
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft
File: D448B410BA4C741968F8C5B34E3156EA5666874D.mft (raw, json)
Hash identifier: VoJ1Z3kCiITeByuLeklrrnBwnjk3Sj5CWOjqST4puD0=
Subject key identifier: 9C:7C:E0:BF:9A:F7:38:05:3D:45:CE:80:4E:0C:6E:22:49:84:A5:C4
Authority key identifier: D4:48:B4:10:BA:4C:74:19:68:F8:C5:B3:4E:31:56:EA:56:66:87:4D
Certificate issuer: /CN=D448B410BA4C741968F8C5B34E3156EA5666874D
Certificate serial: 067FB3F4D8B8FD235D55C71F2130D74EDBD88936
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D448B410BA4C741968F8C5B34E3156EA5666874D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 13:43:28 +0000
Manifest this update: Mon 20 Jul 2026 13:38:28 +0000
Manifest next update: Tue 21 Jul 2026 16:19:28 +0000
Files and hashes: 1: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: cbAdIskM1pEjxRO+NRH9Xmr+LSfrz4v+8kHiTjQjIx0=)
2: D448B410BA4C741968F8C5B34E3156EA5666874D.crl (hash: K6PUHHJbVX05HRWNfpA/LZA4YkHsEt86hwDfNL94FtI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.crl
rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D448B410BA4C741968F8C5B34E3156EA5666874D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 16:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7f:b3:f4:d8:b8:fd:23:5d:55:c7:1f:21:30:d7:4e:db:d8:89:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D448B410BA4C741968F8C5B34E3156EA5666874D
Validity
Not Before: Jul 20 13:38:28 2026 GMT
Not After : Jul 21 16:19:28 2026 GMT
Subject: CN=9C7CE0BF9AF738053D45CE804E0C6E224984A5C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:3b:d3:63:ad:61:ad:aa:ef:02:c8:b5:65:
d5:6b:cd:9c:c7:97:76:ec:92:bf:fa:25:32:db:11:
02:97:ca:43:19:a0:03:94:19:66:71:ba:6e:36:ac:
f9:25:2c:ad:59:76:2f:ac:35:a4:c4:39:ab:25:55:
62:73:7a:46:a0:85:f3:4a:8e:29:61:15:76:c9:f1:
f2:d8:bf:95:12:8f:41:3b:be:ed:ab:22:c7:8f:0f:
7e:35:8c:4d:95:37:fb:e8:8e:47:46:75:78:a7:63:
50:b2:20:68:a2:55:bb:fa:82:ea:64:78:c7:ce:4f:
5c:73:6d:c8:d7:1f:ee:58:ba:b3:3e:f4:a6:41:cc:
cb:12:eb:aa:76:72:22:9a:fb:a8:95:05:cb:4b:02:
bd:44:81:bf:e7:54:c4:fc:f3:24:49:6d:55:fe:d0:
c0:40:6d:38:fc:7b:c8:e8:bb:2f:6d:c6:86:dd:59:
aa:e8:eb:32:e6:9f:1a:1f:b2:42:91:1d:7f:4d:0b:
b6:1f:77:00:0c:02:97:b1:7f:0b:0b:16:bf:21:d5:
f2:0b:c7:b4:b3:94:ce:b2:ac:e5:c8:08:56:3a:5d:
48:67:10:95:27:ea:c0:21:ee:bb:ef:fe:d1:46:20:
0a:9f:45:49:e6:ce:6f:01:fe:07:59:22:03:bf:8c:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7C:E0:BF:9A:F7:38:05:3D:45:CE:80:4E:0C:6E:22:49:84:A5:C4
X509v3 Authority Key Identifier:
