
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
File: C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft (raw, json)
Hash identifier: ub5vZiYlU1HXU4rC8XHDJJzjl5uhc0NJXOz6RxWHv0U=
Subject key identifier: C1:DB:26:69:DC:E6:99:B8:BD:A0:F7:C2:4E:0B:9B:4F:65:6B:30:23
Authority key identifier: C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19
Certificate issuer: /CN=C81C7BADCE1CC5075C398F6A91BF29C79B9D2419
Certificate serial: 5C15DE7038C91488D93B1E97575CF34E4ABED856
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
Manifest number: 40
Signing time: Fri 19 Jun 2026 13:22:06 +0000
Manifest this update: Fri 19 Jun 2026 13:17:06 +0000
Manifest next update: Sat 20 Jun 2026 16:41:06 +0000
Files and hashes: 1: 3130332e36382e3231332e302f32342d3234203d3e20313530353330.roa (hash: IpOu0hw1kU1giNWGBV8+r7d/kylv24hX1J5iHuymIp0=)
2: 3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa (hash: l8WWbVdsfCxIG53KEYuD2G886pY6gWcw9Sl2OeYKNN0=)
3: 3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa (hash: IVfgbGei5sG8aHxKcQ03LzSWtbMPZQoN7TQZBqmMcs8=)
4: C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl (hash: usd43ARoJl+tkkB0qOvKSQFCIO50effu/ngqvAVZe3Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl
rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 16:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:15:de:70:38:c9:14:88:d9:3b:1e:97:57:5c:f3:4e:4a:be:d8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C81C7BADCE1CC5075C398F6A91BF29C79B9D2419
Validity
Not Before: Jun 19 13:17:06 2026 GMT
Not After : Jun 20 16:41:06 2026 GMT
Subject: CN=C1DB2669DCE699B8BDA0F7C24E0B9B4F656B3023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:2a:31:7a:fd:55:c2:73:88:a4:35:9e:5a:
c1:96:a0:5f:b4:73:05:e8:ce:60:4d:2b:05:fd:4a:
d8:42:6c:60:ad:40:a0:c7:8d:7e:e8:88:9f:59:f0:
58:de:af:e4:fc:68:50:38:65:df:de:55:43:f7:02:
ce:22:9a:1b:da:f8:e0:b1:ae:11:09:a8:14:2d:ef:
28:d6:9e:69:52:78:cb:8e:89:89:82:a1:38:b3:ca:
3b:24:59:00:0d:58:73:0c:1e:4e:10:77:f1:a2:4b:
90:8c:ac:bd:f5:74:80:62:d0:b0:e2:9a:9d:77:18:
c9:83:09:ed:fb:74:24:af:82:98:c3:6c:19:7c:72:
71:65:f5:cc:91:07:a0:28:86:c6:fe:c5:ec:34:e8:
14:35:2a:cb:b5:f3:94:93:6d:9b:a4:fd:f2:56:b1:
7f:14:35:ff:23:84:45:3e:d4:fd:c8:40:bd:2d:12:
60:e6:6a:44:45:04:39:69:e5:40:0b:dc:fe:ef:b3:
cf:b8:60:48:69:a3:b6:8e:30:7c:c6:22:80:13:60:
73:f1:6f:10:e7:eb:ec:3b:6a:27:61:e8:1a:78:9a:
d3:f4:d1:a6:48:97:c1:ec:52:86:0b:99:41:59:0d:
08:7f:60:67:0d:3e:d6:66:25:ea:10:eb:9a:f8:2f:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DB:26:69:DC:E6:99:B8:BD:A0:F7:C2:4E:0B:9B:4F:65:6B:30:23
X509v3 Authority Key Identifier:
keyid:C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a7:6f:0b:20:2e:54:17:f6:ed:bb:63:be:dc:62:51:a9:81:
a0:59:d1:8d:0e:d2:6f:82:a4:a2:56:8d:81:a2:ad:dd:36:d7:
6a:bb:5a:cc:c4:06:42:ca:63:33:1e:68:9d:da:5e:e0:5c:2c:
ce:2b:b5:24:21:73:1f:6c:39:3e:b8:39:d0:60:eb:6f:84:8b:
02:b2:cb:bd:60:d4:a1:e2:de:ff:70:10:c5:a8:ee:eb:00:6d:
8f:83:f5:7c:a7:6f:89:df:ac:db:32:4f:61:d9:92:18:8c:bf:
5d:f9:cd:99:b6:75:32:5b:da:37:28:27:18:32:ea:be:9c:02:
55:6d:16:ba:3d:28:41:19:ed:91:57:8d:72:20:7f:92:92:8f:
23:04:eb:c6:49:66:22:4a:fa:e6:e7:33:9b:7d:6f:6f:d7:7a:
a4:b3:d2:4c:64:1c:b7:c8:83:0b:b3:19:06:91:7e:e4:0f:95:
74:2b:12:20:ef:85:74:e7:72:bb:18:41:c5:f1:49:5d:83:4d:
d7:40:9c:b5:a4:9e:2e:bb:04:d5:4b:b6:a4:ee:97:86:af:cf:
39:11:00:e2:72:f0:3b:59:0a:01:08:92:8c:c0:73:2e:25:a9:
e8:6b:a0:8d:04:8d:a9:0e:5d:fd:e9:cb:55:3b:25:cb:ac:90:
c1:13:48:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:15:19 2026 by rpki-client