
$ rpki-client -vvf rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
File: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft (raw, json)
Hash identifier: KuzH/aiOLLbfnZVTn5RE0Byxyj+jrxhYIvg/PM5BKoA=
Subject key identifier: D8:07:21:24:AD:16:B6:26:3A:F3:FD:5E:DB:70:4C:F9:2F:0B:36:98
Authority key identifier: 13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42
Certificate issuer: /CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342
Certificate serial: 7667FA1E26D723C0189640E2D265307C4FA7B777
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
Manifest number: 94
Signing time: Thu 20 Aug 2026 09:19:07 +0000
Manifest this update: Thu 20 Aug 2026 09:14:07 +0000
Manifest next update: Fri 21 Aug 2026 10:51:07 +0000
Files and hashes: 1: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl (hash: 0OyyKKwwxjrfufzxUAF/NsoB8Bgn+suIyFYTPhiMtqY=)
2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: uVPktCZC8+f+6UT6i6M1uIRYRGCJQ3maVFAM7Hkvn3s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl
rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 06:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:67:fa:1e:26:d7:23:c0:18:96:40:e2:d2:65:30:7c:4f:a7:b7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342
Validity
Not Before: Aug 20 09:14:07 2026 GMT
Not After : Aug 21 10:51:07 2026 GMT
Subject: CN=D8072124AD16B6263AF3FD5EDB704CF92F0B3698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:71:1b:96:cb:6e:a2:f9:a4:5b:3b:49:ea:
2f:00:84:71:83:8b:e5:eb:2c:ee:93:fa:d3:7c:24:
25:63:54:e2:e6:3d:42:f5:80:6e:e5:2f:e0:2e:b6:
f3:da:90:da:34:f2:95:94:8f:6a:96:f0:29:bd:de:
75:82:06:c8:a9:54:52:6f:38:b8:d1:b3:2a:25:d6:
a0:94:e4:8e:1d:b1:19:17:f6:94:4e:31:9d:33:1a:
73:90:d3:3b:ea:45:2c:fe:28:e7:ea:5b:8d:88:a9:
1f:9a:02:a8:59:95:78:b9:fc:ec:5b:2a:ef:83:85:
ff:0f:80:51:85:74:19:62:0a:1d:3c:c6:e4:07:36:
be:4c:8b:e0:21:68:10:87:7a:5f:c3:4a:5b:f0:c7:
97:1b:1f:cb:1a:ad:06:02:89:db:99:1b:75:be:95:
06:0e:07:9e:6a:79:88:c6:59:51:50:85:d4:ed:fb:
ee:28:cb:36:a9:b8:3a:31:0a:6c:f0:22:3d:84:29:
b5:77:be:21:f5:99:9e:0d:d2:b4:6a:db:34:f1:f8:
a3:b1:e4:39:56:38:6b:fc:3e:6b:5b:59:93:04:ca:
38:bb:e6:82:8d:a4:21:f7:26:fe:4a:8a:e5:44:a7:
57:3a:35:68:66:f1:d9:ab:15:df:38:ac:38:5b:76:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:07:21:24:AD:16:B6:26:3A:F3:FD:5E:DB:70:4C:F9:2F:0B:36:98
X509v3 Authority Key Identifier:
keyid:13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:28:25:ac:e5:c8:66:2c:5b:e6:5e:cd:40:c0:11:28:94:12:
48:6a:8f:17:7c:30:4f:3c:77:4b:18:c6:91:51:f4:d8:88:6d:
09:30:c2:5d:56:9a:ec:17:7a:cc:b8:92:56:30:ee:f6:6c:0a:
84:8d:81:52:bc:c2:16:97:ac:2f:d6:9d:b0:6f:13:1e:5e:38:
37:c3:71:13:3b:38:09:9d:79:d2:82:57:18:16:c5:52:d2:ab:
71:1f:4b:ef:44:05:22:aa:28:79:3a:ae:1e:c0:7f:84:bd:33:
f1:69:cb:e6:e2:23:67:0a:84:eb:b5:44:81:cd:d6:b4:16:c7:
fb:41:7e:9e:a5:bd:9d:10:53:81:2a:26:26:a6:bc:d6:b2:0d:
ad:b2:aa:de:93:4c:8e:0f:f5:ca:41:c2:75:86:0e:10:82:f9:
69:8b:1a:f4:fa:01:80:ee:cc:b3:5d:aa:5e:0a:a8:1b:15:a5:
6b:69:68:dc:4b:16:82:19:eb:67:94:80:96:23:bf:29:72:23:
b1:bf:b6:c7:04:ff:cc:a6:26:0f:e1:06:16:6d:e5:74:90:fe:
02:43:bd:19:e6:cf:bf:7a:78:95:46:a4:a1:eb:43:c1:e4:80:
1d:ba:a3:8a:65:43:38:ec:41:b3:2c:dd:26:b8:f4:bb:43:c1:
33:02:82:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 13:15:46 2026 by rpki-client