
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.mft
File: 369A5CE4785D27442508404CAC16E70E3DFBCE22.mft (raw, json)
Hash identifier: Z4N6kpjeF9PYIdeaJH7yJdtJXUy6MgKEpVCBCrF7u98=
Subject key identifier: AA:D0:DE:44:F2:BD:88:F4:1F:D6:E7:0F:DB:13:09:75:20:35:E1:A3
Authority key identifier: 36:9A:5C:E4:78:5D:27:44:25:08:40:4C:AC:16:E7:0E:3D:FB:CE:22
Certificate issuer: /CN=369A5CE4785D27442508404CAC16E70E3DFBCE22
Certificate serial: 7DDC104F51EA6E9B03DD051ADDA74A5E2713A229
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.mft
Manifest number: 6A
Signing time: Tue 21 Jul 2026 04:36:26 +0000
Manifest this update: Tue 21 Jul 2026 04:31:26 +0000
Manifest next update: Wed 22 Jul 2026 06:10:26 +0000
Files and hashes: 1: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: rPP6V0AAbWQPb0tykKnGuJ9vTxTL/c/Ko2tg0hbJTrk=)
2: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: P5ZIOPTsddeJTRgtwDMGa8DbnU/VOaQA2C+qkfXBoKA=)
3: 369A5CE4785D27442508404CAC16E70E3DFBCE22.crl (hash: s9sWVuigFzMmC2p0hPPwIMapbGrEJnk7d+N4NLZqtuY=)
4: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: RlsBI7ppBAoSjD2evBJfAqX7gcSYEF5x+6E+5HMHSz0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.crl
rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:dc:10:4f:51:ea:6e:9b:03:dd:05:1a:dd:a7:4a:5e:27:13:a2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369A5CE4785D27442508404CAC16E70E3DFBCE22
Validity
Not Before: Jul 21 04:31:26 2026 GMT
Not After : Jul 22 06:10:26 2026 GMT
Subject: CN=AAD0DE44F2BD88F41FD6E70FDB1309752035E1A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:d1:16:a5:6e:85:86:55:c5:f8:52:c6:ae:
ec:f5:85:cf:d8:d2:2a:ca:39:5c:63:56:5c:40:9a:
32:dd:c8:56:24:ed:88:e1:38:1f:90:83:ff:24:ee:
c4:db:80:11:eb:6e:82:0d:02:a1:4f:65:99:0f:3c:
de:8d:d6:f9:59:dd:a9:03:e3:e5:5f:35:50:7b:f6:
a3:74:f7:e2:45:69:9b:d8:46:37:26:bd:bd:38:0d:
f8:14:3f:31:26:84:97:af:07:29:f9:ff:c7:56:62:
a2:91:69:3c:19:78:f1:80:68:b2:7a:33:28:a9:6c:
df:58:d0:49:8b:05:aa:ce:d0:04:65:d0:c1:42:64:
7b:76:11:8f:01:f4:5a:ba:b1:4a:70:e2:2f:66:a7:
9f:b9:2b:9e:90:47:b3:34:5f:9f:44:fa:97:b8:2e:
28:02:ad:a9:79:bb:c1:8f:91:61:9d:7d:3a:9b:11:
1c:f7:5d:d5:93:a1:d0:c1:df:a3:64:da:61:27:aa:
ab:33:95:b8:17:1e:34:9d:96:67:a4:23:f0:1a:b1:
d7:25:1f:91:d1:28:0e:1c:38:9a:26:bc:ac:81:b9:
a0:45:45:67:d2:59:b2:5f:77:15:12:f7:77:9b:e6:
78:ea:c9:ec:0c:c1:23:fc:a9:99:ea:f8:f4:dd:f3:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:DE:44:F2:BD:88:F4:1F:D6:E7:0F:DB:13:09:75:20:35:E1:A3
X509v3 Authority Key Identifier:
