
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
File: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft (raw, json)
Hash identifier: RTjy0ZWFW5xJRndssBvR45ImikTX9Ww7JZ5CDrEGXXM=
Subject key identifier: 75:60:0D:09:F2:68:6C:6E:D2:18:A2:95:8C:76:87:27:1F:B5:40:DB
Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A
Certificate issuer: /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
Certificate serial: 592873AEF92A8506A1393E02BAC789D510774CE8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 07:20:37 +0000
Manifest this update: Sun 25 Oct 2026 07:15:37 +0000
Manifest next update: Mon 26 Oct 2026 08:35:37 +0000
Files and hashes: 1: 3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (hash: VdJ1ZIQnNrJcWKeLJSeBvVO0FNQ/sxBZNurd+uNh3ek=)
2: 3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (hash: GzkXDWcauMWYNDn5MyFD1nDjKkP9ZpScdykpa6iOEak=)
3: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl (hash: H3QNXXPTVyD3a+KPTr/hqNXwd7cP2PxJSWQ4PM0l8jE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl
rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 08:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:28:73:ae:f9:2a:85:06:a1:39:3e:02:ba:c7:89:d5:10:77:4c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
Validity
Not Before: Oct 25 07:15:37 2026 GMT
Not After : Oct 26 08:35:37 2026 GMT
Subject: CN=75600D09F2686C6ED218A2958C7687271FB540DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:c0:78:96:af:b4:06:38:58:59:5c:1b:24:
fa:47:96:ee:5b:c6:60:ed:f0:4b:da:fe:13:f5:04:
42:2c:4c:91:d0:c9:57:c4:4c:2d:e9:70:20:06:d4:
58:4d:25:ff:33:00:cc:92:31:59:25:13:4a:88:58:
e5:bf:80:91:cf:b1:ac:2a:fc:84:63:aa:9b:86:9c:
c1:a4:7c:48:5f:f3:d1:83:cf:a7:86:4c:03:ba:e7:
e3:44:f2:63:6a:85:17:8d:13:1e:57:26:02:9c:00:
56:a3:7f:59:35:ac:82:4e:50:f9:28:a4:b1:32:87:
c0:5d:82:07:2b:34:b5:0d:a1:ed:71:fd:0e:54:69:
63:e0:a5:c7:ac:a1:15:e7:1d:13:9f:95:37:3b:d0:
d9:4c:2e:96:da:72:2e:15:22:0c:c1:99:10:8e:86:
09:54:37:17:e4:d0:54:bb:a7:fe:ba:07:08:75:bc:
62:b9:4c:47:6c:3c:0a:86:7e:34:c3:2b:b1:a0:7b:
9f:45:4e:3b:58:b4:2f:ad:db:bf:ec:75:13:ea:9c:
19:88:e2:10:02:26:88:20:c4:b4:44:c6:b8:97:9c:
20:db:12:88:55:7e:74:8b:10:ae:dd:47:ad:52:3b:
7f:a7:b3:ba:e5:08:83:b0:e8:f9:b2:27:92:60:08:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:60:0D:09:F2:68:6C:6E:D2:18:A2:95:8C:76:87:27:1F:B5:40:DB
X509v3 Authority Key Identifier:
keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:38:a3:db:f3:58:a3:96:56:66:4d:cb:ba:79:a6:f0:42:11:
