
$ rpki-client -vvf rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
File: 19101281C951DCE434F1B713AE570F59EE413A09.mft (raw, json)
Hash identifier: y9sh6ZnFeAKo5A+gZRF3UClByHclj8+LDEiDndeCIwE=
Subject key identifier: 7F:1F:AF:97:C0:D0:E2:2A:81:D4:F6:E7:49:10:94:D8:FD:AF:8E:DE
Authority key identifier: 19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09
Certificate issuer: /CN=19101281C951DCE434F1B713AE570F59EE413A09
Certificate serial: 6D4928D07722F8BCC526323CE922C60F281AE071
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 00:41:41 +0000
Manifest this update: Tue 21 Jul 2026 00:36:41 +0000
Manifest next update: Wed 22 Jul 2026 03:33:41 +0000
Files and hashes: 1: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: bgJcO1kAlUNDdjIqyEDrjwkCdWK+MIfy7MXbYHWX1YE=)
2: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: pQnNBmBtFzueuc0/RAfPveu5rYMb0ariGWnKZ/WG/t8=)
3: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: w5VnAqDMpxkCSyJK8a4JzBCfvPRADlp4Zd050ewYnlA=)
4: 19101281C951DCE434F1B713AE570F59EE413A09.crl (hash: d5GYcpoJsO0NVhhFIzb63pMUecX9Yu6xYaz+CCyyBe0=)
5: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: lsZJ+/dkSenhsqGfebfOtSdM0lXp316Uwu+8bQgCJfE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl
rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:49:28:d0:77:22:f8:bc:c5:26:32:3c:e9:22:c6:0f:28:1a:e0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19101281C951DCE434F1B713AE570F59EE413A09
Validity
Not Before: Jul 21 00:36:41 2026 GMT
Not After : Jul 22 03:33:41 2026 GMT
Subject: CN=7F1FAF97C0D0E22A81D4F6E7491094D8FDAF8EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:62:17:11:d4:fd:d7:d6:df:61:32:e1:0a:
4e:48:40:82:c2:ce:b7:9c:bc:68:a0:e9:bc:dd:0f:
52:cf:2e:27:de:ee:48:37:dc:f4:e4:f9:63:d3:2f:
2e:e3:b8:1b:91:b0:38:30:86:38:7b:3d:a1:4c:ed:
dc:1b:86:e4:2b:bf:58:96:49:c0:7a:74:87:bd:62:
5c:fd:21:b9:55:26:33:46:ac:86:14:ba:4e:93:95:
31:92:8d:c7:db:37:17:f8:83:b1:cc:92:d2:ec:57:
04:4c:17:24:a2:e3:01:65:e1:f9:73:42:c7:45:5b:
64:42:45:59:9f:c5:bb:76:06:ab:68:10:a0:a4:9a:
4c:53:19:f7:16:4e:64:63:61:c4:f1:87:67:6f:64:
ba:13:f1:90:61:fc:c3:ca:ae:8c:59:0c:26:23:19:
89:1f:f9:f3:ab:3e:fd:b5:a1:1d:ab:2c:f8:fd:8e:
2a:12:71:96:cc:50:e5:b5:24:4e:21:19:5c:57:db:
96:e3:d6:d3:12:f9:cd:fd:66:1a:3b:67:18:dc:c6:
b2:5c:b2:5f:41:5f:22:18:33:b9:14:2f:44:4c:8f:
1a:61:ee:38:bb:4c:9c:79:27:a1:4d:35:1e:28:95:
32:63:d0:d2:42:32:8c:1e:59:e9:18:cb:47:16:48:
e5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1F:AF:97:C0:D0:E2:2A:81:D4:F6:E7:49:10:94:D8:FD:AF:8E:DE
X509v3 Authority Key Identifier:
keyid:19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:34:03:14:48:24:3d:95:f4:8e:63:56:ca:6a:1e:b9:cc:e7:
d2:1e:34:55:f3:23:e4:f4:6f:99:d8:2c:74:09:12:80:0d:23:
6e:25:05:fb:c3:71:61:f9:14:eb:8b:6c:e7:f5:a3:54:f6:78:
3b:94:f0:67:bb:ba:fa:91:62:de:62:2c:4f:7f:a9:5b:91:bd:
3d:1e:f8:ac:96:f9:8e:aa:24:da:3f:ca:4d:5e:1e:8d:3b:d7:
2c:da:b2:40:74:ec:50:a6:4d:31:12:5f:08:89:8a:fe:33:ef:
a7:05:da:d1:4e:96:2f:9b:23:54:50:ee:bd:97:a7:4b:be:dc:
81:8e:49:d6:d1:a6:2d:96:62:8b:fd:52:bd:39:09:47:ce:0d:
23:9b:01:8b:1e:1c:f6:ce:86:40:1a:45:b8:d7:83:5d:d2:58:
9e:ad:2f:e1:21:56:06:c7:5e:6d:eb:dd:57:0b:a0:54:5a:e6:
39:30:72:3a:c5:b5:fc:28:c0:85:75:16:eb:c7:69:49:42:7a:
5e:b9:b2:25:ec:d1:8c:18:a3:15:e2:fa:f3:c8:99:c0:8a:5a:
87:b8:28:b3:ed:82:7e:b6:02:73:09:e5:be:56:e6:5c:d0:bf:
78:9f:f8:53:d4:85:9d:39:94:50:32:f2:4d:52:5b:ba:48:3b:
3e:5f:36:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:22:48 2026 by rpki-client