
$ rpki-client -vvf rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft
File: 2C1233B548C07507C6EF58E2A03DD8309F820753.mft (raw, json)
Hash identifier: goWY3e/nETJ6EC+03uB71qji05vVlGi/Yea8PA1sKqw=
Subject key identifier: 49:27:16:1F:42:C2:B8:CF:CF:09:C8:AB:B8:B9:6F:D4:FD:84:14:0B
Authority key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53
Certificate issuer: /CN=2C1233B548C07507C6EF58E2A03DD8309F820753
Certificate serial: 70A02B45FD1F57E40150A11C7CFF18EB46788C5F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft
Manifest number: 13
Signing time: Fri 15 May 2026 23:46:07 +0000
Manifest this update: Fri 15 May 2026 23:41:07 +0000
Manifest next update: Sun 17 May 2026 01:20:07 +0000
Files and hashes: 1: 2C1233B548C07507C6EF58E2A03DD8309F820753.crl (hash: WupHeTP88N87EqXV8Az7qxFjewkI0THn1vftP6AURX0=)
2: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 0GUMhzS+5NIthW1wvl37lL5c5ztTRVnrHP+oCvOX4MA=)
3: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: /6iiyBTTzA+gJYo5W8sFnueJYX/K6dQcso0XDUc2u/0=)
4: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: bvFzrT6armN3+NSh25eEAeVsS6vGdsFIsCLC0MUnl3s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl
rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 01:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a0:2b:45:fd:1f:57:e4:01:50:a1:1c:7c:ff:18:eb:46:78:8c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C1233B548C07507C6EF58E2A03DD8309F820753
Validity
Not Before: May 15 23:41:07 2026 GMT
Not After : May 17 01:20:07 2026 GMT
Subject: CN=4927161F42C2B8CFCF09C8ABB8B96FD4FD84140B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:d1:21:8b:67:e2:4b:72:0e:8a:18:ce:7e:
de:9b:f6:aa:57:99:d2:2f:c3:9e:c0:d2:96:fc:12:
36:94:8b:30:9e:23:aa:eb:3e:b8:c4:00:49:bb:22:
70:ae:3b:0b:18:55:53:08:a3:c7:1d:a6:f6:7e:b0:
b9:6f:1e:07:86:db:3c:af:27:0f:29:c0:d6:84:42:
89:56:22:da:78:f2:40:b8:54:3c:a3:99:ed:3c:58:
02:b4:23:4e:5b:b9:f8:6a:4e:5a:d7:8e:23:5e:d6:
90:10:08:ec:84:08:2c:f4:ea:f8:18:3d:e0:55:1f:
ae:00:70:41:35:da:b2:20:77:2a:14:8d:c1:05:bf:
de:75:6b:de:f5:96:52:b3:e5:5f:88:30:51:30:54:
a8:b8:9a:45:e8:e6:33:2b:80:f6:cf:12:89:70:9e:
23:e9:74:f9:7c:40:03:c0:bb:59:de:e1:b7:b8:16:
62:49:80:1b:7e:a9:68:50:5a:1b:94:e9:af:55:89:
62:b6:53:5b:b8:12:f9:ef:bc:89:8e:f1:f3:9f:b4:
71:06:94:c7:3a:03:8a:fd:61:e7:70:e8:dc:5c:b5:
27:9e:07:21:56:ab:1d:00:55:65:12:28:68:a9:0c:
87:84:24:52:0f:55:19:fe:6e:51:77:4a:77:6f:d4:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:27:16:1F:42:C2:B8:CF:CF:09:C8:AB:B8:B9:6F:D4:FD:84:14:0B
X509v3 Authority Key Identifier:
keyid:2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2d:ef:de:a3:e8:65:5e:da:fb:44:41:7e:1e:8f:0e:1f:fa:
cd:cd:4f:52:fd:f6:01:d2:81:c2:5f:5b:71:58:3c:44:9f:03:
02:72:a3:4b:f9:a4:15:3b:fe:b8:6e:02:42:e7:b8:f6:ee:b9:
6a:4f:66:c4:13:f1:50:d8:b3:8c:5b:a0:40:2d:2f:72:0b:e2:
05:7f:6b:63:e0:1d:2f:92:ff:13:88:3d:e4:72:07:2d:b5:4a:
f3:11:c0:41:7a:61:24:ed:ac:1f:7a:61:a2:ba:b2:d7:0c:15:
ad:f0:a0:08:ab:bf:b7:b3:81:e7:bb:eb:16:65:fe:b0:f2:7f:
33:c1:53:40:e8:a6:15:2c:83:6b:77:2c:a8:f6:9a:26:5e:05:
11:b5:48:d3:5c:33:6f:17:c0:94:1d:31:ea:3a:e8:97:3f:a4:
68:73:c5:b0:9d:00:b0:b8:4b:1f:ec:10:9a:da:9f:8b:91:c3:
d9:82:bd:87:a6:46:21:68:fe:19:7a:e9:e5:b1:2d:2a:be:4f:
c5:ec:22:d8:66:9d:52:8c:95:b1:7a:c7:b1:cb:57:9b:9e:fc:
35:76:84:b1:f2:89:a3:1a:00:51:b7:63:51:a6:01:c1:61:1c:
5d:2c:b8:b5:39:99:05:72:de:b5:61:3d:95:71:e4:ed:42:ce:
f7:ad:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 14:20:44 2026 by rpki-client