keyid:D4:48:B4:10:BA:4C:74:19:68:F8:C5:B3:4E:31:56:EA:56:66:87:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D448B410BA4C741968F8C5B34E3156EA5666874D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:51:19:83:a3:e0:00:c0:fe:16:15:37:6f:e7:6e:42:0b:6d:
d0:0a:69:d9:fe:21:3e:d6:79:f2:34:f5:ae:08:c4:0d:58:27:
9c:36:78:15:c4:78:2f:07:1d:e6:ff:6a:a5:36:b2:44:ab:8c:
0e:ea:f6:2c:4e:5b:9b:33:d3:3a:41:d2:67:48:11:5a:7a:75:
9c:63:f2:90:3a:f0:2a:6b:d0:8e:0e:4b:0c:a1:73:58:57:f0:
38:3d:0f:33:d7:51:2b:75:6a:a7:bb:a8:82:a5:b0:fa:b7:bc:
e9:7f:7c:a8:9e:7b:58:83:9f:d4:88:c8:9d:cc:db:2e:a1:09:
60:0d:43:51:a0:f8:0c:42:ef:c1:f4:6b:05:16:b7:62:5b:ed:
94:a5:8c:90:44:45:a8:65:bd:82:55:24:9c:27:1b:b1:31:22:
61:25:ea:15:ef:86:05:62:28:64:71:dc:e1:78:26:e7:ae:fc:
d6:ba:99:81:a6:1e:1c:14:84:8f:37:d3:8e:4e:db:31:b6:7c:
de:a1:a0:3f:42:92:70:4c:13:ce:9d:2a:ec:78:dd:92:fe:7b:
bb:c7:a7:a7:40:b5:76:4a:7f:cc:ef:f9:b7:8b:6d:b5:a4:af:
f2:62:a7:1b:cf:dd:bb:a8:be:f2:f9:4e:a2:f3:9e:c4:b5:1e:
59:de:96:50
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBn+z9Ni4/SNdVccfITDXTtvYiTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ0OEI0MTBCQTRDNzQxOTY4RjhDNUIzNEUzMTU2RUE1
NjY2ODc0RDAeFw0yNjA3MjAxMzM4MjhaFw0yNjA3MjExNjE5MjhaMDMxMTAvBgNV
BAMTKDlDN0NFMEJGOUFGNzM4MDUzRDQ1Q0U4MDRFMEM2RTIyNDk4NEE1QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQDDvTY61hrarvAsi1ZdVrzZzH
l3bskr/6JTLbEQKXykMZoAOUGWZxum42rPklLK1Zdi+sNaTEOaslVWJzekaghfNK
jilhFXbJ8fLYv5USj0E7vu2rIsePD341jE2VN/vojkdGdXinY1CyIGiiVbv6gupk
eMfOT1xzbcjXH+5YurM+9KZBzMsS66p2ciKa+6iVBctLAr1Egb/nVMT88yRJbVX+
0MBAbTj8e8jouy9txobdWaro6zLmnxofskKRHX9NC7YfdwAMApexfwsLFr8h1fIL
x7SzlM6yrOXICFY6XUhnEJUn6sAh7rvv/tFGIAqfRUnmzm8B/gdZIgO/jEC3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnHzgv5r3OAU9Rc6ATgxuIkmEpcQwHwYDVR0j
BBgwFoAU1Ei0ELpMdBlo+MWzTjFW6lZmh00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWI1YTQ3YjYtNTUxMy00NjEwLTk0Y2YtMWZlZWM0ZWVlY2YzLzAvRDQ0OEI0MTBC
QTRDNzQxOTY4RjhDNUIzNEUzMTU2RUE1NjY2ODc0RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENDQ4QjQxMEJBNEM3NDE5NjhGOEM1QjM0RTMxNTZFQTU2NjY4
NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0
Y2YtMWZlZWM0ZWVlY2YzLzAvRDQ0OEI0MTBCQTRDNzQxOTY4RjhDNUIzNEUzMTU2
RUE1NjY2ODc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGVRGYOj4ADA/hYVN2/nbkILbdAKadn+IT7W
efI09a4IxA1YJ5w2eBXEeC8HHeb/aqU2skSrjA7q9ixOW5sz0zpB0mdIEVp6dZxj
8pA68Cpr0I4OSwyhc1hX8Dg9DzPXUSt1aqe7qIKlsPq3vOl/fKiee1iDn9SIyJ3M
2y6hCWANQ1Gg+AxC78H0awUWt2Jb7ZSljJBERahlvYJVJJwnG7ExImEl6hXvhgVi
KGRx3OF4Jueu/Na6mYGmHhwUhI83045O2zG2fN6hoD9CknBME86dKux43ZL+e7vH
p6dAtXZKf8zv+beLbbWkr/JipxvP3buovvL5TqLznsS1HlnellA=
-----END CERTIFICATE-----
Generated at Tue Jul 21 08:45:22 2026 by rpki-client