
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
File: 1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft (raw, json)
Hash identifier: Bd7uGrdZXSxrokKXvh5JS+oJdRhsdW9v0sIISbHcyYk=
Subject key identifier: F8:D5:B5:06:92:C7:7F:AC:E0:16:A8:A8:18:80:28:7A:08:92:70:0B
Authority key identifier: 1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6
Certificate issuer: /CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6
Certificate serial: 6588D8C722214B858E028CC70A2C02BB3944C6C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 19:35:34 +0000
Manifest this update: Mon 20 Jul 2026 19:30:34 +0000
Manifest next update: Tue 21 Jul 2026 22:50:34 +0000
Files and hashes: 1: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: 38bOTSe4cTdefI8PO7GN8RWELwk4anfmyd09536sUts=)
2: 1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl (hash: zHiPVglxBk4fXTj96ArWl9TXBZTBgdxYjXJYHdneiz4=)
3: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: Zn62f1fBkgDvG3W52DfKvheKU31p9VTPEEMoYm0lHJA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl
rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 22:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:88:d8:c7:22:21:4b:85:8e:02:8c:c7:0a:2c:02:bb:39:44:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6
Validity
Not Before: Jul 20 19:30:34 2026 GMT
Not After : Jul 21 22:50:34 2026 GMT
Subject: CN=F8D5B50692C77FACE016A8A81880287A0892700B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:66:d9:24:86:fc:f3:53:9d:10:7c:84:e6:
9a:7f:2c:7e:ad:c1:eb:4a:e8:f4:52:79:a7:9d:d1:
25:41:a8:08:ad:0c:eb:98:f4:ca:ca:36:cd:ac:6e:
2b:6d:6c:a5:a7:65:8f:7a:a8:72:a7:8b:a2:40:fe:
f3:8d:45:0d:a8:e0:3d:a2:98:7e:23:f9:8b:57:c8:
35:d9:bd:de:ff:9f:a4:42:15:3a:4d:15:ac:88:df:
39:92:71:72:54:28:7d:0c:40:55:03:2b:7f:42:29:
0c:08:8e:2c:df:e3:af:53:cc:59:1a:e0:b8:17:f5:
2c:6c:2a:72:62:9b:29:89:7e:f2:80:26:a1:df:a0:
52:1b:9b:bb:21:e9:f8:9c:e7:bf:b3:09:fe:5f:0e:
41:9f:af:5f:2a:fe:fb:22:d3:d4:7c:2b:1a:2f:f5:
8f:37:59:37:a7:32:9d:02:a0:71:08:b6:7f:0c:66:
30:8a:0e:05:17:4a:f8:c3:7c:11:b4:3a:21:26:cc:
ac:90:59:50:3d:7d:e0:3f:38:b0:f3:78:54:a5:27:
e3:8e:4a:37:68:69:14:5a:1f:71:4e:ee:0f:af:06:
a3:88:90:82:19:25:01:ad:82:6a:79:c2:88:49:73:
52:4d:d9:80:de:01:79:b0:c2:74:82:ad:db:1e:96:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D5:B5:06:92:C7:7F:AC:E0:16:A8:A8:18:80:28:7A:08:92:70:0B
X509v3 Authority Key Identifier:
keyid:1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:fb:0d:0e:2c:17:b3:81:04:44:5a:ce:22:12:ed:42:46:b5:
d1:6a:99:57:09:be:a4:86:1d:7a:38:26:23:34:52:3b:95:82:
1d:29:56:74:a9:01:73:e7:4f:0f:3c:70:23:74:54:a1:59:2c:
7f:33:e5:3d:3a:a6:af:e4:96:0e:37:da:ec:77:57:60:1a:ef:
fa:50:90:e9:6e:97:3c:93:f3:87:e3:9a:46:a7:92:52:cc:a5:
06:52:5f:3d:9a:fa:21:b8:84:4c:91:c9:2c:89:03:8a:4c:64:
1a:9a:55:6f:55:41:d1:15:d1:fe:77:0f:55:f9:b3:07:d0:72:
2a:9d:66:8c:0f:3c:3e:0b:3d:3f:6f:9f:20:e5:8a:39:70:b9:
d3:b5:d7:f5:e8:8c:84:19:49:6d:60:54:2f:1f:94:e2:8b:ab:
44:23:5f:96:c0:27:66:5a:76:98:41:3f:f6:e8:b6:56:0b:89:
1f:b1:82:ac:08:74:ad:92:e2:64:91:79:39:8a:68:ec:97:87:
cd:9f:9c:6a:fa:74:06:28:d5:03:d3:8d:a0:70:99:38:d6:a6:
fc:d0:e9:18:b5:cf:49:94:a3:7e:03:c9:e8:03:d8:a8:3f:3a:
2e:3e:b8:27:73:83:a5:12:c9:7d:e3:8e:ee:07:7c:e7:ad:e2:
c0:76:0c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:48:37 2026 by rpki-client