
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
File: D769452C15749C457029AB81E06B7D36C9F48804.mft (raw, json)
Hash identifier: zb+uuN7TLwBPsswCS/pt/ULBFyLPy84ZrqCULKB83V0=
Subject key identifier: DF:FB:A6:2B:2F:83:14:D3:8B:96:7E:18:81:DF:B7:E3:4D:F2:CD:A5
Authority key identifier: D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04
Certificate issuer: /CN=D769452C15749C457029AB81E06B7D36C9F48804
Certificate serial: 6EAA52990056F411F11F58C74BFD38C525787B65
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 01:02:59 +0000
Manifest this update: Thu 18 Jun 2026 00:57:59 +0000
Manifest next update: Fri 19 Jun 2026 01:24:59 +0000
Files and hashes: 1: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: Wgp2Ly277xiC/SJ4ahqqMWo1yKBGTp7hlr1qa44tvrs=)
2: 3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (hash: FxemyMpIsKKyeyZF+nt8pq/Wh2yMuBg7NUlyoxRZXT8=)
3: D769452C15749C457029AB81E06B7D36C9F48804.crl (hash: GNw4CAEPna1RWUbcd8NBoFzKocsqLPUth7ivr0nNFCw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl
rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 01:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:aa:52:99:00:56:f4:11:f1:1f:58:c7:4b:fd:38:c5:25:78:7b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D769452C15749C457029AB81E06B7D36C9F48804
Validity
Not Before: Jun 18 00:57:59 2026 GMT
Not After : Jun 19 01:24:59 2026 GMT
Subject: CN=DFFBA62B2F8314D38B967E1881DFB7E34DF2CDA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:07:27:f9:62:6c:7d:e4:6e:40:07:f2:16:
40:86:83:ab:ae:88:b2:99:65:c6:ec:93:bf:43:39:
2c:03:ef:4a:05:bf:73:2f:1a:6e:6d:d9:42:58:9b:
ec:24:7a:e9:98:d2:ed:5f:32:56:77:b3:bd:b9:52:
f0:a7:8f:b2:51:aa:00:5d:36:5b:c1:e9:ea:23:a4:
14:7b:a6:9d:b8:a8:9f:9e:7c:db:6d:0d:0e:05:e1:
db:c0:30:17:b4:86:c7:35:5c:67:4e:d3:6e:ee:50:
fb:57:bb:61:1b:19:56:2d:fc:ef:db:23:61:64:c6:
aa:8b:b6:a3:bb:1c:19:10:58:4f:c4:15:3d:02:f2:
65:25:74:6f:26:93:9d:d4:5a:36:02:3f:f4:06:47:
99:ef:54:a4:7a:5b:45:48:29:19:25:87:75:2e:9f:
56:04:f4:ac:86:7a:86:fa:9e:d3:42:f1:38:10:69:
e9:5b:ea:b5:aa:5f:cb:c1:9b:46:33:26:b1:43:23:
3b:01:82:ce:c4:8a:e1:3a:b7:02:6b:49:aa:55:dc:
b5:20:16:5c:a1:00:10:a9:4d:20:65:0a:c5:cf:26:
2c:d4:e1:95:dd:d7:1d:7f:17:d4:dd:ac:1e:ae:d5:
9a:67:4c:1b:3f:6d:71:7c:6d:5b:ea:38:c4:53:8a:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FB:A6:2B:2F:83:14:D3:8B:96:7E:18:81:DF:B7:E3:4D:F2:CD:A5
X509v3 Authority Key Identifier:
keyid:D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a1:5a:9d:09:37:f6:22:95:29:c7:cd:7f:02:15:0c:5d:a9:
10:0d:1a:ad:08:25:12:6c:8a:b6:8a:b4:1b:de:d3:91:63:3d:
1f:d8:99:27:28:36:59:e6:31:f8:7d:b4:18:1e:a6:a8:f1:1b:
68:8b:18:93:59:8e:c7:80:69:ce:24:c9:ff:65:ab:df:86:0d:
b8:f5:54:61:21:a7:57:83:81:3f:32:ad:7d:ef:ce:5c:34:24:
b8:01:aa:fb:45:fd:ce:e6:42:4a:c8:be:ff:fc:80:7a:2d:d1:
3e:90:94:c2:7e:dd:32:bc:60:3a:fc:1f:91:12:1c:08:4b:1d:
76:0a:86:dc:c5:32:5d:9f:d9:cf:da:0f:18:a3:6b:40:a5:c4:
a1:27:42:27:74:1c:9d:a6:8d:26:8a:16:b7:64:92:ab:b2:09:
85:20:70:36:23:b8:c4:e0:0b:54:88:ed:f2:d1:4e:9e:90:20:
ae:aa:f4:14:4d:3b:df:72:ba:a6:ab:5a:c0:7b:60:0d:76:95:
f5:f4:b5:9b:4d:8a:f4:4e:3c:46:02:a6:71:b4:87:7b:63:50:
6a:b7:ff:88:db:22:1d:75:23:91:aa:b7:a6:56:94:f8:aa:78:
32:c8:3b:d5:83:4a:ce:64:70:b8:a4:bd:e1:14:0e:58:6b:01:
09:3a:5b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:04 2026 by rpki-client