
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
File: 6564F75E34457852F2B66C3764B24E23D7CC229E.mft (raw, json)
Hash identifier: 8DZoWD47+66qIYf6bKwwhr8FQka1SabewpDHlEv8ToU=
Subject key identifier: A6:08:C6:66:68:D4:67:E2:84:13:E2:E5:66:6A:BF:A9:33:0D:A7:1C
Authority key identifier: 65:64:F7:5E:34:45:78:52:F2:B6:6C:37:64:B2:4E:23:D7:CC:22:9E
Certificate issuer: /CN=6564F75E34457852F2B66C3764B24E23D7CC229E
Certificate serial: 6290AF31D03014D9ABB2C0F0EDEE5A308928F3D1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 11:25:33 +0000
Manifest this update: Mon 20 Jul 2026 11:20:33 +0000
Manifest next update: Tue 21 Jul 2026 13:54:33 +0000
Files and hashes: 1: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ID4fm5BwuuWYs0CbkPkat6AFzlZ1Ymdn+yuQrCTD+tk=)
2: 6564F75E34457852F2B66C3764B24E23D7CC229E.crl (hash: JUhYEGMUatbXdKXq3Gh38cTTLbD5D2EG+L2Kf8G9RAc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.crl
rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 13:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:90:af:31:d0:30:14:d9:ab:b2:c0:f0:ed:ee:5a:30:89:28:f3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6564F75E34457852F2B66C3764B24E23D7CC229E
Validity
Not Before: Jul 20 11:20:33 2026 GMT
Not After : Jul 21 13:54:33 2026 GMT
Subject: CN=A608C66668D467E28413E2E5666ABFA9330DA71C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:6e:97:04:d3:bf:75:b3:52:ca:66:7e:da:
95:21:09:0b:e9:44:4a:60:26:e3:ff:5c:0c:5e:22:
a4:18:25:70:fe:b0:3b:c2:f5:98:c6:28:fb:14:73:
29:ee:a4:c8:30:7a:3b:0e:6b:82:91:b8:7b:c7:c8:
15:3c:d6:31:9a:44:0c:d7:02:5b:32:1f:6e:b9:bc:
b6:0d:27:59:ae:08:8b:6e:b5:1e:bb:75:82:0b:d1:
b9:8f:8c:e2:cc:b6:ae:8b:11:8e:40:45:3c:8c:3e:
05:26:b3:b8:8f:2b:d5:ec:20:54:83:c0:78:65:6f:
6f:08:33:2b:0e:c5:b6:e9:a7:6f:78:5d:53:26:3b:
42:76:7b:88:82:f8:5f:05:41:15:4a:93:4e:5e:5e:
f9:fb:c5:45:ee:f3:0d:46:cf:22:14:5d:7d:d8:b2:
08:08:3e:57:bd:3d:9f:cd:8a:b7:6b:62:95:65:c8:
9a:2f:e2:14:ed:8f:c5:a3:8f:c2:d6:61:5a:93:5f:
e5:59:62:a5:92:24:c2:c2:9d:43:82:30:5f:61:68:
f7:72:3f:6d:51:50:03:62:c0:5e:70:95:ca:f0:aa:
24:ad:bc:72:bb:08:62:2b:11:1f:aa:36:1f:7f:b9:
01:41:ef:a1:cd:2a:9c:b4:7c:28:f9:84:51:a6:d4:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:08:C6:66:68:D4:67:E2:84:13:E2:E5:66:6A:BF:A9:33:0D:A7:1C
X509v3 Authority Key Identifier:
keyid:65:64:F7:5E:34:45:78:52:F2:B6:6C:37:64:B2:4E:23:D7:CC:22:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f0:09:60:d3:96:7a:39:f2:0b:da:58:57:8e:dd:28:ae:04:
d3:2b:2d:82:24:e5:d4:03:86:cd:cc:16:8c:1e:f7:2d:32:7b:
02:ea:34:ba:72:36:f9:15:af:69:c7:67:c2:bf:6b:8a:91:20:
59:61:04:5e:4b:ba:92:6f:5f:9c:fe:97:f2:17:d9:c9:16:f9:
90:19:ff:cf:03:05:da:82:36:ea:6d:43:d8:40:df:83:b8:cf:
07:6d:87:82:35:59:99:6d:8e:71:a4:ce:9e:b0:92:97:eb:29:
59:f7:6f:40:6d:7e:46:53:01:82:9a:e0:7c:61:c8:1e:12:10:
f6:c9:ed:86:bf:7e:61:4b:7d:6b:de:bf:42:c2:27:74:78:f5:
fc:08:0d:bc:2b:9d:b7:97:30:f8:7d:fa:e8:65:41:ea:10:96:
02:3f:af:e9:23:3e:0e:7b:e8:66:62:e8:c3:80:eb:f0:b7:fe:
b6:6c:e7:0a:4e:f7:26:55:91:e5:33:37:a3:f9:48:ce:ba:f0:
9c:3c:d3:53:d1:6b:b3:30:19:6e:bb:68:65:23:e0:98:be:1f:
71:b2:e6:c6:9c:0c:ef:b0:67:85:2e:6e:01:16:9f:5b:18:8f:
36:78:a7:32:79:7f:dd:03:af:1a:b2:99:03:81:b8:9e:52:e6:
72:ea:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:59:56 2026 by rpki-client