
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft
File: 2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft (raw, json)
Hash identifier: N6WdMGiEIGJTTH33ztn4sCamnwPNB2ghw4Ajo99uS9Q=
Subject key identifier: D3:7E:78:9E:B5:67:1C:17:9A:FF:44:1E:C2:F6:D5:03:78:36:FA:F5
Authority key identifier: 2E:6D:1F:78:4F:D9:72:18:83:D0:85:BA:15:F2:1C:AD:F4:D9:D5:E9
Certificate issuer: /CN=2E6D1F784FD9721883D085BA15F21CADF4D9D5E9
Certificate serial: 6C05576DA6EEB752A3ACB9C78602C8709DA7A2B2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft
Manifest number: 08
Signing time: Thu 07 May 2026 15:26:50 +0000
Manifest this update: Thu 07 May 2026 15:21:50 +0000
Manifest next update: Fri 08 May 2026 16:37:50 +0000
Files and hashes: 1: 2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.crl (hash: e9AlTVoOXy0dhQhfi7bybZSErS9LbWPtHmqUJ5Mo47k=)
2: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: +oYni9XzPTeAFRIQkMYAJOggC3zZ7YXNPLVdua7XUGk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.crl
rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 16:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:05:57:6d:a6:ee:b7:52:a3:ac:b9:c7:86:02:c8:70:9d:a7:a2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E6D1F784FD9721883D085BA15F21CADF4D9D5E9
Validity
Not Before: May 7 15:21:50 2026 GMT
Not After : May 8 16:37:50 2026 GMT
Subject: CN=D37E789EB5671C179AFF441EC2F6D5037836FAF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:16:d8:13:98:88:ff:94:4b:9f:dd:8f:b7:
52:c8:8b:45:15:97:e3:f4:ef:b3:81:d0:5d:8a:52:
96:a1:35:4d:0b:9a:c2:d9:91:f5:3c:f8:e5:c3:55:
66:a1:1e:3f:8b:6b:6f:a6:d3:b1:c5:4c:92:cf:b6:
dc:88:17:21:82:b7:39:47:94:a5:61:e2:aa:c6:af:
c4:43:cd:7f:01:71:6d:29:24:7b:2c:d2:ed:fc:f2:
be:47:55:9a:9e:68:8c:4a:32:a3:7f:6b:fd:49:76:
b4:2e:ed:9a:54:f7:66:d0:a8:4e:76:91:32:26:ea:
2c:1f:0c:3c:9d:99:bc:fc:ae:06:e3:28:9e:31:e7:
22:17:36:0c:ed:67:70:eb:f1:0d:65:0c:c1:27:a0:
f5:98:4c:81:21:32:42:89:6b:1d:8d:d1:55:c9:5f:
42:f4:ce:8b:cd:c4:02:41:b7:0a:b8:a1:56:d0:f1:
e9:55:d7:92:db:7f:71:7e:3b:01:c3:a0:62:7c:ee:
67:a7:d9:28:1e:86:12:46:a3:dd:b8:8b:c4:02:92:
5a:43:66:8d:dc:67:06:e7:5c:8d:8a:53:ef:fa:1d:
9b:2a:c6:40:a3:1e:b5:31:d7:cf:81:16:38:cf:0a:
5e:4b:2d:9d:9b:e4:c6:ff:f0:d7:51:19:2f:c3:28:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7E:78:9E:B5:67:1C:17:9A:FF:44:1E:C2:F6:D5:03:78:36:FA:F5
X509v3 Authority Key Identifier:
keyid:2E:6D:1F:78:4F:D9:72:18:83:D0:85:BA:15:F2:1C:AD:F4:D9:D5:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d9:49:c0:3f:c8:28:b9:bb:6f:33:8b:ff:16:55:3d:32:78:
0c:30:f3:0f:ac:69:e8:0a:cb:0e:a3:14:37:24:22:04:80:e2:
2c:16:94:8e:14:9e:39:9e:c0:fd:af:85:46:e6:c7:84:4d:be:
32:48:2e:08:ce:fb:d1:6b:d6:16:fc:58:0c:78:fa:f7:5b:4d:
85:74:ed:be:e8:0a:1d:d1:bc:07:bf:a9:9f:4e:c1:86:a4:05:
6b:fd:05:dd:8d:4e:d6:fc:32:c4:39:73:3b:d8:b7:b2:5f:d2:
33:91:cb:ba:b8:00:b1:c0:5c:d6:6f:ca:78:a3:b0:4f:1b:3f:
b0:06:b6:45:b0:0e:f7:cf:10:37:8a:45:25:49:99:bc:d3:05:
0c:44:ad:85:fa:59:95:16:ce:b0:e8:85:71:36:f3:22:39:55:
5e:d4:3a:39:01:56:67:fc:7f:cb:f3:95:01:5c:f6:74:7c:f4:
62:87:0b:41:33:b2:5e:cd:37:98:b2:dd:57:12:c1:98:be:30:
d4:51:ae:13:0f:f6:36:29:d0:79:7a:af:66:65:bd:9d:1e:05:
dc:76:c0:0c:c8:d7:06:ef:22:a2:1e:e9:44:b2:d6:8f:41:41:
fd:e2:23:ca:2c:e9:13:c8:e3:1b:8e:9d:0e:d0:8e:8d:46:ae:
6d:d3:af:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 07:30:03 2026 by rpki-client