
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
File: D280C077A9E801FBA933C9D0085012E09D686927.mft (raw, json)
Hash identifier: 3XY64ylL32Nck4m9jQFp8ze6PYSABj4GlczvtOR470I=
Subject key identifier: 2D:76:53:DB:61:22:76:C6:A9:46:9D:50:01:07:EA:33:FF:7F:67:E5
Authority key identifier: D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27
Certificate issuer: /CN=D280C077A9E801FBA933C9D0085012E09D686927
Certificate serial: 0109F33433D6137628AA3A66007006B8F62A6890
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
Manifest number: A5
Signing time: Thu 03 Sep 2026 08:58:22 +0000
Manifest this update: Thu 03 Sep 2026 08:53:22 +0000
Manifest next update: Fri 04 Sep 2026 10:24:22 +0000
Files and hashes: 1: D280C077A9E801FBA933C9D0085012E09D686927.crl (hash: oQqTcRdNAfYl0ZVD3R9Hl8On+vQgoh4UfeVuD0DSMUg=)
2: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: RX42n1sKvH6RuNxwR829dnAhCVM69IdefkYN8dkI7/c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl
rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 10:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:09:f3:34:33:d6:13:76:28:aa:3a:66:00:70:06:b8:f6:2a:68:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D280C077A9E801FBA933C9D0085012E09D686927
Validity
Not Before: Sep 3 08:53:22 2026 GMT
Not After : Sep 4 10:24:22 2026 GMT
Subject: CN=2D7653DB612276C6A9469D500107EA33FF7F67E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:39:63:69:11:27:ea:45:94:cc:b0:b6:92:
7c:84:85:0a:6a:4e:40:ac:d2:76:cc:71:19:70:08:
8c:f5:e5:7f:62:7b:94:23:60:77:68:4e:92:6f:bf:
6b:ef:25:ba:00:69:c2:1c:61:38:58:05:7f:25:8f:
75:b1:b9:2b:fd:9d:48:eb:97:2a:14:d6:a8:3c:13:
f1:0e:4b:4f:6e:8f:fe:d3:d8:57:4f:85:77:f6:e0:
77:d7:16:56:90:69:1b:eb:3b:c7:bf:bd:98:f6:c0:
33:5e:75:c8:5a:0c:4e:1d:2d:cd:0d:f4:a8:94:fb:
21:99:2f:e0:82:19:6a:8d:1f:8d:cf:9f:22:47:2a:
74:89:09:39:90:4a:36:80:7d:7e:a1:db:6d:c3:ed:
5b:30:f9:84:92:bb:65:51:c2:f8:d0:19:ad:58:c4:
d1:64:57:10:17:59:4f:d9:21:94:50:07:6d:76:b9:
6f:a0:49:3a:22:b8:3e:4b:96:90:d5:9e:ac:be:df:
8e:c5:57:01:40:18:be:b5:50:aa:5f:6d:bb:f5:0d:
4e:f8:5c:75:12:7f:e7:14:be:6b:0c:6e:7f:94:d7:
04:04:bf:57:ad:3a:ef:e0:60:b4:bf:89:f7:1e:8b:
99:8b:d9:62:8d:58:60:12:e0:b7:b8:73:c7:57:41:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:76:53:DB:61:22:76:C6:A9:46:9D:50:01:07:EA:33:FF:7F:67:E5
X509v3 Authority Key Identifier:
keyid:D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e3:67:1d:86:88:45:f1:76:df:ae:95:d2:04:58:f3:7e:9e:
28:a0:98:f6:d8:c2:9f:b3:d8:a3:0d:67:4e:b2:8f:bc:a8:cb:
6d:57:56:c1:fc:d0:7d:19:d6:6b:52:d4:48:99:a4:49:59:61:
fa:04:53:f6:a7:5f:40:21:f6:30:71:2c:91:4b:fb:cc:5d:1b:
5f:0e:22:c1:e6:9b:e4:b6:6a:14:96:e7:77:8e:00:fd:28:ed:
a0:21:7f:38:f0:03:00:a6:33:6f:76:6e:10:83:53:32:f9:0f:
5f:84:0e:ee:98:9d:31:f4:87:df:28:7d:24:f3:31:e4:8b:3f:
5d:76:a9:84:d8:7a:87:34:90:cd:9f:c2:34:2d:98:b5:d8:cc:
03:38:24:ac:17:8a:ab:2a:cc:b9:82:2f:90:2b:df:09:50:9a:
9c:f2:21:7e:9e:0c:86:94:90:bd:8b:57:98:3e:19:7d:ab:8b:
7b:63:0b:fd:32:20:57:fb:6d:dd:ef:04:54:03:62:a7:26:59:
20:66:61:d6:3b:47:78:50:99:40:a5:2f:45:b7:bd:03:08:63:
8f:e4:b1:87:8c:a1:e2:f5:6b:e6:57:49:ef:51:83:75:9e:18:
8f:93:ba:4f:9c:b6:45:50:85:f4:0e:b8:57:a4:c5:bb:29:73:
b5:3e:a6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:38:23 2026 by rpki-client