
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
File: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft (raw, json)
Hash identifier: 9e/R2PySdHVHM6zyp5UFdIAIW+iGgBuEcDdTgM8deOo=
Subject key identifier: C8:53:F0:9D:5D:07:B9:60:AE:B6:93:78:5C:CF:44:E3:58:0F:C7:D5
Authority key identifier: DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27
Certificate issuer: /CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027
Certificate serial: 0C19EA72F174CB9A2264E9CD4F3976B3B3219FD8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 06:54:55 +0000
Manifest this update: Sun 25 Oct 2026 06:49:55 +0000
Manifest next update: Mon 26 Oct 2026 09:32:55 +0000
Files and hashes: 1: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl (hash: 6OfdtZNdNQlBcazIqHqD8va1a9yS+JT6mAGUNXdPz9I=)
2: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: 7auAs3JZetQc2Zih3zy94WvlM7s/oo6N4QlMSA+A3AA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl
rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 09:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:19:ea:72:f1:74:cb:9a:22:64:e9:cd:4f:39:76:b3:b3:21:9f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027
Validity
Not Before: Oct 25 06:49:55 2026 GMT
Not After : Oct 26 09:32:55 2026 GMT
Subject: CN=C853F09D5D07B960AEB693785CCF44E3580FC7D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:b8:94:62:8d:03:ca:a6:d7:b7:f5:6c:22:
c5:d5:ba:40:e4:b8:5c:cd:8f:ef:a4:07:f5:93:f9:
42:16:54:22:52:c2:fb:de:6c:87:24:03:26:b2:ac:
8f:43:6f:30:0c:78:fd:7d:9c:a8:b0:25:04:57:8f:
4a:b8:dd:60:4a:d0:23:02:f6:52:3c:43:e3:26:bd:
46:94:a5:20:04:eb:b6:b2:ed:f9:97:c5:7b:9f:ae:
d8:ee:e6:54:7d:f1:6c:82:f8:9d:ba:e4:6e:f1:ae:
02:d2:49:5a:81:8d:40:a0:f2:58:b7:91:20:c8:2b:
8d:52:94:90:2c:d5:5e:70:50:44:c9:73:85:1a:0a:
34:e7:b5:4e:ca:d3:be:c5:c2:5b:eb:95:ba:8e:02:
95:73:07:ac:c1:67:b1:93:60:ba:17:ab:4a:b5:7b:
c3:ce:cc:d5:bb:31:8a:da:79:de:d3:3a:41:27:8e:
e6:d6:30:77:17:39:3c:a7:93:66:27:39:7c:ff:48:
f2:5b:b3:a8:4d:5d:69:43:50:42:db:c3:6c:18:d4:
8d:09:5f:ed:d1:af:55:65:21:f5:f1:1c:00:e0:a4:
fd:8a:4c:0b:b4:b2:f7:3e:b2:89:79:1c:0a:0a:97:
0a:5a:ec:17:a2:35:75:2c:bd:85:3b:e1:cb:bc:21:
b8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:53:F0:9D:5D:07:B9:60:AE:B6:93:78:5C:CF:44:E3:58:0F:C7:D5
X509v3 Authority Key Identifier:
keyid:DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:67:fb:e6:d9:db:5b:8c:92:cc:26:8a:f3:24:0a:f6:62:2a:
95:92:6f:b0:3e:8e:ea:a8:0b:20:b6:cf:af:44:b6:27:ad:7f:
61:c8:9e:3b:0d:40:56:b9:44:14:dd:1d:9d:6e:72:dd:aa:e8:
16:00:1a:26:f3:7d:2a:8a:f3:8b:16:45:ab:75:97:a6:fb:14:
55:2b:c7:89:fa:eb:dd:5f:45:82:cf:0a:52:3c:6b:a7:4a:59:
94:81:1e:9a:a9:61:18:32:c4:bf:0a:08:f4:f1:cb:99:9c:e9:
66:ed:4d:28:0a:ee:49:d8:ed:7c:c5:c4:9d:00:40:86:e2:fe:
37:11:d9:2a:81:6d:35:7f:88:d1:a6:98:b0:fd:e1:d3:f2:e2:
82:58:87:27:4f:4e:dc:d1:a7:8c:0a:ec:35:54:04:fd:7e:62:
c8:a7:78:be:b5:41:ce:a4:57:80:2f:1e:5e:7b:4f:1a:6d:24:
b1:29:80:34:9d:e4:0b:15:13:a8:fc:54:d2:1a:8b:4f:07:52:
65:88:c6:05:30:48:30:cc:26:e2:b4:4d:c9:b4:35:78:1b:f2:
5b:c5:10:c1:21:a4:a6:87:95:5d:d6:94:69:cc:f2:ef:9b:c5:
dd:6c:98:66:99:66:0e:76:61:ac:29:07:47:40:7e:88:80:ad:
16:77:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:41:34 2026 by rpki-client