
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft
File: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft (raw, json)
Hash identifier: qh7avbOuJGts/my6EgzlXcHnRgL7aOoge/cpLvOqjZ4=
Subject key identifier: 9F:A6:ED:26:08:32:E9:9B:A9:28:2C:63:2B:99:69:9F:8A:B9:4B:23
Authority key identifier: D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC
Certificate issuer: /CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC
Certificate serial: 47845F61B7CE7AE336EF81AE4FA956CE35CBD632
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 03:36:14 +0000
Manifest this update: Thu 18 Jun 2026 03:31:14 +0000
Manifest next update: Fri 19 Jun 2026 06:09:14 +0000
Files and hashes: 1: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl (hash: v/0dYUBkr15R42DUOGHAeYvGdPURzQ5im3xyIewFBjY=)
2: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: KLJKltDFBgSRycUEiUgW7XKQBHKRYM0bmiK8DEJJdYA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl
rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 06:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:84:5f:61:b7:ce:7a:e3:36:ef:81:ae:4f:a9:56:ce:35:cb:d6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC
Validity
Not Before: Jun 18 03:31:14 2026 GMT
Not After : Jun 19 06:09:14 2026 GMT
Subject: CN=9FA6ED260832E99BA9282C632B99699F8AB94B23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:bd:b6:df:52:b8:62:4a:65:23:62:a6:0e:
5e:f6:47:a3:88:7a:4b:53:a9:7f:92:7a:f2:39:9a:
40:3b:d9:44:75:f7:b6:b1:4b:5b:95:af:46:b7:67:
2b:b4:58:23:c8:52:46:7b:8a:91:19:27:e1:23:08:
00:b6:30:b1:45:6d:b9:f0:3c:23:05:9d:8b:a6:3e:
67:01:77:a0:84:de:33:76:0e:ba:5d:5d:f4:93:a8:
80:80:0d:44:18:7f:9d:7e:89:3f:1c:5b:08:79:07:
18:dd:9c:4f:50:f6:d9:20:be:e7:91:09:34:96:2b:
eb:b1:b2:54:38:14:06:a2:7e:83:33:0e:24:c1:43:
21:7c:3d:04:7d:61:14:c8:e1:c9:f3:b7:11:de:5b:
a1:27:55:7e:f7:9a:16:8f:b3:80:78:cf:c2:7c:88:
6e:db:b9:ce:8f:96:92:c4:7a:19:df:1c:a1:a8:6f:
a6:40:52:17:8f:b2:e4:e9:c3:f0:0b:be:91:2c:a8:
c0:40:a8:dd:93:b5:46:49:78:bb:b4:5e:5a:ed:1d:
49:9f:74:22:63:c0:b1:06:53:36:e3:86:ea:11:8f:
66:ad:6d:3e:8b:c5:78:86:f4:30:54:e5:89:14:26:
fe:cc:3e:91:56:db:52:74:8a:8e:27:04:3f:88:6d:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A6:ED:26:08:32:E9:9B:A9:28:2C:63:2B:99:69:9F:8A:B9:4B:23
X509v3 Authority Key Identifier:
keyid:D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4b:5b:e1:65:16:02:91:d3:5a:1f:e0:78:12:08:d7:01:72:
bb:d6:3b:1b:ec:5c:5b:a5:5b:8c:f7:93:5f:ed:7e:a9:29:5c:
15:21:f9:7c:1c:e2:01:ee:a7:83:ee:1f:3a:2c:fd:7c:6d:7e:
8c:f5:db:9b:ab:6b:c2:dc:5e:cc:f0:bb:f2:a6:91:db:8c:98:
bc:24:24:3b:13:2c:d9:58:64:2a:5d:58:21:93:a7:8f:c5:f4:
e8:04:44:ec:cd:75:7f:53:9f:ce:4a:71:bd:f6:c4:a8:2f:7f:
98:fc:2d:6e:46:64:34:05:ca:10:25:80:cc:d6:18:c8:ad:00:
87:ba:e5:75:3a:c1:be:49:29:89:35:6f:50:cc:c2:8f:fe:ad:
97:fc:b0:3c:70:d7:f6:79:12:7c:a7:99:8e:c3:41:53:78:ae:
81:08:72:8a:c4:00:1e:45:52:a5:f8:12:62:a6:79:80:a6:b1:
a3:38:02:c1:04:5b:1b:e8:cb:d4:20:f8:6b:a5:8d:99:7c:d6:
40:b5:16:02:81:e2:2c:25:29:ed:49:63:40:6b:35:87:eb:dd:
42:46:17:b9:be:ef:b3:0e:ad:81:64:0a:20:c1:9c:3a:53:c8:
16:d0:fb:8a:b9:f7:c9:a5:20:34:1d:1e:ae:f6:8c:7b:90:ac:
df:8f:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 19:21:24 2026 by rpki-client