
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
File: 73AC68F9F57E709948037DADDAC8DC88616BF980.mft (raw, json)
Hash identifier: cDplclqrsezDjuyGIw+c4sJNxE02WUrwxqmmbkyMABg=
Subject key identifier: CE:AD:AD:BC:A8:51:4F:82:31:DF:D2:AE:0A:E2:90:80:30:53:94:15
Authority key identifier: 73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80
Certificate issuer: /CN=73AC68F9F57E709948037DADDAC8DC88616BF980
Certificate serial: 34A8A19EF2C91270400F421D3B8513024D90708D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 08:07:01 +0000
Manifest this update: Thu 18 Jun 2026 08:02:01 +0000
Manifest next update: Fri 19 Jun 2026 11:30:01 +0000
Files and hashes: 1: 73AC68F9F57E709948037DADDAC8DC88616BF980.crl (hash: GZQ/lVqGQ1SWI1tboBhkQUe3ddtpPy5shq8NhPfom1A=)
2: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: vd1S4Z6+zmIZSCdC4Qdy1PZIz8w97xUXmpTWkwwvVQE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.crl
rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a8:a1:9e:f2:c9:12:70:40:0f:42:1d:3b:85:13:02:4d:90:70:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73AC68F9F57E709948037DADDAC8DC88616BF980
Validity
Not Before: Jun 18 08:02:01 2026 GMT
Not After : Jun 19 11:30:01 2026 GMT
Subject: CN=CEADADBCA8514F8231DFD2AE0AE2908030539415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:b6:75:4c:e8:7e:f2:7d:6c:30:cb:07:57:
b3:f8:f9:f4:59:fa:4b:f9:a0:98:d0:1e:31:95:b0:
16:40:f1:d5:e9:7a:19:e7:0e:d1:4c:71:2b:55:72:
b2:6e:a1:29:ac:56:6a:14:6b:8f:7d:09:e6:c7:8e:
74:af:a4:13:5d:14:c1:26:bb:42:5d:e1:a1:c8:4c:
de:11:c0:af:eb:7b:9d:aa:ed:19:f3:47:97:6a:f2:
38:c0:97:a4:10:c1:be:82:64:a6:c4:0d:2b:15:20:
07:83:3d:0b:b2:2b:30:a3:3e:69:68:e7:03:8e:06:
8d:01:ff:f4:03:99:8f:eb:7c:f3:3f:4e:d5:11:ff:
77:2c:04:fa:99:81:6b:61:f2:a6:7f:57:72:48:f5:
98:9d:14:fc:ef:54:a3:b0:4b:9c:bb:1a:b5:46:09:
1c:bb:94:10:ab:4e:1d:76:1e:53:dd:41:ee:d4:f3:
a4:a6:eb:0b:d4:fd:0c:9b:9e:ce:b0:d5:9d:c7:f9:
1d:a1:90:97:99:bc:eb:97:40:e0:fd:46:2c:17:f7:
3f:47:a5:c2:f0:2a:4f:19:9b:5e:ec:5e:a4:79:e6:
b4:c1:9c:b0:22:76:e9:71:d0:a1:b4:a4:c2:91:1f:
d3:43:7f:69:8b:3d:76:14:33:37:29:3d:6f:28:cf:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AD:AD:BC:A8:51:4F:82:31:DF:D2:AE:0A:E2:90:80:30:53:94:15
X509v3 Authority Key Identifier:
keyid:73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:81:d8:07:ec:64:dc:cc:b4:74:52:64:cd:06:2b:40:b5:19:
9e:81:70:09:ad:1a:f5:03:07:d9:65:28:3e:60:ee:73:05:bd:
93:1e:e1:28:bb:e3:58:f8:da:70:98:de:c3:68:8e:9d:ec:54:
f7:88:8e:7f:d4:eb:41:2d:d7:d1:4f:ea:84:fa:a7:18:f4:65:
fd:9b:5d:5a:2f:a6:4e:d2:94:b7:ad:c2:55:7c:f2:98:0b:49:
2c:0d:e0:23:61:a8:eb:cb:bf:fd:47:41:00:d8:82:02:96:2b:
6a:4c:2a:25:e4:e1:f6:54:77:cd:d0:5e:62:c1:3f:9a:23:26:
1d:50:57:ec:5b:f6:9e:ea:3b:33:16:eb:48:05:a0:c1:82:1c:
4a:a1:6b:a1:64:7a:55:4e:e1:a5:39:50:0a:0a:69:30:38:48:
43:96:f2:f1:7b:64:bb:55:36:72:ac:4e:a4:e7:15:07:a2:25:
b8:12:a1:ee:b0:ea:e9:04:68:6a:37:0a:ed:ee:9a:8f:60:c6:
c1:20:e4:de:f8:2e:00:35:f0:de:7c:3e:9b:8d:38:8a:02:3b:
25:f7:9a:79:cd:a6:ce:d1:4e:c6:23:db:d9:be:32:ee:9b:38:
a6:47:e1:ab:d4:ee:5a:21:81:d0:fe:c0:89:73:cd:e8:94:15:
66:f0:a0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:12:52 2026 by rpki-client