0d:31:0c:ee:b8:66:9b:8e:f1:39:ff:15:78:64:c3:1b:d1:e3:
17:2f:b7:10:2f:78:4a:2b:89:26:ae:e4:a5:59:e9:cd:28:90:
48:67:73:b0:d6:bc:74:62:27:4a:4b:16:47:55:f7:d3:86:1b:
d0:5a:d5:71:48:e9:ed:d7:aa:f3:f3:58:4e:32:88:3c:63:04:
4c:fc:34:7f:54:91:63:57:79:7f:17:92:5e:42:1e:6d:80:4c:
e6:19:89:31:72:da:32:91:52:16:fb:b3:b7:a6:b8:7d:1b:84:
84:ac:eb:97:03:ed:89:29:52:70:db:f5:f0:01:53:b2:58:0b:
38:9b:99:f4:98:73:c5:23:a6:0e:22:52:f8:70:19:52:75:13:
74:b5:1c:8f:6d:67:9a:88:b4:55:16:23:07:88:64:f2:95:e1:
7d:42:76:da:51:79:6f:8c:81:9f:6e:2a:bf:5f:ed:85:0c:c0:
3a:de:5b:08:21:6d:6b:15:c2:ff:9e:a5:6d:b9:9c:c2:36:f4:
19:2b:24:a4:a4:75:94:78:13:4d:0d:61:bb:32:06:bd:dc:10:
ca:eb:9c:bc:71:d4:89:e3:db:2b:c9:39:9e:aa:73:9a:43:49:
98:85:f6:46
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWShzrvkqhQahOT4CuseJ1RB3TOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FG
NTJGOEU3QTAeFw0yNjEwMjUwNzE1MzdaFw0yNjEwMjYwODM1MzdaMDMxMTAvBgNV
BAMTKDc1NjAwRDA5RjI2ODZDNkVEMjE4QTI5NThDNzY4NzI3MUZCNTQwREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9cB4lq+0BjhYWVwbJPpHlu5b
xmDt8Eva/hP1BEIsTJHQyVfETC3pcCAG1FhNJf8zAMySMVklE0qIWOW/gJHPsawq
/IRjqpuGnMGkfEhf89GDz6eGTAO65+NE8mNqhReNEx5XJgKcAFajf1k1rIJOUPko
pLEyh8BdggcrNLUNoe1x/Q5UaWPgpcesoRXnHROflTc70NlMLpbaci4VIgzBmRCO
hglUNxfk0FS7p/66Bwh1vGK5TEdsPAqGfjTDK7Gge59FTjtYtC+t27/sdRPqnBmI
4hACJoggxLRExriXnCDbEohVfnSLEK7dR61SO3+ns7rlCIOw6PmyJ5JgCKftAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdWANCfJobG7SGKKVjHaHJx+1QNswHwYDVR0j
BBgwFoAUK/x0GqF3H8XOd55M+IpcOvUvjnowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWRiZDNhNTAtODMyZS00MTI3LTk0ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFB
MTc3MUZDNUNFNzc5RTRDRjg4QTVDM0FGNTJGOEU3QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQkZDNzQxQUExNzcxRkM1Q0U3NzlFNENGODhBNUMzQUY1MkY4
RTdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRiZDNhNTAtODMyZS00MTI3LTk0
ZTEtNDhhY2UxNjRjZjI2LzAvMkJGQzc0MUFBMTc3MUZDNUNFNzc5RTRDRjg4QTVD
M0FGNTJGOEU3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIw4o9vzWKOWVmZNy7p5pvBCEQ0xDO64ZpuO
8Tn/FXhkwxvR4xcvtxAveEoriSau5KVZ6c0okEhnc7DWvHRiJ0pLFkdV99OGG9Ba
1XFI6e3XqvPzWE4yiDxjBEz8NH9UkWNXeX8Xkl5CHm2ATOYZiTFy2jKRUhb7s7em
uH0bhISs65cD7YkpUnDb9fABU7JYCzibmfSYc8Ujpg4iUvhwGVJ1E3S1HI9tZ5qI
tFUWIweIZPKV4X1CdtpReW+MgZ9uKr9f7YUMwDreWwghbWsVwv+epW25nMI29Bkr
JKSkdZR4E00NYbsyBr3cEMrrnLxx1Inj2yvJOZ6qc5pDSZiF9kY=
-----END CERTIFICATE-----
Generated at Sun Oct 25 19:46:39 2026 by rpki-client