9:2d:f0:91:cf:c6:5f:
4a:00:c2:9b:f9:5b:a2:aa:55:95:80:43:72:8d:0e:
37:d8:53:02:82:46:68:78:b5:00:00:eb:4b:16:37:
b4:4e:b4:52:d9:b2:46:d5:47:aa:fe:c8:3f:f7:f8:
ec:9c:72:d8:c7:d8:d6:e5:ee:34:f4:be:8c:a3:d0:
4c:79:4e:b0:81:ed:b5:94:91:f3:8c:7d:5f:4c:95:
5c:a9:d0:be:e3:17:2c:38:b3:49:9a:ae:21:c3:72:
7d:a1:05:5f:05:5e:a2:4b:f0:05:37:22:4a:b2:20:
64:2f:4b:36:13:dd:91:37:88:98:af:ae:d0:78:4f:
d4:64:8d:c3:b3:da:01:12:7c:76:5a:7b:2f:25:0e:
33:45:92:29:1e:df:c3:c8:18:08:7f:06:79:d9:42:
68:1d:aa:79:e0:17:dc:f2:3e:82:cd:05:6a:9b:1a:
d4:d1:66:94:bd:a1:a8:05:e7:d6:39:0e:4b:dc:c2:
2f:c4:3e:f9:29:3e:99:b8:26:38:a7:28:18:b7:df:
8c:28:34:2a:17:52:f7:71:a2:16:2e:79:13:cd:17:
06:9b:4a:05:2f:7f:77:15:f0:e4:2f:c9:64:4c:11:
de:75:9a:d2:5e:59:17:29:21:e9:7b:7f:78:28:49:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D0:35:95:4C:5A:E4:82:F1:CD:47:4A:97:D9:9E:D4:FF:5D:10:0C
X509v3 Authority Key Identifier:
keyid:70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6a:03:e9:f8:80:0e:07:9c:60:19:64:f8:6e:80:02:cf:69:
97:4f:a4:8c:72:b3:7b:dd:ab:95:33:9c:ab:bb:c0:db:56:53:
ef:f8:23:2e:69:96:9b:b6:2c:5f:b8:d5:0a:f0:27:5f:ce:b9:
16:55:85:2e:ae:6e:48:ae:8f:39:31:3b:08:5f:e3:92:49:30:
5f:1a:c6:b6:8b:8b:c4:b4:ce:fb:7c:61:27:29:ed:59:16:40:
e0:aa:fa:05:b4:35:bd:58:77:a2:20:93:29:3b:ac:2b:77:c6:
f9:4a:db:d6:aa:ef:68:7a:54:6c:10:30:a0:a4:1c:00:62:6d:
3a:33:b8:ff:36:9f:ed:33:1b:52:e8:48:05:62:49:b8:39:0d:
e1:a3:d4:67:c5:c0:6c:c6:ad:48:e7:1f:4c:8e:97:b0:5a:dc:
3e:8d:c6:4c:8e:ed:a3:dd:bc:c5:ab:cc:c8:3a:a2:6f:57:35:
c3:44:1b:35:18:74:4e:72:71:85:3c:04:2f:cf:61:4b:53:d5:
9e:37:a5:82:78:c7:56:5c:37:b0:20:c2:10:59:b9:ae:8d:ff:
55:1e:19:8c:62:5d:08:fb:99:dc:0a:f4:ba:7a:b0:48:cc:21:
5f:d4:ac:c1:63:ff:82:ab:13:80:ed:ec:75:11:b0:b1:6c:8f:
b1:76:13:a2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPcxAKUgeOrK2zc22IRY3a6p70WowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA0NTI2MkQ1RUNCRDA4MEZEN0U5MEJENTdDNUNBQzE0
NzY3RDdEOTAeFw0yNjA2MDMwMDMwMzdaFw0yNjA2MDQwNDA0MzdaMDMxMTAvBgNV
BAMTKEQ3RDAzNTk1NEM1QUU0ODJGMUNENDc0QTk3RDk5RUQ0RkY1RDEwMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOHk+wBx0n6S3wkc/GX0oAwpv5
W6KqVZWAQ3KNDjfYUwKCRmh4tQAA60sWN7ROtFLZskbVR6r+yD/3+OycctjH2Nbl
7jT0voyj0Ex5TrCB7bWUkfOMfV9MlVyp0L7jFyw4s0mariHDcn2hBV8FXqJL8AU3
IkqyIGQvSzYT3ZE3iJivrtB4T9RkjcOz2gESfHZaey8lDjNFkike38PIGAh/BnnZ
QmgdqnngF9zyPoLNBWqbGtTRZpS9oagF59Y5Dkvcwi/EPvkpPpm4JjinKBi334wo
NCoXUvdxohYueRPNFwabSgUvf3cV8OQvyWRMEd51mtJeWRcpIel7f3goSdyHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU19A1lUxa5ILxzUdKl9me1P9dEAwwHwYDVR0j
BBgwFoAUcEUmLV7L0ID9fpC9V8XKwUdn19kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODAxYjc5YWMtMzM1MS00NzA1LThjM2QtNjAyYWRjZDc5YmI3LzAvNzA0NTI2MkQ1
RUNCRDA4MEZEN0U5MEJENTdDNUNBQzE0NzY3RDdEOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MDQ1MjYyRDVFQ0JEMDgwRkQ3RTkwQkQ1N0M1Q0FDMTQ3NjdE
N0Q5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj
M2QtNjAyYWRjZDc5YmI3LzAvNzA0NTI2MkQ1RUNCRDA4MEZEN0U5MEJENTdDNUNB
QzE0NzY3RDdEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAClqA+n4gA4HnGAZZPhugALPaZdPpIxys3vd
q5UznKu7wNtWU+/4Iy5plpu2LF+41QrwJ1/OuRZVhS6ubkiujzkxOwhf45JJMF8a
xraLi8S0zvt8YScp7VkWQOCq+gW0Nb1Yd6Igkyk7rCt3xvlK29aq72h6VGwQMKCk
HABibTozuP82n+0zG1LoSAViSbg5DeGj1GfFwGzGrUjnH0yOl7Ba3D6NxkyO7aPd
vMWrzMg6om9XNcNEGzUYdE5ycYU8BC/PYUtT1Z43pYJ4x1ZcN7AgwhBZua6N/1Ue
GYxiXQj7mdwK9Lp6sEjMIV/UrMFj/4KrE4Dt7HURsLFsj7F2E6I=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:15:39 2026 by rpki-client