
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft
File: 2CE9A084598867F6677FDE09C272DA8D05C480FC.mft (raw, json)
Hash identifier: RyETOdXxp6A8F95Q2C9htlCkHRRMbaUmfiFgol7zouo=
Subject key identifier: 3C:B5:F7:38:01:2D:AD:D4:98:97:76:A1:50:41:64:ED:03:25:74:CE
Authority key identifier: 2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC
Certificate issuer: /CN=2CE9A084598867F6677FDE09C272DA8D05C480FC
Certificate serial: 652F44536299638ADB2F083E83BAF3F328A2D810
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 02:09:29 +0000
Manifest this update: Thu 18 Jun 2026 02:04:29 +0000
Manifest next update: Fri 19 Jun 2026 03:41:29 +0000
Files and hashes: 1: 2CE9A084598867F6677FDE09C272DA8D05C480FC.crl (hash: TNwJBuTC0xbt+yaUKFCZTU+cGDEhQjt+8oXuG7AS39Y=)
2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: 7nMz4s5YYhUtNRJIR+ORKIg42vTypWbintD4uEN6yZw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl
rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:2f:44:53:62:99:63:8a:db:2f:08:3e:83:ba:f3:f3:28:a2:d8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CE9A084598867F6677FDE09C272DA8D05C480FC
Validity
Not Before: Jun 18 02:04:29 2026 GMT
Not After : Jun 19 03:41:29 2026 GMT
Subject: CN=3CB5F738012DADD4989776A1504164ED032574CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:0c:43:e5:d0:40:28:fa:e9:d4:58:04:a1:
ea:aa:a0:77:89:07:a6:3a:d4:b0:61:8a:19:94:e2:
c8:73:d4:4a:66:87:16:f4:9b:5e:14:65:9d:7b:fb:
e2:c6:0b:41:f4:e4:11:99:8c:fb:a1:42:19:56:ae:
05:e9:c4:95:c2:f2:25:39:4d:78:2a:2d:ec:9e:7b:
81:2f:ef:32:25:e9:69:31:54:91:7b:f8:1e:5e:df:
c6:ed:49:ea:11:82:8c:69:1d:9b:84:93:4c:e8:97:
46:68:50:14:60:d4:46:f7:be:d7:1c:73:44:7f:80:
c1:fd:f2:b1:f1:8c:20:3e:9c:a5:a0:94:d7:e0:5c:
aa:c1:8e:50:b3:b7:16:5d:d8:e4:96:e2:a7:f8:72:
1f:57:ab:4d:6d:b8:97:6a:12:6d:ad:8d:21:1b:d5:
f2:59:bf:71:9f:5c:a5:67:e3:53:ed:8e:80:cc:81:
d1:a6:4d:de:12:52:34:88:b1:25:d6:82:03:05:2e:
15:01:07:a0:81:ba:9a:33:18:d0:72:9d:38:5d:f1:
74:c3:95:1a:d5:45:fe:bb:90:bf:3a:bf:5a:31:e9:
6c:c5:8b:a3:59:e7:b8:7f:f0:4c:d8:52:2d:de:7b:
67:2b:6d:b6:67:b4:92:80:bd:8d:3e:d6:c6:5a:1a:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B5:F7:38:01:2D:AD:D4:98:97:76:A1:50:41:64:ED:03:25:74:CE
X509v3 Authority Key Identifier:
keyid:2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:58:f8:f4:30:b5:5f:3c:b1:5f:1d:dc:ee:c6:da:10:f5:fc:
21:62:d2:33:62:ba:bb:d0:c2:02:a8:b5:ba:36:ea:12:e4:17:
12:04:db:2c:e6:86:03:fe:e4:74:05:60:62:9b:68:d5:eb:06:
f2:0e:be:04:cb:a7:ed:41:96:4c:e8:34:47:66:36:4f:5f:94:
8d:8f:99:fc:b6:de:be:49:c4:d4:70:5e:07:7a:89:2c:64:39:
b5:52:36:1c:1a:4b:3e:7d:7d:b3:31:81:56:d3:57:a6:de:ad:
55:f2:ae:fc:62:6f:dc:ce:1c:2e:cb:b4:9c:d0:8a:b7:ce:59:
25:c4:0c:4a:8e:60:fc:dd:9a:b3:fa:47:9f:a0:fd:be:25:c7:
e4:93:b2:f3:02:76:96:30:f3:d7:af:42:29:86:82:24:ed:32:
45:1c:2d:fc:10:38:7f:4c:08:fe:5e:74:53:c3:b0:83:cc:35:
27:6a:2f:85:c4:27:a1:e6:0e:79:52:63:f5:ac:9e:ef:a8:1d:
3b:f7:2f:c6:5c:08:be:4c:46:26:ec:b3:1a:ac:c5:db:45:49:
45:fb:3f:b3:75:d6:1a:86:66:61:19:e1:ec:eb:c4:27:b7:02:
dc:ad:44:10:32:5e:9c:30:bf:c4:3b:cc:e0:d0:f3:70:c4:67:
95:d8:ba:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:11:18 2026 by rpki-client