
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft
File: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft (raw, json)
Hash identifier: EFyuH9wWmlBMcs0P33CyxuiiBg9dEkeau/j65pZIWEg=
Subject key identifier: E0:60:E8:7F:EA:56:79:91:6C:D1:68:0C:23:FF:36:9B:4C:E6:67:2D
Authority key identifier: 1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA
Certificate issuer: /CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA
Certificate serial: 70FDAF1979274516CA6AF6BDBDB2E640913A999A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 03:55:44 +0000
Manifest this update: Tue 21 Jul 2026 03:50:44 +0000
Manifest next update: Wed 22 Jul 2026 05:21:44 +0000
Files and hashes: 1: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl (hash: 2jeFVKBFtqS1lnZQToeIc/Pd65xucuPktyaCBbvQdgs=)
2: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: nSsVilLmRiJa0+a7BBDxlGj708JBl0xDsJ3rq/l4Ock=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl
rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fd:af:19:79:27:45:16:ca:6a:f6:bd:bd:b2:e6:40:91:3a:99:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA
Validity
Not Before: Jul 21 03:50:44 2026 GMT
Not After : Jul 22 05:21:44 2026 GMT
Subject: CN=E060E87FEA5679916CD1680C23FF369B4CE6672D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:70:15:b1:93:41:cb:3b:a9:59:77:52:fc:
11:0a:21:fa:0c:d8:a6:47:ad:dd:9a:d7:75:2d:95:
a9:a7:6e:1e:eb:87:8d:8f:13:f6:af:79:1e:55:08:
90:1b:01:4e:5b:9e:85:98:81:74:d4:0d:4b:e2:10:
b3:df:30:22:5c:45:c4:cf:23:9e:de:5f:02:66:63:
f7:68:87:45:15:ce:a8:2a:72:d4:a9:66:00:74:aa:
0c:20:ee:39:dc:d9:3d:01:fd:31:7a:8b:f0:2e:6a:
91:d4:ba:41:f6:76:8e:5a:44:06:00:de:49:1d:17:
df:8f:b7:c2:46:07:c8:37:28:e9:ef:d7:c6:b0:a2:
18:56:c7:90:49:06:9b:ef:ea:67:a5:e4:54:51:08:
7e:44:ec:bc:85:e0:db:70:70:fb:f2:6f:d7:0f:89:
0b:4b:0b:cf:82:11:bf:03:83:d7:33:29:d0:16:50:
b5:79:8f:3d:93:f2:ff:0e:6a:aa:51:e6:19:bd:21:
07:91:65:9f:3a:0f:70:17:e7:57:f0:23:bc:57:8b:
a2:96:bd:64:25:6b:5b:e4:02:41:da:ec:d2:13:2e:
cd:de:5e:cc:5f:06:22:02:7a:e0:ed:ed:9a:a5:50:
58:2c:41:50:b3:49:01:81:67:bb:70:da:93:9f:2f:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:60:E8:7F:EA:56:79:91:6C:D1:68:0C:23:FF:36:9B:4C:E6:67:2D
X509v3 Authority Key Identifier:
keyid:1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:49:3d:3d:a0:3e:b5:10:a9:6e:61:44:19:ea:c5:08:7a:60:
7e:5e:0f:a3:51:4f:28:b9:88:98:dd:a2:55:12:2f:cd:72:b5:
dc:f4:8f:3f:d0:be:ab:d6:03:c2:cc:df:05:4b:8f:c8:09:ca:
d9:4b:1d:10:b9:3b:ca:c6:d8:56:29:c5:90:6a:8c:fa:7e:a4:
ec:e4:18:a7:ea:75:3f:d9:a9:de:22:82:cc:44:8b:99:54:eb:
8d:b5:01:5d:c6:bb:8d:76:64:dc:10:1c:20:d3:a1:a5:7b:80:
02:76:7e:d0:88:ac:07:d3:19:62:3b:fa:36:1a:df:20:22:a8:
b2:a3:a3:70:d2:92:4a:4f:84:d8:55:06:88:6d:97:8e:3d:fd:
a8:fe:d3:cd:c9:8c:39:90:67:7a:5c:cf:e9:0d:e7:f4:d7:6b:
f2:8b:b4:c7:fc:8a:1d:43:04:4e:c9:e4:66:d3:9e:94:db:2a:
6b:e6:bc:6c:85:33:fd:bd:36:51:ca:ff:01:38:d0:ee:85:72:
fc:b6:44:0c:e8:9c:a6:fb:18:ce:9d:fc:f0:da:6f:f2:c0:aa:
3c:b3:6c:45:12:88:10:a1:0e:e8:45:a7:d6:60:05:fd:5a:42:
ea:66:17:52:21:e9:86:74:66:8c:76:ce:da:70:3e:0a:ec:91:
0f:40:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:40:51 2026 by rpki-client