
$ rpki-client -vvf rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft
File: 2111C1DE0964BA3363560863B0A6338C56E44B27.mft (raw, json)
Hash identifier: g6viJuY3CWWOQmaFxB1JfvDXpiFUsgWN/xv3+/DP/3A=
Subject key identifier: 17:A7:F8:9B:EA:BD:98:28:ED:60:9F:81:6F:97:E1:B9:8E:AD:06:E9
Authority key identifier: 21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27
Certificate issuer: /CN=2111C1DE0964BA3363560863B0A6338C56E44B27
Certificate serial: 67B20AE888EDEF364FA85A20EF1081879AA18156
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 23:51:16 +0000
Manifest this update: Sun 02 Aug 2026 23:46:16 +0000
Manifest next update: Tue 04 Aug 2026 03:44:16 +0000
Files and hashes: 1: 2111C1DE0964BA3363560863B0A6338C56E44B27.crl (hash: SE3altDN8dwqfscPzzU1KiMy7Y2Xt7MgfM/JScLidY4=)
2: 3130332e3136322e3130352e302f32342d3234203d3e20313337333136.roa (hash: reUfW2xUZcOA3UU73tVnYqvdrqLkl2f35VFNF05Zufw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl
rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b2:0a:e8:88:ed:ef:36:4f:a8:5a:20:ef:10:81:87:9a:a1:81:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2111C1DE0964BA3363560863B0A6338C56E44B27
Validity
Not Before: Aug 2 23:46:16 2026 GMT
Not After : Aug 4 03:44:16 2026 GMT
Subject: CN=17A7F89BEABD9828ED609F816F97E1B98EAD06E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:28:7b:b5:20:ed:e4:9f:05:7a:72:8d:78:
d1:aa:d8:11:d6:9e:43:18:5f:c7:f6:2d:e2:8a:2f:
dd:23:02:6f:bc:c5:f6:bb:a0:f9:e5:b3:d4:fc:80:
9f:22:cf:4a:ac:9d:94:a5:bc:f9:97:51:e5:aa:d3:
c1:a8:e4:08:1a:84:95:44:6d:04:5f:41:93:3a:88:
e0:36:ea:12:41:88:3e:5d:a7:b4:f0:e9:96:a2:4f:
c5:98:77:a7:9b:d4:ae:4f:a4:e7:8c:ce:e4:51:4d:
ea:b3:26:fa:8c:07:f5:6b:0c:f9:3f:b5:80:4f:4d:
48:bf:5d:09:9c:ec:4f:f0:9b:a3:77:c9:af:01:df:
93:53:18:9c:1c:c0:f7:63:d1:cc:32:79:49:6f:bd:
9e:84:50:5b:39:df:ce:fb:ec:40:1b:0e:76:0b:53:
d4:0e:c7:9f:43:de:a3:8b:1a:79:56:91:f0:a8:0f:
d0:ce:c7:93:e9:be:6a:8f:0b:3c:7b:fd:29:39:66:
a3:e4:08:9c:bd:73:b4:5a:4f:10:b3:19:72:ec:cb:
1a:67:38:9e:79:61:e1:65:2e:a2:23:9d:ee:ed:7d:
25:53:79:f8:90:68:a3:2b:8b:8f:9e:46:1d:2d:9a:
33:af:6d:d4:b3:5f:e2:7a:7f:28:60:60:c5:84:03:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A7:F8:9B:EA:BD:98:28:ED:60:9F:81:6F:97:E1:B9:8E:AD:06:E9
X509v3 Authority Key Identifier:
keyid:21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d2:75:e3:b4:88:01:9d:e6:ab:00:8a:66:3d:72:85:6b:0d:
4a:5b:51:f9:79:55:7f:61:e1:ec:66:ea:6b:8d:fc:60:fc:03:
f2:67:ed:7c:94:29:56:06:05:a5:5c:bf:2b:88:ba:99:95:71:
4a:80:8a:6c:22:ee:c2:a8:50:67:ff:1e:cb:e1:4f:c6:69:97:
7b:9b:2c:72:b1:cf:52:78:13:07:aa:8c:40:77:5a:bf:05:87:
0d:9e:2c:c9:85:2a:97:29:0d:70:ff:c9:c1:4b:25:06:b1:1a:
e5:02:76:88:4d:e7:7e:46:7a:fa:cb:de:c5:21:05:5a:2d:67:
06:78:3b:38:c7:7a:78:81:c5:16:eb:da:6f:62:8c:d0:e0:c4:
ac:d0:6e:10:03:74:58:af:7e:9c:20:b3:d6:b8:4d:40:1e:21:
64:84:4a:38:ff:ef:d7:46:4a:95:8b:95:30:ce:64:ac:f8:3f:
8b:21:11:24:f8:0e:6e:6b:b1:79:e6:ef:a7:81:d5:69:f3:ca:
b1:3e:08:01:45:c5:a1:69:cd:9e:01:18:e1:06:d0:08:98:77:
b5:9b:e0:0c:9d:b9:c9:82:02:cf:8f:5d:1a:f0:34:ed:57:44:
7b:a8:41:67:58:08:04:36:6a:46:93:63:ad:b8:be:92:85:bd:
93:c6:81:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 01:49:46 2026 by rpki-client