
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
File: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft (raw, json)
Hash identifier: R+47RVIGWE5UnlEPRz1hqwjSZTbl1jEl1DFsBnctnUc=
Subject key identifier: 1D:26:E7:AE:58:8C:8A:FC:9C:A7:44:E6:3D:E0:2E:B2:CD:D6:5D:76
Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A
Certificate issuer: /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
Certificate serial: 79376F9CE2ED1AA5DF4AC32916431A720E6BF956
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 02:51:28 +0000
Manifest this update: Thu 03 Sep 2026 02:46:28 +0000
Manifest next update: Fri 04 Sep 2026 02:56:28 +0000
Files and hashes: 1: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl (hash: jfg3SjqqQXsAP/2F9y1a1T9tYFenEoUwHWkwf+TKfc8=)
2: 3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (hash: VdJ1ZIQnNrJcWKeLJSeBvVO0FNQ/sxBZNurd+uNh3ek=)
3: 3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (hash: GzkXDWcauMWYNDn5MyFD1nDjKkP9ZpScdykpa6iOEak=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl
rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 02:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:37:6f:9c:e2:ed:1a:a5:df:4a:c3:29:16:43:1a:72:0e:6b:f9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
Validity
Not Before: Sep 3 02:46:28 2026 GMT
Not After : Sep 4 02:56:28 2026 GMT
Subject: CN=1D26E7AE588C8AFC9CA744E63DE02EB2CDD65D76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:28:a3:e9:ba:3b:89:93:01:4c:9e:4e:4d:40:
89:e3:a5:f3:62:fd:f2:47:a9:eb:eb:da:81:26:00:
d0:7b:c1:87:5f:a3:66:5c:d1:8d:72:8d:b3:fd:1e:
59:04:bf:5f:a3:bc:6e:cc:28:db:33:94:91:04:34:
10:df:42:08:5a:91:f9:99:c8:c4:50:3e:2d:da:c3:
e1:06:8c:69:05:9e:20:2b:bd:cb:8f:57:c0:e9:7e:
8a:f6:f5:47:32:66:91:75:fe:27:08:d5:4a:8e:5c:
94:61:f4:a2:44:21:bf:0a:e5:3b:c0:2b:e2:be:62:
01:e1:60:7d:a5:02:25:f2:4f:57:43:7a:2d:42:38:
d1:06:4f:a9:96:02:71:dc:15:8d:23:cd:60:a9:8f:
ed:60:f8:51:07:73:c7:4f:b2:9a:1b:09:09:2c:1a:
15:b9:95:55:27:36:06:95:e5:95:e5:bb:24:18:5b:
c7:88:c2:41:1c:0b:ad:81:c2:7e:f1:0a:44:9c:9b:
70:37:df:53:7d:ea:cd:0c:01:82:97:4f:a5:64:f6:
27:29:df:6f:a0:7b:fb:21:52:4b:a6:44:99:b8:bc:
48:af:e1:6d:22:cc:18:7d:22:42:b4:d2:4b:36:a8:
d5:d8:21:7f:f1:65:58:77:ce:14:8a:db:1e:40:34:
5e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:E7:AE:58:8C:8A:FC:9C:A7:44:E6:3D:E0:2E:B2:CD:D6:5D:76
X509v3 Authority Key Identifier:
keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:df:5d:84:eb:ba:78:2b:4f:42:f1:f6:be:52:52:38:46:60:
9c:2c:ae:a2:89:95:96:4f:a7:2a:a0:f7:59:e9:14:93:5f:30:
5c:c6:94:42:22:8d:52:d7:11:49:9e:12:fe:fb:4b:67:a1:14:
05:77:cf:0c:db:5b:7e:95:e1:d1:b1:e4:49:b5:5a:4a:e8:39:
0c:87:da:5a:8f:ef:a0:36:a5:92:98:a9:6b:cc:7a:d2:01:6a:
d1:3c:0b:5b:e0:e9:87:4b:72:a2:2f:17:e9:7c:66:37:31:90:
aa:e7:a6:5e:90:42:dc:02:68:12:07:2c:40:94:1f:bb:23:c9:
ed:75:a1:da:d7:06:3a:5e:b1:c9:6b:10:dd:c7:6d:42:6a:80:
19:e4:f5:3e:fe:a6:16:f1:9c:5f:d0:a6:38:15:02:98:a1:41:
4a:51:05:46:d9:0b:4a:7e:1c:2a:49:ff:75:2e:35:ff:b8:14:
97:66:d1:1e:f9:38:4f:db:4d:98:57:01:74:8a:41:30:f9:ca:
13:bd:c4:d2:32:ac:f1:37:2f:f6:dc:4f:7b:f4:96:50:66:cc:
9d:ea:41:42:b1:11:ac:d3:c3:a8:7c:20:9e:07:cf:df:8f:37:
ef:11:08:09:34:62:4d:9f:b8:36:64:50:a0:19:fb:0a:6c:9f:
37:d3:32:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:21 2026 by rpki-client