
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft
File: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft (raw, json)
Hash identifier: vyxSQIlzvK4DVHlGBH4+3BbRY3qnxuQaiHIQuPhpHzA=
Subject key identifier: AB:BF:34:34:12:7A:14:4E:1A:C9:34:8A:9E:9D:91:9B:75:8C:CB:D5
Authority key identifier: C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC
Certificate issuer: /CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC
Certificate serial: 0177DED74BC519FFB0B9FFA0A52C7B7A2B76BA25
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 14:24:18 +0000
Manifest this update: Thu 18 Jun 2026 14:19:18 +0000
Manifest next update: Fri 19 Jun 2026 18:04:18 +0000
Files and hashes: 1: C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl (hash: XKoSL+DWAYKQr0TvquLi0Ehet+pj+0sa3i81IIAPbfQ=)
2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: R6QK9+MoLmzsMre1Y9YXqP/L5rUmbxfvyX6TdZV81Yk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl
rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:77:de:d7:4b:c5:19:ff:b0:b9:ff:a0:a5:2c:7b:7a:2b:76:ba:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC
Validity
Not Before: Jun 18 14:19:18 2026 GMT
Not After : Jun 19 18:04:18 2026 GMT
Subject: CN=ABBF3434127A144E1AC9348A9E9D919B758CCBD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:26:33:cc:30:cf:dc:2c:0a:81:1c:9a:74:
23:23:95:f9:31:b5:75:2e:df:94:52:04:20:26:5d:
0c:03:e1:2c:7b:eb:38:ce:d2:d5:c3:96:cf:ac:de:
90:0c:5b:61:d5:40:05:ff:bf:1f:3e:08:9e:81:a2:
23:bf:74:47:31:61:3f:41:2a:54:0e:ee:3d:34:da:
a9:a7:71:93:4c:63:f4:40:82:21:0c:b7:e5:56:c0:
68:d3:0c:d6:ec:fe:18:d8:ad:c8:72:22:11:7f:75:
54:75:bc:1b:ac:2d:55:53:37:f7:6a:a5:f4:16:3e:
8b:da:05:c7:42:8b:51:79:cf:11:78:da:60:93:46:
2b:7f:55:24:b3:21:a6:6a:a9:2d:2a:c2:e2:a2:bd:
ab:73:29:05:57:92:52:1c:13:e2:84:08:02:92:78:
85:88:d8:13:08:c3:1b:db:81:6d:77:b9:db:72:21:
55:3f:10:0b:9f:12:e2:11:7b:4a:e5:a0:64:4d:a4:
5a:30:47:a6:8c:ec:7d:26:a5:c2:d1:4c:dc:3f:42:
43:ca:31:8c:63:7a:28:e2:bb:ae:a2:87:ca:fa:28:
27:05:a9:55:cf:2e:8e:0b:ea:7a:7e:5b:3f:9f:04:
01:a7:ad:95:e8:0f:17:aa:1f:9a:c0:63:f0:4c:78:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BF:34:34:12:7A:14:4E:1A:C9:34:8A:9E:9D:91:9B:75:8C:CB:D5
X509v3 Authority Key Identifier:
keyid:C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:56:9e:ea:52:98:e6:70:5b:84:9a:8c:80:ca:b2:70:bc:ca:
99:df:77:75:5d:21:d1:34:31:3e:43:3d:f6:ff:c7:7c:ff:73:
7e:7a:dd:d6:89:6f:88:60:cf:49:b0:e0:0d:bb:b1:54:d5:71:
9b:fb:31:29:27:2d:06:e6:87:51:28:3e:3b:99:8b:f5:4a:ec:
82:f4:1c:15:52:57:89:44:4c:b7:74:31:6b:c4:61:a5:23:e0:
83:15:45:61:5d:0c:f7:33:9c:98:25:29:82:2d:4a:fe:e0:6e:
51:fe:ac:25:88:50:1e:e2:5a:01:23:b5:86:19:94:3e:3a:c9:
b4:e5:89:6c:9d:33:91:f8:6c:a0:ac:9c:e2:70:6c:2c:f0:eb:
24:a3:be:a9:fe:91:f5:e3:24:b1:a9:61:ef:56:24:a4:f5:74:
90:5c:a5:2b:5c:4f:2d:ab:b1:07:ad:e7:8c:bb:9c:9a:c6:70:
43:76:e2:11:69:db:2e:4f:2c:35:fb:8d:41:53:7b:c8:39:44:
19:42:ad:b6:54:29:81:b9:51:63:95:f8:4a:3f:af:e2:5a:56:
4c:23:4a:fe:f6:dc:c9:41:18:8d:60:22:0c:6a:43:f8:c0:c6:
ac:4f:4a:46:f2:2c:97:4f:bf:eb:04:a0:16:81:3c:0f:d2:1e:
85:2b:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:14 2026 by rpki-client