
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft
File: 2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft (raw, json)
Hash identifier: jK67DLhIB+RPkMVI19HAFmvtE6crG99KqLCn2GGk0YY=
Subject key identifier: 9D:96:E8:F8:EE:04:92:19:5B:AC:6D:D0:A2:22:10:AD:CD:57:DA:57
Authority key identifier: 2E:6D:1F:78:4F:D9:72:18:83:D0:85:BA:15:F2:1C:AD:F4:D9:D5:E9
Certificate issuer: /CN=2E6D1F784FD9721883D085BA15F21CADF4D9D5E9
Certificate serial: 52C037CB0EEFA7D5813A587DD4DCCBF1676FEB88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft
Manifest number: 48
Signing time: Wed 24 Jun 2026 09:06:23 +0000
Manifest this update: Wed 24 Jun 2026 09:01:23 +0000
Manifest next update: Thu 25 Jun 2026 11:53:23 +0000
Files and hashes: 1: 2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.crl (hash: kuBv+HpVjvp1E9aP0RxINeB0cMCBW8/VmTLLlST7WQg=)
2: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: +oYni9XzPTeAFRIQkMYAJOggC3zZ7YXNPLVdua7XUGk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.crl
rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 06:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c0:37:cb:0e:ef:a7:d5:81:3a:58:7d:d4:dc:cb:f1:67:6f:eb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E6D1F784FD9721883D085BA15F21CADF4D9D5E9
Validity
Not Before: Jun 24 09:01:23 2026 GMT
Not After : Jun 25 11:53:23 2026 GMT
Subject: CN=9D96E8F8EE0492195BAC6DD0A22210ADCD57DA57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:26:63:c6:2d:ba:cd:f4:7d:59:f9:00:97:95:
c0:22:34:a6:e8:09:ab:d1:92:da:1c:93:e3:b6:b6:
7e:6b:75:f1:42:7b:53:6e:f6:21:b4:aa:2e:3a:31:
f9:85:d7:cb:02:b8:fc:ce:b2:9e:64:bf:00:4e:c5:
29:6e:62:71:a6:22:bb:7c:fa:a0:70:93:96:f3:92:
f2:be:ae:7b:26:8b:70:9f:26:c9:21:a4:8a:08:13:
2e:c4:82:39:ed:39:a9:4b:73:e3:90:d3:40:6e:98:
2b:85:63:81:d0:ea:63:58:8a:f4:f3:b3:16:14:44:
b0:a8:b7:47:27:65:3f:40:94:69:cf:3d:72:a0:13:
78:94:2f:43:ce:95:69:61:1c:04:26:2b:53:ef:26:
1a:11:88:0f:a8:0e:48:02:fd:ab:7d:e1:69:44:3d:
89:c8:aa:d0:d2:7c:40:52:23:e6:61:4b:fa:6b:8d:
3c:51:ec:db:09:a3:7d:ce:64:78:a4:3e:e7:af:64:
ce:6b:b2:31:d6:9b:c9:d8:d2:22:98:ec:ba:0c:81:
b4:0e:e7:d9:25:bd:d0:47:42:b7:a4:3d:7f:8d:b0:
3c:bf:69:36:f2:28:47:25:2d:5b:70:e8:ff:9f:7c:
14:d7:98:d7:e0:6a:60:0f:b7:14:ff:73:e3:3b:46:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:E8:F8:EE:04:92:19:5B:AC:6D:D0:A2:22:10:AD:CD:57:DA:57
X509v3 Authority Key Identifier:
keyid:2E:6D:1F:78:4F:D9:72:18:83:D0:85:BA:15:F2:1C:AD:F4:D9:D5:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:22:b9:72:44:ea:a7:c6:7b:a7:14:5b:7c:5c:92:fb:de:ed:
1f:fd:2c:2d:dd:92:1f:9d:f5:bb:74:b3:53:19:47:f8:f3:c7:
3a:9e:c7:f8:2d:14:f9:70:22:cf:37:84:65:95:ed:32:e5:89:
96:93:5f:1e:25:ca:10:ad:23:9b:ab:6e:9e:cb:9c:60:61:50:
97:9f:97:9a:ac:0b:56:78:75:d6:f4:b4:a4:27:e5:9b:1a:13:
6e:e4:ed:dc:0f:79:e1:9b:e3:95:a6:41:26:dd:1a:cc:e2:24:
1c:5b:f3:fb:7f:ea:c1:6d:29:9e:d0:96:15:6b:9f:20:1d:3c:
06:4c:d6:62:d4:86:11:09:cf:da:11:e0:02:36:10:ec:11:cf:
56:ab:45:0b:dd:ca:75:e5:90:ac:cd:9e:f4:22:f3:04:97:37:
9d:c0:37:db:63:bc:5f:3d:34:f6:c1:67:90:85:b2:8a:1a:e3:
2c:00:8e:43:2d:ef:8e:72:0a:31:c1:dd:0a:5a:2d:8a:c2:0a:
f9:f5:58:99:04:02:e1:b0:5e:b5:7c:85:b1:8e:ce:e7:4c:b0:
6a:3f:b8:31:bb:55:a0:0b:fb:2b:f8:99:c2:46:51:92:fc:17:
a1:82:97:66:6e:d0:d2:54:35:7d:25:17:e2:aa:be:0e:76:be:
69:78:9d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:30:19 2026 by rpki-client