
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/81770AE7AB1C0710552300F570246437C33AF966.mft
File: 81770AE7AB1C0710552300F570246437C33AF966.mft (raw, json)
Hash identifier: bpfmnYchXvBkTW6Pn90AV8qfkngcFwvaM+MlwwiIMAY=
Subject key identifier: 4B:2B:BF:C9:40:4F:B9:28:4C:D6:6B:39:AC:EC:38:8B:85:3E:10:2E
Authority key identifier: 81:77:0A:E7:AB:1C:07:10:55:23:00:F5:70:24:64:37:C3:3A:F9:66
Certificate issuer: /CN=81770AE7AB1C0710552300F570246437C33AF966
Certificate serial: 1FD73BAA7086741C4C2223471EBF3B5141AB917D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/81770AE7AB1C0710552300F570246437C33AF966.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/81770AE7AB1C0710552300F570246437C33AF966.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 14:02:10 +0000
Manifest this update: Tue 02 Jun 2026 13:57:10 +0000
Manifest next update: Wed 03 Jun 2026 16:35:10 +0000
Files and hashes: 1: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: oZ3J7MBStu6VmCz5o4iIjtH7J9m0znNuPdPT3MGXtR0=)
2: 81770AE7AB1C0710552300F570246437C33AF966.crl (hash: OlkPBnFuT68iO2BrTUFBdOGqP4lN5TzSpFTEjH8qxpI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/81770AE7AB1C0710552300F570246437C33AF966.crl
rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/81770AE7AB1C0710552300F570246437C33AF966.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/81770AE7AB1C0710552300F570246437C33AF966.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 16:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d7:3b:aa:70:86:74:1c:4c:22:23:47:1e:bf:3b:51:41:ab:91:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81770AE7AB1C0710552300F570246437C33AF966
Validity
Not Before: Jun 2 13:57:10 2026 GMT
Not After : Jun 3 16:35:10 2026 GMT
Subject: CN=4B2BBFC9404FB9284CD66B39ACEC388B853E102E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:ab:56:12:f7:bb:ad:cc:a4:df:e9:05:3d:
a0:af:01:6d:0b:73:80:de:2f:6d:0b:a9:24:66:ad:
b6:49:c1:72:9d:ba:e4:da:37:7c:7e:b9:6a:37:14:
14:c8:f6:2d:fd:27:90:83:f8:b0:77:83:ac:9e:99:
02:a7:3b:b1:23:78:a0:c2:a0:5d:57:dc:b8:0d:62:
d1:38:dc:ca:1e:55:01:51:a1:bf:34:a0:bd:91:2a:
ed:d3:e4:2e:b9:e3:89:18:ed:10:74:be:ae:4f:ca:
3c:58:d9:10:21:90:75:24:56:10:2a:4e:a6:75:63:
67:1a:40:cd:aa:50:24:59:d9:9c:65:a5:3a:cd:41:
f2:cc:db:e8:48:80:03:86:64:ba:0d:82:0b:cd:b3:
bd:80:db:91:a8:f7:99:7b:fb:61:9b:eb:79:b1:ba:
97:b6:cf:bb:49:46:b9:69:08:b5:2d:3a:ce:45:a8:
6d:1f:16:c9:5a:cc:a3:80:30:b8:07:cd:ea:9f:e6:
c5:61:cb:81:05:c3:29:36:09:a5:ed:66:3e:78:c4:
ec:8a:97:bd:ee:6f:de:05:c0:34:a5:76:b1:69:42:
15:25:67:38:09:73:c6:70:b4:f9:5a:72:69:00:cc:
fc:00:da:18:eb:88:1d:cf:aa:51:d1:ea:41:d9:65:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2B:BF:C9:40:4F:B9:28:4C:D6:6B:39:AC:EC:38:8B:85:3E:10:2E
X509v3 Authority Key Identifier:
keyid:81:77:0A:E7:AB:1C:07:10:55:23:00:F5:70:24:64:37:C3:3A:F9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/81770AE7AB1C0710552300F570246437C33AF966.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/81770AE7AB1C0710552300F570246437C33AF966.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/81770AE7AB1C0710552300F570246437C33AF966.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:01:5a:9d:4d:5a:e8:8f:92:11:25:c5:f3:d7:34:96:9c:b6:
6d:e0:06:10:c4:0c:52:06:15:16:78:58:d5:03:66:f5:a6:0d:
9d:4b:39:be:fe:23:6a:de:f1:91:30:2d:15:1b:dc:17:51:5a:
ae:9e:76:f5:d3:4c:bf:af:18:52:b3:03:30:64:d7:d3:ed:15:
9e:66:89:c9:c6:d1:f0:d0:8f:89:ed:d7:4d:8e:51:93:89:01:
a2:d3:e3:02:23:71:f0:a9:60:79:a7:6f:fb:3a:35:fc:ce:02:
6b:df:96:3f:22:73:b7:ac:f5:2b:a5:ff:a7:88:e8:df:9c:50:
04:05:44:bd:52:27:ca:fb:8d:b4:e8:b2:73:8c:8b:d9:2c:05:
c0:ce:98:1a:f6:ba:10:90:2e:fb:37:01:e6:74:55:d3:60:29:
11:b0:64:d8:eb:b7:32:ea:8b:a7:1d:8b:ff:f5:27:b2:5f:56:
77:fe:04:f8:c4:c1:29:2b:41:72:60:55:97:71:69:b6:99:38:
d5:6b:4f:f7:df:3b:85:55:d4:f0:85:e2:74:58:8b:c1:ca:26:
61:2c:45:e6:aa:8d:af:5b:8b:c7:88:d7:07:2b:f1:fe:a6:16:
5c:8a:81:a4:0e:73:d4:85:cb:3a:54:81:22:de:55:e7:ef:93:
a0:e4:e2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:22:35 2026 by rpki-client