
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
File: 340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft (raw, json)
Hash identifier: stCL/OcfdKQFDjAiiIMRyoCyLb/Ct461F3tk0HzIQBE=
Subject key identifier: E1:16:27:8F:62:30:ED:04:85:2D:8D:EF:B2:65:A8:E2:0F:34:BD:03
Authority key identifier: 34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F
Certificate issuer: /CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F
Certificate serial: 0A20B1F25E0E0FA1E903A17F011994A5B536ADE5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
Manifest number: B7
Signing time: Wed 16 Sep 2026 15:17:58 +0000
Manifest this update: Wed 16 Sep 2026 15:12:58 +0000
Manifest next update: Thu 17 Sep 2026 16:52:58 +0000
Files and hashes: 1: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: QuJkYaezAKdTxcWr+l4aySjRA4vLncuY75qiXrBgtBM=)
2: 340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl (hash: aHPj0PSY/9XeKrutbJx+61zAXwndrkkmXk+p4tuHLaM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl
rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:20:b1:f2:5e:0e:0f:a1:e9:03:a1:7f:01:19:94:a5:b5:36:ad:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F
Validity
Not Before: Sep 16 15:12:58 2026 GMT
Not After : Sep 17 16:52:58 2026 GMT
Subject: CN=E116278F6230ED04852D8DEFB265A8E20F34BD03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:a4:5b:ef:59:a7:39:12:c4:26:6a:25:de:
94:8a:15:f9:72:52:02:83:5f:86:30:b0:fc:c5:2e:
6d:ef:fa:43:86:b1:67:7b:4f:b2:df:ce:3c:71:5d:
6a:7b:33:a1:6e:ad:5a:38:4b:85:63:a4:f4:3f:1d:
71:45:16:d4:21:4f:bb:97:91:fa:6f:37:be:32:9c:
1c:71:d4:52:1e:41:02:b2:60:81:3a:6f:43:71:6a:
1f:fa:b6:7b:0f:17:18:d6:50:7e:21:39:65:22:da:
40:84:7d:d9:a7:25:a0:c4:f1:df:e6:95:f6:1d:bd:
cc:89:28:2d:68:00:cb:0d:80:3a:b1:a7:5e:df:d0:
e4:72:28:65:51:f3:4c:9f:ec:45:e6:5e:93:73:da:
0d:94:18:86:d7:e9:04:03:04:c0:70:19:36:6a:9b:
06:92:40:f1:97:1b:64:cd:fb:7f:f8:d6:5a:da:57:
41:a5:2c:d6:96:02:3d:5d:a8:a3:01:22:6b:28:6b:
b4:0a:b7:80:8d:6f:2e:1c:3e:4f:42:c1:a4:da:57:
eb:46:50:1e:64:43:c1:55:c1:76:5b:dc:92:07:72:
e3:26:a6:26:02:30:79:f6:44:0d:10:6c:8c:af:90:
d5:ad:06:ed:24:03:7b:2c:02:0f:e0:03:17:cd:b4:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:16:27:8F:62:30:ED:04:85:2D:8D:EF:B2:65:A8:E2:0F:34:BD:03
X509v3 Authority Key Identifier:
keyid:34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7a:a5:83:c7:ce:b4:56:8a:71:fe:e2:d8:a5:7e:75:dd:fa:
25:6f:54:ea:9d:a4:b6:81:fa:6f:a6:ca:1d:83:0e:e0:45:34:
27:59:f8:a5:e2:5e:88:b3:f8:fd:1f:68:ea:d2:8e:95:88:eb:
4e:d5:5f:c2:b4:42:97:c4:0e:1e:14:57:53:47:3a:77:1f:b3:
36:54:37:01:67:4f:83:35:1a:7a:91:cd:90:53:24:5b:ba:12:
05:ec:79:ac:13:60:f2:6c:8c:19:5a:9e:69:a7:11:9d:9d:6b:
74:b5:71:c9:60:91:03:2f:d9:d3:ee:52:4f:20:3c:65:e0:08:
d4:cf:c4:ba:8f:74:45:f5:d8:00:f9:65:fa:96:27:42:43:ca:
22:d6:e9:e1:c2:7a:87:90:c2:2e:c8:82:62:3a:1e:c2:9d:e7:
98:22:94:94:33:5a:51:e3:1e:6e:9b:21:c4:1b:ec:f4:47:8f:
d4:6b:65:d9:c4:e9:b4:c7:f8:a7:95:4f:36:1a:f7:51:c4:2a:
05:b6:99:fc:47:8a:e3:e3:ce:24:ec:f1:83:ef:66:f4:77:84:
61:54:d3:ce:ec:d1:4b:6b:cc:76:ae:34:68:3e:86:2e:fa:d5:
f0:e7:44:1e:81:82:d6:ed:2e:77:3e:8d:e5:6b:d0:f9:ac:a2:
ae:d3:40:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 06:37:40 2026 by rpki-client