
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft
File: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft (raw, json)
Hash identifier: tbKFEyy7zzGvNhk1dHmZN/KY4yBOxVMa4nr/YeIk7is=
Subject key identifier: FE:50:CF:01:0E:C2:E0:1F:3E:A7:E4:F3:05:9E:00:E1:A6:2B:16:6E
Authority key identifier: 1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E
Certificate issuer: /CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E
Certificate serial: 7C2A7153589D3E6BE05D4250DA48473A483103A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 15:38:59 +0000
Manifest this update: Tue 02 Jun 2026 15:33:59 +0000
Manifest next update: Wed 03 Jun 2026 18:46:59 +0000
Files and hashes: 1: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: 1n9SNDjrvcks0gDiRfW+y5COwfj6j7g0N+zUW08aQJo=)
2: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl (hash: SYucYBhqoBDkAycttWbFqIC0tiwfrxBsuVsaXW7hCJs=)
3: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: nZbaKSWu9s5rV55piHeXvkmOotMmTZ35vGIFuNTZyR0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl
rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2a:71:53:58:9d:3e:6b:e0:5d:42:50:da:48:47:3a:48:31:03:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E
Validity
Not Before: Jun 2 15:33:59 2026 GMT
Not After : Jun 3 18:46:59 2026 GMT
Subject: CN=FE50CF010EC2E01F3EA7E4F3059E00E1A62B166E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:67:10:92:85:3b:92:42:ef:a9:46:38:71:
69:56:ea:e9:35:ab:00:bf:a5:59:c7:bd:bb:f5:0c:
62:30:f6:c8:5a:c2:8c:4a:a6:4a:c6:52:f2:76:20:
e6:9a:36:56:6c:79:db:4a:a6:9b:cf:70:09:6f:39:
c7:fa:48:b5:95:94:78:10:2a:23:e8:f6:b8:06:61:
0e:7c:6c:98:5e:2a:ae:2e:18:2a:24:7b:33:b1:fc:
cf:dd:6d:81:1f:aa:44:c3:2f:8e:12:43:6b:9a:56:
32:98:b5:17:8b:10:6a:7f:21:83:cf:09:e7:27:27:
7c:cc:b1:ca:3c:3b:7d:da:3a:ea:f5:0e:1a:8e:23:
95:96:a4:aa:aa:1a:65:6b:e6:20:eb:39:80:90:13:
37:50:13:bd:94:cb:c7:40:87:fe:5c:70:55:eb:54:
66:ca:b2:38:0e:1e:95:9d:9e:23:32:36:41:48:57:
97:0b:d1:97:83:4e:bf:5b:30:5c:90:f9:3e:0d:e8:
16:7d:eb:01:e9:6e:64:9e:3e:b0:f4:ac:98:e5:e7:
8b:ff:86:58:0d:bb:b4:75:cc:b8:c2:64:1d:bb:80:
05:c5:7c:ab:25:c9:f2:71:bc:d4:ae:aa:4c:6e:bc:
38:a7:e8:df:c2:39:ad:73:b0:e3:10:95:02:2d:01:
f8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:50:CF:01:0E:C2:E0:1F:3E:A7:E4:F3:05:9E:00:E1:A6:2B:16:6E
X509v3 Authority Key Identifier:
keyid:1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ee:97:17:c3:d3:e1:b8:97:25:37:45:d2:07:c9:ec:5e:12:
fe:31:4f:fd:d4:d0:f6:ce:a7:b5:0a:ff:0a:d5:ea:25:e8:d5:
94:58:42:e5:3b:2f:1d:34:17:40:2f:02:79:cc:c1:66:2f:29:
ca:5b:05:93:72:78:1c:7b:40:14:6e:60:97:6e:be:44:e9:c5:
be:0c:98:02:e8:b0:28:14:57:86:45:d3:29:ca:05:c1:6a:82:
68:dc:d2:48:1d:90:f9:e2:2f:aa:01:4c:e4:af:b8:3b:37:42:
0d:8d:ad:f0:fb:aa:0c:c2:63:cd:94:60:e9:65:b8:7e:be:e1:
89:da:3d:70:55:67:73:6c:f7:f2:f3:9a:76:d0:69:42:3f:53:
16:dc:e8:48:d0:db:bb:47:dd:05:57:72:46:a8:73:dc:43:5c:
5e:40:9c:75:97:05:f0:29:44:bb:95:f8:5a:10:f7:d1:22:20:
e9:63:7e:cd:44:fc:8d:95:2b:22:20:72:b2:03:a1:b8:36:d0:
6b:4f:5d:f5:ad:56:cd:f4:65:bd:d2:68:5d:89:3d:e6:10:46:
f3:d3:d8:4c:4c:f5:ee:8a:c0:55:5b:7d:84:bb:0c:87:d2:e7:
41:db:4c:3f:6a:6e:49:e4:5b:e8:94:8f:6e:d6:36:39:79:12:
ae:7d:14:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:22:30 2026 by rpki-client