
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
File: D280C077A9E801FBA933C9D0085012E09D686927.mft (raw, json)
Hash identifier: yTGTZz0o46NphSKkVUh2Qfpp70gqDeCXFZNwtRY9acQ=
Subject key identifier: 58:43:0F:93:82:26:9F:C8:F4:D3:90:E1:EC:BC:40:C7:91:FA:5E:35
Authority key identifier: D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27
Certificate issuer: /CN=D280C077A9E801FBA933C9D0085012E09D686927
Certificate serial: 20CF0CB0F39078EBE48F5515048149E2A8A782D3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
Manifest number: EB
Signing time: Mon 26 Oct 2026 04:58:11 +0000
Manifest this update: Mon 26 Oct 2026 04:53:11 +0000
Manifest next update: Tue 27 Oct 2026 08:35:11 +0000
Files and hashes: 1: D280C077A9E801FBA933C9D0085012E09D686927.crl (hash: wQPOEzwvn6xOP/jq7w9mADcTjl5TRi8u8vRnZ+05v2M=)
2: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: RX42n1sKvH6RuNxwR829dnAhCVM69IdefkYN8dkI7/c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl
rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 08:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:cf:0c:b0:f3:90:78:eb:e4:8f:55:15:04:81:49:e2:a8:a7:82:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D280C077A9E801FBA933C9D0085012E09D686927
Validity
Not Before: Oct 26 04:53:11 2026 GMT
Not After : Oct 27 08:35:11 2026 GMT
Subject: CN=58430F9382269FC8F4D390E1ECBC40C791FA5E35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:64:d0:82:ed:3b:a2:d4:a0:00:fa:88:a3:
36:bc:c6:21:fe:12:6d:80:7f:a9:f6:5f:46:1c:7e:
b8:59:18:82:e2:09:4d:b9:f8:b6:d5:6f:8e:ab:33:
80:b8:4b:bb:f2:e5:5f:33:3f:f8:d6:e0:30:a8:5a:
eb:ba:40:bc:f0:82:74:36:a1:76:cf:dd:f8:0e:60:
aa:63:76:33:47:8d:e3:61:9e:6c:9c:78:be:1a:2d:
b3:59:ea:af:b9:24:db:60:90:56:9e:4f:6f:83:b6:
ed:d5:07:78:cc:8f:f8:ca:e0:5d:68:d6:03:0f:29:
bc:bb:39:f8:2f:25:12:98:c7:f0:6a:49:2d:b8:04:
2c:bc:73:ca:12:86:43:d0:a2:50:4c:8d:0e:80:ff:
36:5a:51:c7:60:6c:e5:21:09:a5:1c:5f:ff:4b:1e:
7b:15:0a:69:8b:15:c7:5d:89:5b:47:9f:a8:d2:bf:
9b:58:ea:c9:a9:07:5b:94:38:58:fe:e1:98:ab:6f:
e4:a0:0c:c0:86:81:fa:d1:4c:15:84:62:e5:79:ad:
1d:6d:65:a3:1f:72:ff:89:c5:f2:24:a4:63:ad:d0:
00:4b:c6:61:df:99:50:76:f2:d8:7b:c0:83:6a:3d:
39:d9:6b:61:6d:fd:db:d1:d4:1b:87:31:0c:38:39:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:0F:93:82:26:9F:C8:F4:D3:90:E1:EC:BC:40:C7:91:FA:5E:35
X509v3 Authority Key Identifier:
keyid:D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3f:6b:e7:86:86:43:38:a9:64:8e:99:cd:67:d1:70:e6:54:
