
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
File: 2BD3626FA7C4C8A787225E35241AD5992151D359.mft (raw, json)
Hash identifier: OTMxS2aSBapYjpMJ0f9EjzoVW5wFawTMDCXLkufLVao=
Subject key identifier: C9:D6:11:3E:5C:C8:5B:0D:19:53:8D:05:F3:27:A6:1F:A9:72:5D:0E
Authority key identifier: 2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59
Certificate issuer: /CN=2BD3626FA7C4C8A787225E35241AD5992151D359
Certificate serial: 0FCEB3837E7232531A15E55E2D9B06BE1584FCB5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
Manifest number: 6A
Signing time: Sun 19 Jul 2026 07:51:47 +0000
Manifest this update: Sun 19 Jul 2026 07:46:47 +0000
Manifest next update: Mon 20 Jul 2026 09:30:47 +0000
Files and hashes: 1: 3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (hash: Lts+nDghqdeOjHPLJupIS91t89Hz46DHGxSYyuVdlFI=)
2: 2BD3626FA7C4C8A787225E35241AD5992151D359.crl (hash: LQqqr6qo9hwsV/yR3oBh07v0tnEL1Z9sGQh8g61WSl4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl
rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ce:b3:83:7e:72:32:53:1a:15:e5:5e:2d:9b:06:be:15:84:fc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BD3626FA7C4C8A787225E35241AD5992151D359
Validity
Not Before: Jul 19 07:46:47 2026 GMT
Not After : Jul 20 09:30:47 2026 GMT
Subject: CN=C9D6113E5CC85B0D19538D05F327A61FA9725D0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:5c:ed:30:52:07:50:4c:d2:77:ad:39:24:
d8:4c:3a:b6:02:85:bf:85:cc:5b:18:b9:f9:1e:1b:
d2:28:34:60:16:8d:fb:39:6b:b2:e6:35:83:d6:e9:
d9:31:a7:b6:07:1e:7f:88:33:b6:20:42:54:a8:3d:
a7:e4:f8:dc:c8:d2:9d:86:05:a4:67:8c:2d:0d:80:
93:09:03:4c:3b:4f:75:6e:b3:51:5e:ed:ab:d5:54:
e2:26:cb:65:bf:5f:1d:c5:bc:19:60:7a:9c:9e:72:
00:97:ce:fb:96:4c:36:5d:39:e9:6a:eb:d3:37:29:
7e:9a:c7:47:b3:4a:2a:cb:1e:f0:5f:fd:b9:5b:33:
1e:3f:ca:bf:8d:a3:21:40:f2:3f:75:12:5d:f5:22:
1b:14:4c:9c:9c:12:d1:e7:4a:90:03:a0:f0:84:1b:
77:36:a2:72:ba:99:0f:f4:3f:2d:0b:1d:37:ec:5b:
7a:7f:18:a0:15:61:04:f7:35:f2:2e:fb:c7:8d:97:
6b:5c:01:fa:e1:b6:5b:64:45:81:e5:71:c6:1f:20:
bc:39:c4:fe:5a:95:c0:28:55:8a:9d:22:f5:f0:cf:
f7:cc:d1:40:7a:fd:b9:1e:bd:e9:11:ba:27:40:44:
68:00:d6:03:49:c6:aa:f1:a5:ee:eb:9a:d4:cd:eb:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D6:11:3E:5C:C8:5B:0D:19:53:8D:05:F3:27:A6:1F:A9:72:5D:0E
X509v3 Authority Key Identifier:
keyid:2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8e:3d:5b:5e:c3:03:4c:a0:27:84:d8:cf:b4:82:36:0c:fb:
b2:07:ae:81:cb:7e:47:6f:ad:a1:7b:3c:07:30:91:08:e9:c2:
2b:92:7e:5f:b1:97:4c:94:fd:44:ab:a4:ba:9a:48:11:98:b1:
9c:82:66:6b:d5:3d:c7:17:29:79:e9:af:31:86:36:c2:ca:ed:
db:79:a6:9a:59:54:70:1b:b9:6f:c0:d5:32:82:cc:a3:81:19:
90:1a:03:69:82:d0:7b:1d:23:31:b0:cb:45:c1:fa:7c:3b:12:
38:41:b8:5e:08:83:fc:23:f5:92:29:bc:68:06:b8:c5:1a:c8:
cc:56:d7:23:e8:d9:69:ac:1f:86:37:f8:40:86:79:63:da:ff:
bc:25:ba:bd:7e:b5:ac:ca:1b:b5:9e:f5:3c:e4:65:8f:2e:c8:
ab:6f:82:38:14:51:2f:9c:68:48:f0:12:49:04:5f:1a:6e:e5:
99:66:42:84:a6:10:7d:b2:11:92:5e:3e:2a:6a:bb:3d:b1:30:
10:9c:b0:cf:96:48:1f:97:c3:8c:3e:81:3d:0f:bd:6a:a5:58:
bf:dc:0e:a8:a8:f4:b5:60:de:25:8b:0b:54:33:6d:01:95:d9:
f0:fa:52:1f:a5:4b:73:2e:2d:93:b4:f8:e0:c1:95:30:a4:9b:
b6:e0:e3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 23:58:42 2026 by rpki-client