
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
File: 44428DF327C8FF800708E2196181BCB000E14F9B.mft (raw, json)
Hash identifier: 3X9fIhGuss92azODQgXk+WQzKzVKstd+fnBTpXT28o4=
Subject key identifier: B2:17:59:4A:AF:BE:DE:D8:33:3F:B3:49:AC:0F:83:8C:FD:BC:74:3C
Authority key identifier: 44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B
Certificate issuer: /CN=44428DF327C8FF800708E2196181BCB000E14F9B
Certificate serial: 3CED9219EFA08F08B0FBBEA0D34C009D679D3801
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 05:34:14 +0000
Manifest this update: Sun 02 Aug 2026 05:29:14 +0000
Manifest next update: Mon 03 Aug 2026 09:00:14 +0000
Files and hashes: 1: 44428DF327C8FF800708E2196181BCB000E14F9B.crl (hash: sYr7yDOsP5VLCUJyOotarzQb8TKKUuH4msnUW2XcTws=)
2: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: 85/rZ6LwJ+jBT8qlN/LTVMyuVN987z9Fl30YQ8p1+qo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl
rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ed:92:19:ef:a0:8f:08:b0:fb:be:a0:d3:4c:00:9d:67:9d:38:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44428DF327C8FF800708E2196181BCB000E14F9B
Validity
Not Before: Aug 2 05:29:14 2026 GMT
Not After : Aug 3 09:00:14 2026 GMT
Subject: CN=B217594AAFBEDED8333FB349AC0F838CFDBC743C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:51:f1:51:ae:d9:af:0b:99:01:a2:c8:90:
f9:e9:26:bf:8c:72:53:8e:06:05:ec:38:3c:1b:f0:
22:22:67:57:65:7e:73:d1:38:d0:d7:04:19:fe:e3:
0f:fb:45:63:aa:e9:11:47:ab:84:5e:4b:5b:8a:86:
6f:21:dc:d8:87:0e:fa:48:be:a2:7e:f6:25:32:d7:
db:6b:38:1d:d1:a8:37:4b:6a:04:1d:9b:4e:9a:60:
88:f5:8f:98:26:c7:bb:5e:96:cc:7c:94:e8:b5:77:
fd:c1:02:09:26:ca:cb:0c:4f:ac:62:a1:63:3d:2d:
bf:6b:f4:0f:b9:3a:fb:64:12:02:08:34:6b:0f:b7:
12:53:ad:0a:f4:fa:27:27:3c:4d:04:95:b1:13:49:
33:c6:e4:f6:19:ee:2b:80:ea:90:5a:58:63:87:25:
b4:5c:80:35:d9:85:45:1f:e7:d7:98:ef:1c:b3:c5:
03:b2:d7:a6:7c:8b:01:20:b4:3d:ea:4e:c9:37:97:
0a:5b:56:ff:ad:30:f0:33:ef:bd:0d:b8:4b:92:83:
0c:7d:e1:0d:a4:21:45:7d:70:d5:96:1a:bb:98:f2:
ce:1a:f7:21:d7:67:e2:42:4a:6d:29:cd:66:29:8e:
9a:36:fa:b7:76:f9:af:86:a7:aa:54:42:73:07:20:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:17:59:4A:AF:BE:DE:D8:33:3F:B3:49:AC:0F:83:8C:FD:BC:74:3C
X509v3 Authority Key Identifier:
keyid:44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5f:dc:22:d2:2b:5e:c4:67:6a:09:88:15:a0:84:ef:aa:3a:
5c:77:23:88:50:47:49:23:7f:ab:ac:c5:b2:0a:0f:34:9b:48:
a8:de:ba:c1:75:fa:7b:dc:f7:1a:a2:08:c5:34:eb:7c:be:96:
21:38:4e:1b:ce:4d:a3:64:60:76:06:81:9f:db:04:58:58:d9:
7f:b8:5b:b0:f2:f3:3e:e2:81:49:63:82:98:f7:d5:e4:24:23:
28:6f:3c:12:f7:76:2b:c7:98:7e:46:95:2c:bc:35:c2:fe:47:
c9:01:bd:5c:1a:3a:98:93:f1:ac:03:f3:e8:d8:86:e6:9f:01:
6d:54:5e:79:dc:38:d3:41:3f:3f:fb:a0:50:5b:90:33:2d:38:
90:8a:c2:b0:3a:6c:4e:06:19:f1:2c:5f:14:5f:31:ad:9e:94:
67:63:a3:d1:3d:48:4d:be:c3:fa:73:80:6d:67:a5:fa:b1:4c:
21:4a:32:19:fe:ec:72:47:cd:07:db:7a:b8:01:a1:cf:55:90:
ca:a2:f1:68:f5:08:22:4e:72:3f:65:9c:55:2c:46:ac:e5:e7:
27:89:f0:3d:e1:05:2d:66:69:56:05:02:37:56:49:7b:68:22:
2d:1a:76:3b:43:8c:b8:86:dc:22:20:e7:77:f2:c1:46:0c:ba:
58:f6:2d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 01:44:08 2026 by rpki-client