
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft
File: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft (raw, json)
Hash identifier: L5smNZ1aawB69/PIVLYOGQL91w1mqEd6BEoVVoNi3K4=
Subject key identifier: E5:A6:9C:77:AD:53:E9:31:02:33:52:A9:2A:30:D5:B1:E2:3F:04:82
Authority key identifier: D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC
Certificate issuer: /CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC
Certificate serial: 069D878BE8DC864445351FB50E780A87180A4053
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 13:08:36 +0000
Manifest this update: Sun 02 Aug 2026 13:03:36 +0000
Manifest next update: Mon 03 Aug 2026 13:10:36 +0000
Files and hashes: 1: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl (hash: SVbaMEUCSSIw58EmptbMEikrP/MuqAy//xeBrD4fV/0=)
2: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: KLJKltDFBgSRycUEiUgW7XKQBHKRYM0bmiK8DEJJdYA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl
rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:9d:87:8b:e8:dc:86:44:45:35:1f:b5:0e:78:0a:87:18:0a:40:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC
Validity
Not Before: Aug 2 13:03:36 2026 GMT
Not After : Aug 3 13:10:36 2026 GMT
Subject: CN=E5A69C77AD53E931023352A92A30D5B1E23F0482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:7f:b8:84:43:70:64:f0:f2:bf:15:35:5c:
4e:8e:9c:3f:fb:1c:d7:16:7a:ad:fc:8e:ad:ad:c6:
e7:75:8e:f0:d9:41:3f:6e:fe:b2:70:b2:68:b1:2e:
cc:c5:f3:77:8c:d3:13:ef:b0:cd:72:e3:b6:e9:9c:
96:19:23:60:b9:2f:7d:ce:c9:63:a1:1e:4a:4b:06:
f9:5b:c8:d3:45:10:eb:24:2e:c4:1f:de:eb:30:e0:
b4:25:c4:1f:5e:92:96:07:ef:85:b4:09:9c:0b:49:
a4:c4:1d:51:f8:e3:d7:35:10:2d:ef:92:0b:53:06:
c1:e8:f5:ea:27:29:3b:98:e6:a2:e7:17:fb:39:7e:
51:e6:31:3c:9e:26:3c:87:f7:99:52:11:f5:c6:89:
4c:2a:00:c2:2b:fc:26:4f:da:21:0f:69:de:8d:46:
51:d5:82:1d:d6:a4:0e:23:17:03:a6:b0:7f:d7:c0:
bb:b8:c1:97:1c:75:e9:b5:c1:0e:fd:59:28:3f:89:
37:ee:b1:45:ba:93:5f:a2:24:4e:8e:8f:fb:91:fa:
20:f4:1f:74:36:49:95:55:f8:0b:ae:bf:33:30:3d:
a2:a1:bf:7a:ee:2c:a4:2b:b0:b3:d0:82:82:43:cd:
a8:44:7c:98:69:0e:0b:bd:6c:e1:6f:e3:07:20:70:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A6:9C:77:AD:53:E9:31:02:33:52:A9:2A:30:D5:B1:E2:3F:04:82
X509v3 Authority Key Identifier:
keyid:D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:45:aa:cb:cc:2e:2e:65:cb:ad:01:78:09:75:f3:d2:fc:dc:
fa:9c:4a:7e:37:c7:cf:2d:e2:8c:1a:47:21:a0:5b:6b:fe:43:
7e:c4:8d:10:96:8a:71:6a:9b:cb:62:55:a9:b0:f7:a0:23:55:
bf:ae:97:0f:85:7d:1e:8e:8f:10:84:8c:3e:f1:13:cc:e3:68:
4f:37:8f:74:b8:ef:a9:6c:65:2a:c4:b2:66:47:2f:d4:2c:d3:
db:bf:cd:ff:24:99:f6:6a:cc:b6:9f:f4:db:42:e9:70:87:e8:
ed:08:be:a0:ae:d6:11:95:a3:96:d2:60:db:2c:9c:21:9e:0c:
24:90:ee:08:4e:2a:25:48:da:03:a6:48:3a:13:c6:92:25:2b:
03:71:0a:43:c4:75:29:13:f7:ac:f9:63:8d:bc:27:d5:f0:00:
e8:a5:8c:06:f4:9a:50:c7:5f:6e:4c:9d:ef:71:64:eb:1a:29:
5f:84:b2:09:ec:07:65:e7:0d:0c:a9:cc:e9:fc:12:1c:2e:b1:
e5:2f:5e:9c:ca:42:e0:57:c3:3d:92:3c:bc:2c:a7:bc:cd:83:
fa:f7:94:38:0b:05:13:66:51:eb:ac:8d:43:10:fd:17:34:57:
cb:9c:46:82:0c:b2:30:fb:71:5e:60:2d:ce:98:34:5d:6d:bd:
34:08:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 23:18:51 2026 by rpki-client