fb:b4:4f:b6:89:37:84:0b:37:7b:7f:cf:ff:dd:1d:9a:c5:68:
5f:c4:7b:a7:3f:eb:5b:62:04:be:89:5d:60:9a:26:27:b8:b9:
9e:bf:73:bb:39:26:88:9c:bc:68:de:cc:f2:8d:8a:4f:de:27:
b3:82:a7:05:cc:e3:ec:c3:ea:d1:65:18:4a:90:a9:60:41:c2:
3e:43:e3:13:79:48:8a:99:71:d3:5f:de:49:05:3a:d0:a6:2c:
54:ad:b4:b3:da:96:e5:3b:61:2c:7e:bb:82:98:e7:e9:57:aa:
12:61:7d:93:4c:17:d7:33:35:b2:a0:e4:24:25:a3:c5:93:b1:
59:e5:2d:d8:9f:9a:42:10:38:0a:49:30:2d:06:d4:80:c3:11:
6c:02:6e:5a:c9:43:23:15:5c:f6:81:0f:3b:b7:13:4a:d6:82:
1c:76:5c:a0:3a:1a:40:8d:3c:b5:2a:23:89:b8:30:16:ec:13:
29:e7:72:bd:35:65:a2:c5:92:d3:ee:5d:9f:97:a5:4a:71:4a:
61:93:fd:5e:70:d6:b1:f3:01:24:e1:7c:d8:f5:75:3e:ca:95:
60:31:bb:57:27:9f:71:5f:f7:fc:11:18:74:b3:4f:8b:e5:8f:
f4:3b:40:c6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIM8MsPOQeOvkj1UVBIFJ4qingtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI4MEMwNzdBOUU4MDFGQkE5MzNDOUQwMDg1MDEyRTA5
RDY4NjkyNzAeFw0yNjEwMjYwNDUzMTFaFw0yNjEwMjcwODM1MTFaMDMxMTAvBgNV
BAMTKDU4NDMwRjkzODIyNjlGQzhGNEQzOTBFMUVDQkM0MEM3OTFGQTVFMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW2GTQgu07otSgAPqIoza8xiH+
Em2Af6n2X0YcfrhZGILiCU25+LbVb46rM4C4S7vy5V8zP/jW4DCoWuu6QLzwgnQ2
oXbP3fgOYKpjdjNHjeNhnmyceL4aLbNZ6q+5JNtgkFaeT2+Dtu3VB3jMj/jK4F1o
1gMPKby7OfgvJRKYx/BqSS24BCy8c8oShkPQolBMjQ6A/zZaUcdgbOUhCaUcX/9L
HnsVCmmLFcddiVtHn6jSv5tY6smpB1uUOFj+4Zirb+SgDMCGgfrRTBWEYuV5rR1t
ZaMfcv+JxfIkpGOt0ABLxmHfmVB28th7wINqPTnZa2Ft/dvR1BuHMQw4OQkvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWEMPk4Imn8j005Dh7LxAx5H6XjUwHwYDVR0j
BBgwFoAU0oDAd6noAfupM8nQCFAS4J1oaScwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODJmYWI2MTEtOGJlMy00YjQ0LTk1NjEtNzUyYTFlZGEwNjVjLzAvRDI4MEMwNzdB
OUU4MDFGQkE5MzNDOUQwMDg1MDEyRTA5RDY4NjkyNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMjgwQzA3N0E5RTgwMUZCQTkzM0M5RDAwODUwMTJFMDlENjg2
OTI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJmYWI2MTEtOGJlMy00YjQ0LTk1
NjEtNzUyYTFlZGEwNjVjLzAvRDI4MEMwNzdBOUU4MDFGQkE5MzNDOUQwMDg1MDEy
RTA5RDY4NjkyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD0/a+eGhkM4qWSOmc1n0XDmVPu0T7aJN4QL
N3t/z//dHZrFaF/Ee6c/61tiBL6JXWCaJie4uZ6/c7s5JoicvGjezPKNik/eJ7OC
pwXM4+zD6tFlGEqQqWBBwj5D4xN5SIqZcdNf3kkFOtCmLFSttLPaluU7YSx+u4KY
5+lXqhJhfZNMF9czNbKg5CQlo8WTsVnlLdifmkIQOApJMC0G1IDDEWwCblrJQyMV
XPaBDzu3E0rWghx2XKA6GkCNPLUqI4m4MBbsEynncr01ZaLFktPuXZ+XpUpxSmGT
/V5w1rHzASThfNj1dT7KlWAxu1cnn3Ff9/wRGHSzT4vlj/Q7QMY=
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:09 2026 by rpki-client