
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft
File: 1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft (raw, json)
Hash identifier: +3yWUG4H+ePFl3E5jSGt43BnMeeDSfQsoBySo889dwQ=
Subject key identifier: 2B:B3:32:B0:63:54:29:DF:C8:B5:75:A0:D0:35:DC:81:F4:3E:5D:C5
Authority key identifier: 1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91
Certificate issuer: /CN=1DD0DE90198F9D1A28E457EE5788E7D13547CB91
Certificate serial: 035085B21558B0BFE95CA6F99474CC5F1198660A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 13:39:08 +0000
Manifest this update: Sun 02 Aug 2026 13:34:08 +0000
Manifest next update: Mon 03 Aug 2026 14:27:08 +0000
Files and hashes: 1: 1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl (hash: jU1C9f0uUyBem0foHb5JnTio3xamGSxnyI0lxZA5IHk=)
2: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: fsyTi1wKrYDgpsKCw76juglRx93+2YzZ5l6lzjCtU8E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl
rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:50:85:b2:15:58:b0:bf:e9:5c:a6:f9:94:74:cc:5f:11:98:66:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DD0DE90198F9D1A28E457EE5788E7D13547CB91
Validity
Not Before: Aug 2 13:34:08 2026 GMT
Not After : Aug 3 14:27:08 2026 GMT
Subject: CN=2BB332B0635429DFC8B575A0D035DC81F43E5DC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:21:dc:61:e0:a2:37:d2:fc:e3:59:6f:d1:
92:55:c0:ba:b1:ba:cb:3b:6e:91:fa:be:98:3b:87:
73:09:1c:d0:88:63:df:a2:9e:68:4c:6c:da:59:9a:
93:6c:e5:09:07:12:e5:ee:2a:1a:8b:5f:a0:4b:1d:
b1:5c:1a:1f:66:0a:1c:9e:28:7f:53:37:7d:ba:b8:
87:96:b4:37:80:7b:2c:b6:94:81:1b:ca:e0:68:0f:
84:8e:b8:7e:a7:3b:1b:52:10:de:02:b0:06:cc:ed:
a6:e6:79:9c:43:5e:0c:5a:33:82:b9:e5:55:4a:09:
b5:2b:40:5a:d2:83:d6:5d:bb:45:7a:b5:9f:90:4d:
2b:ac:fa:be:51:12:d8:e8:62:8c:56:29:39:95:ea:
5c:a8:1c:f3:8a:9a:70:5e:da:f8:91:33:51:87:f9:
31:5c:f7:25:8c:da:87:08:3f:ed:18:95:9a:d1:64:
53:2c:98:7b:8b:e4:d8:9d:92:98:2c:55:26:8a:3a:
22:50:cf:5d:ac:5c:3d:3d:12:a1:99:6d:76:c5:1c:
be:f9:38:46:cf:60:8e:68:b7:2f:04:a0:79:5b:08:
b6:3c:6d:39:44:4d:f8:97:ec:ff:0f:3b:a2:3e:c7:
0b:43:71:b5:49:11:f6:2c:9a:37:7e:43:77:af:28:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B3:32:B0:63:54:29:DF:C8:B5:75:A0:D0:35:DC:81:F4:3E:5D:C5
X509v3 Authority Key Identifier:
keyid:1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:82:72:89:39:c2:9a:39:ae:7b:ff:d9:b5:98:c3:23:b8:00:
cb:3e:78:c3:81:a0:54:76:5c:a3:02:b3:84:07:56:fe:3b:35:
7f:cd:6a:70:22:f9:b0:e8:b7:a5:c3:be:a3:d7:f8:4e:6d:cd:
e3:e9:8c:8a:15:88:4c:c8:3f:33:6e:d0:b6:ac:00:c5:ed:c6:
95:b1:33:69:2f:7b:5c:c0:a1:03:f2:fa:4c:bd:82:2e:72:47:
11:84:cb:32:28:13:09:d1:b1:60:79:2d:7e:b8:81:6a:f1:ff:
c6:ae:10:84:11:e7:be:e0:22:9b:78:d1:51:fa:51:8c:7a:ea:
ed:05:b3:03:57:26:f3:97:b8:a1:c1:89:e6:47:29:b9:b7:1e:
bf:03:f2:18:9d:8d:01:33:5a:e4:db:1b:56:29:eb:8c:28:4c:
c5:ea:10:23:27:58:b6:3f:c0:68:70:9f:8e:92:44:d7:5b:e1:
6c:29:3d:18:6f:39:29:a0:52:7d:a6:98:c6:4d:d9:9a:ec:30:
e3:22:fb:e6:8f:8f:16:c8:82:bd:89:c9:ce:34:30:9d:49:9c:
3a:38:91:98:47:8c:41:ed:1b:67:f2:7d:93:b1:11:37:de:70:
d6:f1:5b:59:3a:bd:f1:31:f6:bc:3d:04:5a:94:08:c1:7b:fa:
ab:53:53:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 01:49:45 2026 by rpki-client