
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft
File: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft (raw, json)
Hash identifier: Ubo5Pay726elphofDuLYGj5uEQjRrOjfOEQC2ty78Sk=
Subject key identifier: 3E:96:1B:DE:D8:AD:06:FF:90:39:D8:EA:4C:CE:3A:45:68:97:96:74
Authority key identifier: 2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74
Certificate issuer: /CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274
Certificate serial: 7D8AB79669557398C304139C2F718CFA1A0288B8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 07:30:46 +0000
Manifest this update: Sun 25 Oct 2026 07:25:46 +0000
Manifest next update: Mon 26 Oct 2026 08:21:46 +0000
Files and hashes: 1: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 1IjnkMC3ga8KbKp+1i4junuLJGtmG26jgGjukZ4rmxk=)
2: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: V2s2v2zyv88cwsslpUJdds/b+6l6rcgW5NHb7V5SYWY=)
3: 2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl (hash: ZyFyq6Y+AEWzjl9lWRHnXCsWthpEYnbB9SENqOHtaH0=)
4: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: iezQTzMxWp3Coix5fz9eGS/c/h2ulbbwObi3kCUHkW4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl
rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 08:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:8a:b7:96:69:55:73:98:c3:04:13:9c:2f:71:8c:fa:1a:02:88:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274
Validity
Not Before: Oct 25 07:25:46 2026 GMT
Not After : Oct 26 08:21:46 2026 GMT
Subject: CN=3E961BDED8AD06FF9039D8EA4CCE3A4568979674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:8c:ad:a5:f8:be:61:04:e8:32:2d:66:50:
d5:c5:db:2a:5b:4e:1b:77:3c:00:33:63:71:45:49:
9e:42:42:58:61:bb:32:aa:4f:c3:35:7c:54:2a:a0:
e0:8d:75:09:8e:87:b1:a2:a8:8f:4e:ec:68:24:3a:
69:eb:09:71:c1:48:3e:c1:4e:16:81:18:4f:a1:34:
c5:83:7f:17:b1:8a:5d:49:32:96:a6:dc:c5:3a:77:
e5:dc:4f:02:05:0d:47:b3:86:30:a5:11:e2:13:dc:
f0:ce:4b:e5:71:35:97:6a:3e:80:d2:53:3c:1d:f5:
8f:e7:cd:92:59:a6:31:02:b8:97:58:f6:d0:d1:b5:
80:5b:21:e7:db:dd:e2:95:14:d0:04:c0:de:f1:8e:
f9:f8:54:d6:99:91:ab:59:20:ca:65:e7:26:e4:24:
74:cd:98:a3:60:fa:36:f9:3c:b9:c7:7c:4c:bc:05:
cc:2f:67:4a:87:e1:f7:0f:fb:90:f6:6e:3f:e3:c1:
42:cd:9b:81:ee:db:42:92:66:73:68:e4:9f:2f:0c:
cd:9d:fd:09:31:80:a8:4d:bf:e2:7a:61:2d:2e:52:
5c:82:eb:6b:37:1e:e8:5c:9e:75:05:cc:4b:27:d9:
f2:f0:53:cd:f9:43:2d:2f:73:29:3c:da:67:69:32:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:96:1B:DE:D8:AD:06:FF:90:39:D8:EA:4C:CE:3A:45:68:97:96:74
X509v3 Authority Key Identifier:
keyid:2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:70:69:db:0b:a9:d3:ba:45:65:98:5d:d1:95:e8:20:14:57:
c2:db:2a:d7:b9:b9:b4:e2:0e:5b:0e:a9:22:2d:fe:1a:b4:e7:
24:9c:f1:57:de:cf:52:4f:0c:c6:b9:78:5e:45:b8:cc:12:33:
b9:f6:8e:a2:a5:de:b3:d9:31:65:e3:e3:6a:3b:95:4d:03:6a:
82:c8:a9:8e:18:c9:73:80:50:d6:25:c7:fa:f2:7d:32:2b:48:
8c:b1:6d:c6:82:b5:4d:9a:df:24:05:a6:00:13:e7:54:80:9e:
66:9a:6f:0e:93:0e:71:54:19:5a:ff:8c:26:eb:6a:e7:9c:d6:
20:97:a5:67:33:85:80:04:ff:ec:d7:5d:24:5d:d1:da:6e:45:
6c:28:9d:73:8f:64:fc:55:24:70:c4:4a:58:9c:c8:8e:32:25:
f8:62:e4:7f:70:b9:c3:e5:68:b9:5e:28:5c:8a:d0:b5:e6:f2:
d6:09:22:a2:e5:62:bb:81:4a:4e:85:d4:6c:31:61:fd:b2:75:
be:01:c3:a6:4a:4b:d4:1f:73:e0:7e:69:ce:e8:97:30:06:ab:
59:58:33:ec:68:94:20:ee:d2:d6:8e:7a:50:3e:e6:6b:fa:1c:
af:31:45:7d:d5:fa:13:be:72:16:2c:41:e3:b0:1c:d2:3d:05:
80:c5:6d:f5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfYq3lmlVc5jDBBOcL3GM+hoCiLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBE
N0Q5QzI3NDAeFw0yNjEwMjUwNzI1NDZaFw0yNjEwMjYwODIxNDZaMDMxMTAvBgNV
BAMTKDNFOTYxQkRFRDhBRDA2RkY5MDM5RDhFQTRDQ0UzQTQ1Njg5Nzk2NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfd4ytpfi+YQToMi1mUNXF2ypb
Tht3PAAzY3FFSZ5CQlhhuzKqT8M1fFQqoOCNdQmOh7GiqI9O7GgkOmnrCXHBSD7B
ThaBGE+hNMWDfxexil1JMpam3MU6d+XcTwIFDUezhjClEeIT3PDOS+VxNZdqPoDS
Uzwd9Y/nzZJZpjECuJdY9tDRtYBbIefb3eKVFNAEwN7xjvn4VNaZkatZIMpl5ybk
JHTNmKNg+jb5PLnHfEy8BcwvZ0qH4fcP+5D2bj/jwULNm4Hu20KSZnNo5J8vDM2d
/QkxgKhNv+J6YS0uUlyC62s3HuhcnnUFzEsn2fLwU835Qy0vcyk82mdpMiexAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPpYb3titBv+QOdjqTM46RWiXlnQwHwYDVR0j
BBgwFoAUKm8W6Av9x7TWeXcm+4/UsNfZwnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2E0NjM2MGQtNjYyYi00ZjdkLWJiMTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgw
QkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBEN0Q5QzI3NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQTZGMTZFODBCRkRDN0I0RDY3OTc3MjZGQjhGRDRCMEQ3RDlD
Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi
MTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0
QjBEN0Q5QzI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGRwadsLqdO6RWWYXdGV6CAUV8LbKte5ubTi
DlsOqSIt/hq05ySc8Vfez1JPDMa5eF5FuMwSM7n2jqKl3rPZMWXj42o7lU0DaoLI
qY4YyXOAUNYlx/ryfTIrSIyxbcaCtU2a3yQFpgAT51SAnmaabw6TDnFUGVr/jCbr
auec1iCXpWczhYAE/+zXXSRd0dpuRWwonXOPZPxVJHDESlicyI4yJfhi5H9wucPl
aLleKFyK0LXm8tYJIqLlYruBSk6F1GwxYf2ydb4Bw6ZKS9Qfc+B+ac7olzAGq1lY
M+xolCDu0taOelA+5mv6HK8xRX3V+hO+chYsQeOwHNI9BYDFbfU=
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:15:20 2026 by rpki-client