
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft
File: C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft (raw, json)
Hash identifier: 5s2z2ZEhFzUEzVVp3SuLG1X+pWmMHvGkhPMb0TNKajc=
Subject key identifier: 6B:23:5B:CA:DA:83:D8:3E:62:77:5F:2E:23:8E:A4:0A:94:DC:2A:5E
Authority key identifier: C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88
Certificate issuer: /CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88
Certificate serial: 48CDB56A4238B8293F518FE9BAE9049C02CF050A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft
Manifest number: 42
Signing time: Fri 19 Jun 2026 14:58:47 +0000
Manifest this update: Fri 19 Jun 2026 14:53:47 +0000
Manifest next update: Sat 20 Jun 2026 17:05:47 +0000
Files and hashes: 1: C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl (hash: nfw1Av2BFNRG9rtpaLNQ/o5E5OA9K6RMOv5p7KKrwp4=)
2: 3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa (hash: Y+vREFE/EG16t2/cwbDbHoF+QrWyIBN3buYGvhuls/U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl
rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 17:05:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:cd:b5:6a:42:38:b8:29:3f:51:8f:e9:ba:e9:04:9c:02:cf:05:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88
Validity
Not Before: Jun 19 14:53:47 2026 GMT
Not After : Jun 20 17:05:47 2026 GMT
Subject: CN=6B235BCADA83D83E62775F2E238EA40A94DC2A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:ee:34:85:3a:2f:42:12:f1:cd:d2:8f:63:
4f:f9:22:a5:93:42:0c:9a:fb:74:e8:59:aa:28:13:
cd:ac:90:e5:74:a8:7a:3c:cd:57:47:a3:2e:89:46:
aa:4f:60:d0:c3:1f:80:90:04:11:9f:b6:cf:57:93:
5d:63:54:d9:67:79:7b:79:ff:f7:01:98:d0:99:6e:
e2:b4:5b:07:a0:3c:7b:f8:f2:82:26:09:5d:ae:db:
f5:ff:30:1c:28:20:e5:24:16:29:d6:28:0c:67:2c:
82:70:3d:07:b9:dd:50:8c:da:0b:d4:39:63:b3:64:
c5:e7:c2:97:da:25:3d:67:a8:99:41:94:91:e1:bf:
8d:14:70:9c:f7:fc:7c:2e:59:7a:31:d5:b2:99:81:
e3:5c:f1:67:06:74:2a:d2:57:39:f8:4a:de:46:84:
9d:8d:f7:da:3d:85:82:41:41:db:46:b2:6f:44:dc:
73:bb:e1:34:46:e1:01:7e:e0:05:89:2e:a1:26:dd:
91:20:bc:1c:60:97:94:67:b7:7c:6f:78:d5:82:1d:
c8:5c:46:c1:a2:13:ff:3a:96:2d:c6:9f:c8:10:1d:
c7:b9:7d:57:6e:5b:a2:b7:d7:44:03:06:47:60:28:
bd:12:03:5c:dc:39:e8:4e:98:b6:fe:48:03:a8:53:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:23:5B:CA:DA:83:D8:3E:62:77:5F:2E:23:8E:A4:0A:94:DC:2A:5E
X509v3 Authority Key Identifier:
keyid:C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:00:bc:b8:7b:b1:01:36:64:ec:49:0f:e6:c6:37:f0:ea:22:
ab:97:3b:8e:ed:dc:3f:6a:08:18:42:85:45:bb:e7:20:05:07:
c3:fc:31:d2:2d:24:5f:a8:88:ab:67:53:f7:41:1a:9c:d9:db:
e7:7a:99:40:5c:aa:f2:48:3a:16:10:98:5c:39:f7:f5:db:7c:
f7:dd:3c:d6:ef:85:98:92:17:e5:3a:f7:81:43:39:99:02:b6:
b7:96:59:42:a7:9c:89:95:c9:ca:c9:f2:25:48:d3:02:80:66:
d2:84:51:84:46:78:22:13:0e:bf:1e:a5:3a:9c:bb:ca:45:56:
72:10:55:a7:f1:6d:93:30:7c:ba:52:ba:91:f1:49:4d:ea:ce:
35:99:13:23:fa:74:9c:80:55:b3:01:e0:2a:5d:d3:b1:15:ae:
e3:cb:2f:b0:a1:90:72:09:be:e6:cc:55:74:c9:48:33:7c:71:
8b:c5:de:8f:40:df:be:2f:9e:38:f5:0b:76:5d:79:92:a3:9d:
6e:3d:93:11:33:5b:6a:79:3e:ec:7d:7b:a6:d5:91:e5:12:26:
a8:92:95:95:b5:a4:80:e2:23:c9:9d:0b:1c:b0:93:c6:8e:89:
8d:d6:c8:8b:68:c0:c0:4c:cf:a6:39:d3:c5:16:ea:22:27:11:
8c:98:3c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:01:30 2026 by rpki-client