
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
File: C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft (raw, json)
Hash identifier: FsIZVj+tgn5gna2WbbexxpLszHCHnO3ql83P6j0z3Zo=
Subject key identifier: 6C:E3:33:52:73:E2:A9:76:37:E3:23:EF:C0:E2:BF:C4:D2:59:97:C3
Authority key identifier: C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19
Certificate issuer: /CN=C81C7BADCE1CC5075C398F6A91BF29C79B9D2419
Certificate serial: 1020CDCFCB914F9E690F9F6D0C13D8B4A560AA5A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
Manifest number: E9
Signing time: Sun 25 Oct 2026 09:02:49 +0000
Manifest this update: Sun 25 Oct 2026 08:57:49 +0000
Manifest next update: Mon 26 Oct 2026 11:20:49 +0000
Files and hashes: 1: 3130332e36382e3231332e302f32342d3234203d3e20313530353330.roa (hash: IpOu0hw1kU1giNWGBV8+r7d/kylv24hX1J5iHuymIp0=)
2: C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl (hash: yA+aVs9aZ1uxPJkwq/C3sRjXiytCGnTfWDs8Qo2xl9Q=)
3: 3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa (hash: l8WWbVdsfCxIG53KEYuD2G886pY6gWcw9Sl2OeYKNN0=)
4: 3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa (hash: IVfgbGei5sG8aHxKcQ03LzSWtbMPZQoN7TQZBqmMcs8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl
rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 11:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:20:cd:cf:cb:91:4f:9e:69:0f:9f:6d:0c:13:d8:b4:a5:60:aa:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C81C7BADCE1CC5075C398F6A91BF29C79B9D2419
Validity
Not Before: Oct 25 08:57:49 2026 GMT
Not After : Oct 26 11:20:49 2026 GMT
Subject: CN=6CE3335273E2A97637E323EFC0E2BFC4D25997C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:b3:89:b3:84:7e:04:d8:ad:f7:f3:47:27:
70:d2:db:ea:df:60:6c:86:a2:1f:c7:59:ff:98:28:
94:83:24:99:a5:00:ec:96:10:d6:b2:a7:11:6a:f1:
f4:33:67:3c:60:7f:a2:55:16:3c:ec:25:ef:a9:de:
7f:80:1f:fa:e4:26:dc:e4:c5:e8:22:76:67:f7:69:
6a:47:4c:84:a0:ec:34:c6:74:ef:09:f4:ac:d9:08:
4e:02:da:57:7c:22:03:ee:44:82:b8:96:c5:2e:58:
5b:71:5c:ea:36:15:e5:86:20:07:ae:c7:e6:a2:f1:
73:6d:ad:63:c9:9c:f5:b4:ed:20:0f:96:ce:99:10:
0b:46:92:36:84:fa:1b:49:5a:90:5c:f4:bd:e3:b5:
0b:54:9e:84:e8:e6:d4:7c:05:48:54:f5:00:87:d2:
c6:f9:10:c5:a7:59:be:c9:ad:96:29:c3:c7:c9:5a:
4f:f7:82:63:26:67:d8:31:95:a0:21:76:58:07:8d:
6d:9c:d8:4c:11:3b:7d:52:0a:5f:48:98:92:91:29:
ac:52:5b:39:f6:d9:29:b2:d8:79:b2:07:5c:9c:90:
02:74:40:85:93:3a:75:c2:fe:3c:44:91:cf:d8:e8:
a1:1e:f9:c0:be:a6:cc:ea:08:da:10:b5:62:82:64:
17:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E3:33:52:73:E2:A9:76:37:E3:23:EF:C0:E2:BF:C4:D2:59:97:C3
X509v3 Authority Key Identifier:
keyid:C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fd:36:60:18:0f:f6:39:20:4e:fc:a6:23:34:52:d9:17:a8:
ee:fc:be:48:f7:cf:d9:7a:5e:58:e0:bc:83:1b:18:7e:ff:92:
71:6b:50:2d:75:c7:81:36:1d:3b:d1:31:e3:c5:37:a9:bf:28:
b1:a4:f9:e3:e5:6a:ea:63:27:53:d0:15:f4:1d:1e:e6:25:6a:
b2:7a:ec:d5:5f:e0:2a:cc:c9:04:a7:92:53:80:e7:a9:50:e3:
19:4b:73:ac:51:4a:df:42:1f:af:ee:fe:02:c7:6e:b5:c8:47:
b4:a1:ca:a5:f9:42:e5:cd:a1:9e:c3:f9:d0:01:84:e6:39:49:
c3:77:e7:37:dd:d0:78:d4:bc:ea:bc:3c:6a:e5:35:22:2c:1a:
b7:bf:36:b4:29:04:01:9b:49:80:b5:2c:c8:3c:df:99:c1:10:
0c:37:e4:f6:74:b7:51:67:e7:c3:e3:e9:0c:a2:6b:de:f3:c3:
80:79:32:8d:0a:58:d7:20:2f:90:1e:eb:da:82:ac:cc:2d:85:
4b:b2:a9:16:69:e5:28:67:ab:a9:5b:f5:ac:e9:05:73:f3:95:
c5:af:94:4b:3a:25:18:12:fc:b8:60:d2:32:20:b4:d0:59:fb:
94:a2:7c:a7:1b:61:03:6c:4d:15:09:43:89:f7:1b:ab:1a:ee:
31:df:e7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:47:30 2026 by rpki-client