keyid:36:9A:5C:E4:78:5D:27:44:25:08:40:4C:AC:16:E7:0E:3D:FB:CE:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:81:e6:6e:2c:8e:fd:33:dd:22:fe:49:c0:aa:75:86:51:e6:
85:93:c8:60:5f:c5:5f:17:6a:64:0d:31:7e:ef:e5:48:f6:89:
8a:bd:fe:18:64:bb:93:35:ef:69:c8:39:7f:87:3a:00:85:cb:
2d:b4:2b:cc:1b:bc:8e:a4:a3:95:ac:2a:f1:e2:1c:1c:d5:b1:
54:17:d6:df:56:d3:bb:0a:6a:ea:13:38:8b:72:61:33:0b:dc:
b0:24:d5:9b:27:af:86:04:ea:57:0e:b8:ba:c2:e7:3b:0d:14:
fe:b6:97:d5:d0:4a:e0:f2:38:ae:58:c5:55:7c:52:0c:57:1d:
d2:86:ed:30:59:29:2c:7b:f6:c0:bd:bc:2e:38:08:37:cd:04:
0f:45:ed:aa:89:0a:38:dd:a4:e0:b3:45:56:2b:be:ff:93:ef:
3b:97:1e:3a:89:31:d6:14:d4:08:51:e2:5c:a8:58:47:74:e8:
9c:73:e3:c2:b9:31:8b:25:db:26:4a:5b:d8:16:81:7d:3b:e3:
b5:ee:b5:25:b1:8e:8b:f9:71:de:43:8d:2d:9b:c1:22:83:3c:
86:38:20:0e:09:7a:b0:83:9c:5e:68:55:7c:c0:a3:03:2e:15:
13:5f:9d:63:d9:4d:3f:c7:72:60:dc:aa:6f:27:51:f7:f5:35:
29:90:0b:28
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfdwQT1HqbpsD3QUa3adKXicToikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5QTVDRTQ3ODVEMjc0NDI1MDg0MDRDQUMxNkU3MEUz
REZCQ0UyMjAeFw0yNjA3MjEwNDMxMjZaFw0yNjA3MjIwNjEwMjZaMDMxMTAvBgNV
BAMTKEFBRDBERTQ0RjJCRDg4RjQxRkQ2RTcwRkRCMTMwOTc1MjAzNUUxQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/NEWpW6FhlXF+FLGruz1hc/Y
0irKOVxjVlxAmjLdyFYk7YjhOB+Qg/8k7sTbgBHrboINAqFPZZkPPN6N1vlZ3akD
4+VfNVB79qN09+JFaZvYRjcmvb04DfgUPzEmhJevByn5/8dWYqKRaTwZePGAaLJ6
MyipbN9Y0EmLBarO0ARl0MFCZHt2EY8B9Fq6sUpw4i9mp5+5K56QR7M0X59E+pe4
LigCral5u8GPkWGdfTqbERz3XdWTodDB36Nk2mEnqqszlbgXHjSdlmekI/Aasdcl
H5HRKA4cOJomvKyBuaBFRWfSWbJfdxUS93eb5njqyewMwSP8qZnq+PTd89zTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqtDeRPK9iPQf1ucP2xMJdSA14aMwHwYDVR0j
BBgwFoAUNppc5HhdJ0QlCEBMrBbnDj37ziIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjYyNjYzOWEtOWExYy00YzBlLWJhMTctZjY3OWYwNTA2Y2JjLzAvMzY5QTVDRTQ3
ODVEMjc0NDI1MDg0MDRDQUMxNkU3MEUzREZCQ0UyMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNjlBNUNFNDc4NUQyNzQ0MjUwODQwNENBQzE2RTcwRTNERkJD
RTIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjYyNjYzOWEtOWExYy00YzBlLWJh
MTctZjY3OWYwNTA2Y2JjLzAvMzY5QTVDRTQ3ODVEMjc0NDI1MDg0MDRDQUMxNkU3
MEUzREZCQ0UyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE6B5m4sjv0z3SL+ScCqdYZR5oWTyGBfxV8X
amQNMX7v5Uj2iYq9/hhku5M172nIOX+HOgCFyy20K8wbvI6ko5WsKvHiHBzVsVQX
1t9W07sKauoTOItyYTML3LAk1Zsnr4YE6lcOuLrC5zsNFP62l9XQSuDyOK5YxVV8
UgxXHdKG7TBZKSx79sC9vC44CDfNBA9F7aqJCjjdpOCzRVYrvv+T7zuXHjqJMdYU
1AhR4lyoWEd06Jxz48K5MYsl2yZKW9gWgX0747XutSWxjov5cd5DjS2bwSKDPIY4
IA4JerCDnF5oVXzAowMuFRNfnWPZTT/HcmDcqm8nUff1NSmQCyg=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:48:05 2026 by rpki-client