
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft
File: 330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft (raw, json)
Hash identifier: T1eNIYsCkOhR98jaYzGe38Sjml79GjDkpT+r7Pqmqro=
Subject key identifier: 42:BC:4A:CB:71:77:65:C4:ED:FF:09:4E:76:13:53:1D:9F:3D:AE:AB
Authority key identifier: 33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B
Certificate issuer: /CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B
Certificate serial: 581AE9A1C46B421C78A71DEF2EC949110D451B8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft
Manifest number: A5
Signing time: Thu 03 Sep 2026 09:33:59 +0000
Manifest this update: Thu 03 Sep 2026 09:28:59 +0000
Manifest next update: Fri 04 Sep 2026 09:39:59 +0000
Files and hashes: 1: 330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl (hash: pn6LvCsU+d+Hr4jLiOMiHTTx5N1Ne3wz4fWDuD8SSeU=)
2: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: X6m+xeJ0gpaLFRDzspoO6SIub/jpD7DBy+UlBcZmfKs=)
3: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: ILoy/+ibUDKAFOxVMLinSZB9MoToaiC2+Ky+vT/tKdU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl
rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 09:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:1a:e9:a1:c4:6b:42:1c:78:a7:1d:ef:2e:c9:49:11:0d:45:1b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B
Validity
Not Before: Sep 3 09:28:59 2026 GMT
Not After : Sep 4 09:39:59 2026 GMT
Subject: CN=42BC4ACB717765C4EDFF094E7613531D9F3DAEAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:c4:3b:44:57:48:00:25:5a:51:3e:e2:c3:
f2:87:75:a2:61:06:5e:35:57:3d:75:f1:63:65:81:
3d:e1:53:b8:ad:fd:bc:37:37:ba:4d:63:cf:c5:41:
1a:33:71:ad:0c:d2:a8:77:54:da:79:9c:83:a0:72:
b8:7f:71:a4:11:51:0c:3f:dc:43:28:86:80:19:c2:
b2:59:c4:2f:1e:08:11:7c:ef:bb:1b:ca:c7:89:c7:
30:d9:26:1b:9c:cb:48:21:a5:30:9a:af:b3:4d:5f:
59:d8:c5:b4:4d:82:a9:13:54:88:44:21:aa:b5:43:
ea:4a:74:7b:05:70:95:e3:a6:d1:b8:0b:a7:f2:3b:
6b:66:fa:ce:48:de:aa:9b:24:04:6b:be:fd:96:bc:
4e:0c:be:3a:e0:81:ef:a7:e0:92:b9:62:f8:ff:a3:
2f:77:79:5a:47:db:ed:07:f2:06:26:e8:3d:0e:f5:
99:e5:d5:ff:e2:be:ba:32:50:3e:00:b1:47:fd:c1:
21:c5:c2:0a:f4:af:ab:99:a5:8a:bc:ce:79:be:a7:
a2:e5:fc:48:7a:fe:4c:88:ca:60:c1:53:c2:26:77:
31:c9:b0:ee:41:ad:7a:26:f3:60:13:8d:28:03:a3:
31:e7:7c:7b:aa:c5:46:df:7a:27:ed:f6:fd:32:27:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BC:4A:CB:71:77:65:C4:ED:FF:09:4E:76:13:53:1D:9F:3D:AE:AB
X509v3 Authority Key Identifier:
keyid:33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:33:5d:7a:a2:56:21:e3:b1:50:a9:cc:07:bc:d5:7f:71:96:
f2:21:89:e3:9e:68:d4:60:89:d0:e2:1f:7a:05:fc:13:44:d3:
06:cc:6a:1d:c6:fd:1c:d5:49:2d:e3:31:54:0d:90:f8:b4:50:
aa:10:d7:82:a3:fc:d7:54:a4:3b:9f:65:8d:11:b0:98:8a:35:
24:79:7b:4a:8a:8a:7c:a0:d1:32:63:6d:29:b5:c9:50:a3:93:
fa:3a:ef:59:f8:59:7b:e8:29:0d:28:72:ab:9c:de:0d:f1:6d:
c2:62:a2:74:a1:b9:07:de:96:a4:77:12:54:be:22:d1:54:5b:
75:6f:f5:50:80:d7:0c:90:b2:d2:59:5a:b3:64:a3:0f:96:96:
30:70:e2:12:1b:ce:e8:75:cc:bb:37:91:39:c5:b8:44:06:bf:
47:a4:51:e6:00:f0:8a:d8:92:d4:27:ff:41:13:ef:1b:a5:cb:
30:3b:b4:f2:d9:02:60:d3:77:d0:b4:d1:75:f4:96:b8:fb:73:
57:b9:0e:30:98:f3:ec:ce:b7:55:ec:ec:0a:3a:0d:cb:3f:bf:
40:ac:e5:80:67:ce:23:4f:67:c4:27:6e:fa:26:3e:94:9b:9f:
54:b4:e7:43:08:be:09:ab:1e:25:1a:16:02:22:58:cd:d9:94:
0b:16:29:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 13:01:34 2026 by rpki-client