
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft
File: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft (raw, json)
Hash identifier: Qf2rqWgIfeE2TnYgne79HxRICgKISMBXLwjt3YZNhxw=
Subject key identifier: 8C:2E:8D:6D:43:EB:13:C4:03:20:3D:A9:E5:CC:84:C8:60:06:34:AC
Authority key identifier: 26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0
Certificate issuer: /CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0
Certificate serial: 1015357EB0D7CE49EB6E1FA130ABD4EBE05DA829
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft
Manifest number: EA
Signing time: Sat 24 Oct 2026 01:56:25 +0000
Manifest this update: Sat 24 Oct 2026 01:51:25 +0000
Manifest next update: Sun 25 Oct 2026 03:45:25 +0000
Files and hashes: 1: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl (hash: uXhrfGh4M4beWggXe+zC9/IYF0m38o4kukPtumCq1ZM=)
2: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: ZyYg2y6us1LQrG7diwKFALUA9hvUN3acAbNTmnkm8fU=)
3: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: OOL38iHSy0/NkkysB63GXJ99F6I1QYegNu69it5kV/Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl
rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:15:35:7e:b0:d7:ce:49:eb:6e:1f:a1:30:ab:d4:eb:e0:5d:a8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0
Validity
Not Before: Oct 24 01:51:25 2026 GMT
Not After : Oct 25 03:45:25 2026 GMT
Subject: CN=8C2E8D6D43EB13C403203DA9E5CC84C8600634AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cd:4f:d9:15:d8:7d:87:cb:91:f6:1e:1a:34:
3c:53:b1:62:80:d3:c8:e7:09:07:02:42:c4:70:88:
04:35:1f:98:04:e1:66:37:0b:29:3d:ab:40:48:6d:
ea:45:35:2a:11:67:68:81:89:12:7e:72:34:1e:ab:
a6:c4:83:bd:0c:07:76:f1:f0:2e:48:78:18:52:49:
23:c9:53:58:6b:2d:f8:3a:b4:c4:2d:09:df:f7:ae:
83:6c:7a:6d:35:a3:38:82:17:7f:b4:a3:44:41:16:
81:5c:62:40:bd:16:f5:d2:c9:70:2a:11:99:cc:6c:
87:f3:75:35:aa:47:ad:ea:b2:01:78:0a:30:f5:cb:
65:a8:97:72:c2:f6:5b:b9:5a:a4:b3:c9:61:be:3a:
70:8a:82:69:bc:73:22:c6:1c:1c:c9:a0:cd:d3:a3:
43:36:a1:8d:f0:d6:46:17:0f:2b:e2:73:02:fb:cf:
f8:1d:f5:c8:63:a6:8c:52:f2:bc:cd:47:e0:7a:d0:
3e:8b:90:fa:4a:31:f6:30:1f:cc:54:21:49:e1:0c:
c3:73:8d:4b:5a:cb:d5:b0:81:f6:e6:10:94:c4:d2:
c8:44:ff:32:90:3e:5d:6e:99:d6:34:eb:50:f6:b7:
a4:31:98:e8:4f:ae:df:6f:83:90:66:90:04:c9:b1:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2E:8D:6D:43:EB:13:C4:03:20:3D:A9:E5:CC:84:C8:60:06:34:AC
X509v3 Authority Key Identifier:
keyid:26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:aa:bf:d3:75:81:f6:8a:6f:0e:09:c2:da:6a:05:46:ef:94:
5d:af:1f:7c:20:fe:f5:43:c2:8d:a8:80:f1:29:00:0e:a5:46:
b2:8f:6f:20:82:0f:91:88:09:0c:33:a4:e5:83:13:28:1d:ec:
e1:dc:9b:1e:8d:9e:b9:05:11:5d:5e:cc:66:2b:75:19:7a:ee:
e1:d3:62:01:d2:44:91:ea:1d:9a:20:bc:20:2a:34:0b:b3:b3:
68:c2:41:30:ac:b6:72:45:7e:fe:90:6f:35:0a:24:3b:f9:0d:
2d:46:8f:64:be:ee:00:09:cc:17:03:03:69:c1:11:64:6f:f0:
9a:7d:92:b6:ba:16:af:94:e7:1b:27:a6:b1:d9:4c:c5:49:00:
58:8c:3f:91:65:2b:2c:ae:87:c9:fc:e3:63:e9:4c:06:6a:e0:
66:d1:a7:a9:40:a5:2c:2f:ce:59:da:6a:61:c6:c7:41:46:98:
dc:d1:90:72:31:d5:3e:27:8a:75:3d:19:7a:66:d3:8b:33:cb:
b9:84:08:c3:85:35:18:57:0d:49:82:50:29:63:89:fc:75:41:
d2:c6:d2:fc:6c:a7:1b:3a:73:c9:ed:f1:2b:0b:91:00:cf:a3:
36:fd:4b:05:9d:d9:69:08:b3:87:6f:1e:14:a3:6f:69:23:4a:
1c:98:f9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:43:51 2026 by rpki-client