
$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
File: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft (raw, json)
Hash identifier: U11lzg2GcsSJ+D9AvLT0oIoxVqu1yuQZVCPXt+qOVHs=
Subject key identifier: F3:3D:EE:13:85:49:C5:71:B9:3D:33:D3:7A:BC:AE:22:6F:16:B5:8D
Authority key identifier: C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A
Certificate issuer: /CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A
Certificate serial: 3D475F336997C45C6FA016FA74D7E566DD543FEF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
Manifest number: 93
Signing time: Wed 19 Aug 2026 17:14:52 +0000
Manifest this update: Wed 19 Aug 2026 17:09:52 +0000
Manifest next update: Thu 20 Aug 2026 17:20:52 +0000
Files and hashes: 1: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: /H7mHY2xJ6jF9zjh/SzqcS82iVWznIKFIdaRtKBLuXI=)
2: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl (hash: +yROYPyKDbtLiwt+1/sQt3zbtugpd4JDFvysTow3m88=)
3: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: e/a2UZPUi40DIwFDiEkD+J2tqAc+iu6pnL0srTkWawk=)
4: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: LmAAYXQDd7PTPcaMEiTttR5qd67toE25WQOCNYRTLdg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl
rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 17:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:47:5f:33:69:97:c4:5c:6f:a0:16:fa:74:d7:e5:66:dd:54:3f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A
Validity
Not Before: Aug 19 17:09:52 2026 GMT
Not After : Aug 20 17:20:52 2026 GMT
Subject: CN=F33DEE138549C571B93D33D37ABCAE226F16B58D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:05:53:0d:8a:8d:0b:e6:d7:81:76:50:d2:
a9:7f:f9:3d:b8:10:f3:f7:c5:be:41:8d:d3:17:ff:
54:c5:36:01:cc:6e:4b:b3:90:58:af:57:77:42:b1:
1a:a9:ed:6a:d1:87:9a:da:7b:ea:6f:cc:b6:ac:9d:
b0:dd:68:1f:11:ce:82:85:dd:60:95:7a:6d:cb:52:
da:78:c3:d9:45:97:4a:c9:c7:f7:a8:48:84:bd:3d:
30:61:79:ad:35:13:af:e1:ff:6b:51:55:ab:c2:35:
6d:92:a8:78:8d:36:5e:f0:66:ed:bf:52:5d:60:0a:
45:18:ce:99:55:fb:2d:6d:1d:41:4d:0d:64:bb:2c:
1b:09:8b:e2:d3:7d:ae:b7:3f:0c:a4:bd:d5:86:2d:
1e:3b:a7:2d:f1:6b:6b:fa:ed:8c:95:23:58:40:8e:
fa:ea:1b:1e:4c:22:bd:9a:09:ad:91:24:2b:c5:87:
52:ca:39:1b:71:c0:26:69:4e:d4:f0:34:36:ad:93:
74:39:b2:5e:82:3c:0f:c4:48:01:7c:c2:ba:e8:ac:
e4:89:e1:0b:c6:75:b4:b0:b2:00:8d:5f:bd:e3:2a:
7e:a9:e6:89:e1:04:c4:75:1d:2f:83:4a:a6:96:88:
9c:d6:9e:9a:1f:96:69:95:59:3a:b2:e5:87:43:b3:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3D:EE:13:85:49:C5:71:B9:3D:33:D3:7A:BC:AE:22:6F:16:B5:8D
X509v3 Authority Key Identifier:
keyid:C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5f:d0:b0:b4:06:c5:81:0c:7d:de:c2:3a:32:51:f9:49:6b:
ac:00:1e:96:3f:65:36:75:ab:b5:07:16:10:c2:1f:f4:6f:22:
57:60:23:b6:1b:62:89:e7:92:f5:4f:4e:30:2f:96:64:a6:f8:
76:77:e2:1c:a2:83:f5:22:ce:fd:85:b7:11:aa:27:42:74:a3:
48:7a:b9:ba:00:59:2d:93:72:6d:d0:01:52:9b:14:ee:21:8f:
57:c2:07:1e:6b:04:be:b1:92:41:39:18:e8:82:21:58:2e:02:
ba:45:46:1f:fa:20:85:2f:6c:bc:e6:77:0b:24:0c:9c:0f:5e:
2f:e6:a4:46:27:3c:ad:5c:d4:ad:1c:7c:d2:7c:98:a9:17:33:
de:40:0e:e8:56:b8:c8:6d:b4:1d:cc:52:aa:c0:b1:9e:05:ff:
a6:3f:22:79:67:1e:35:d0:ba:d1:3e:b6:11:e4:ba:29:05:24:
c2:f9:a3:16:48:20:b2:10:1c:fe:c6:ce:ab:b2:47:f0:c7:6f:
83:a8:82:18:ed:ed:5d:22:28:dc:c9:9c:90:26:d6:b3:22:48:
c6:b0:be:3f:54:b7:5b:cd:f7:31:59:fb:51:7a:f4:3a:8f:d8:
a6:7a:50:59:be:73:93:14:47:5d:7f:d7:f7:5a:2e:c8:93:35:
92:4b:3e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 07:05:01 2026 by rpki-client