
$ rpki-client -vvf rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft
File: 8100B25D994714EDA24AA78389FB6369505FB6A1.mft (raw, json)
Hash identifier: H144SxA0zyh83M14th8j67P27epbGbcqIZUEU+NS7Sk=
Subject key identifier: D6:F2:5E:AF:56:17:5B:69:10:CD:E8:A6:93:71:70:8D:73:65:BA:64
Authority key identifier: 81:00:B2:5D:99:47:14:ED:A2:4A:A7:83:89:FB:63:69:50:5F:B6:A1
Certificate issuer: /CN=8100B25D994714EDA24AA78389FB6369505FB6A1
Certificate serial: 3F6768B00BA2476C3953B8EF9F20FE9949113022
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 13:58:48 +0000
Manifest this update: Mon 20 Jul 2026 13:53:48 +0000
Manifest next update: Tue 21 Jul 2026 17:57:48 +0000
Files and hashes: 1: 8100B25D994714EDA24AA78389FB6369505FB6A1.crl (hash: qHMiRNZm2ciMJAnuPAZd93R+zHARCCyHI+hhodq8C/o=)
2: 3135372e36362e32392e302f32342d3234203d3e203539323831.roa (hash: Lkb66D/b6HHbDg6MW2ra2IYcOlvwvMwBNjyaQ7Wpqq4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.crl
rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 17:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:67:68:b0:0b:a2:47:6c:39:53:b8:ef:9f:20:fe:99:49:11:30:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8100B25D994714EDA24AA78389FB6369505FB6A1
Validity
Not Before: Jul 20 13:53:48 2026 GMT
Not After : Jul 21 17:57:48 2026 GMT
Subject: CN=D6F25EAF56175B6910CDE8A69371708D7365BA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:76:94:b0:ba:22:88:ed:1c:c7:3f:78:a6:
5d:d8:0e:50:97:5d:4e:27:52:f2:2a:bc:a3:a0:82:
8f:87:19:c9:25:77:b1:04:32:d3:49:60:5d:09:05:
f7:17:9a:81:44:2f:99:b4:39:5b:f0:b9:40:d0:48:
63:82:9a:5c:09:c9:05:d3:46:0c:a2:fb:c4:0f:74:
83:7e:8a:c8:77:38:48:ec:02:49:9f:a9:7f:5f:41:
c4:8a:4e:32:99:90:9e:92:bf:a5:c1:1a:3b:4f:03:
ce:74:7c:a3:36:be:fc:cd:3d:0f:8e:db:af:2c:c2:
a1:cf:7b:98:da:69:02:f6:b4:9f:71:4c:88:e2:b2:
37:53:34:ef:bf:15:d8:c5:6d:c4:a0:af:bf:fb:e3:
8a:03:8c:e1:91:89:1f:4c:7f:47:66:dd:9c:b6:25:
51:34:80:c4:db:96:80:af:b9:e3:c5:55:cb:82:73:
f8:f1:9f:64:a4:8e:c2:48:a1:64:05:ac:51:5a:49:
a1:77:f0:cd:ad:d3:1c:5f:d7:a7:49:4c:c4:2e:92:
f1:53:9a:d6:e0:72:5c:aa:1a:d1:c3:a9:17:97:a2:
32:a5:bf:ee:14:31:dd:1f:03:6f:cb:c5:47:f1:2a:
7b:39:44:f7:e3:b9:51:9e:a3:a0:3e:60:56:32:a8:
41:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F2:5E:AF:56:17:5B:69:10:CD:E8:A6:93:71:70:8D:73:65:BA:64
X509v3 Authority Key Identifier:
keyid:81:00:B2:5D:99:47:14:ED:A2:4A:A7:83:89:FB:63:69:50:5F:B6:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:57:f1:7f:74:2d:c4:93:6b:ff:88:6c:eb:4d:94:f3:04:5f:
c5:a8:a0:a3:ae:cc:70:69:5e:af:b2:6f:b3:f1:7b:a9:12:4c:
25:ab:9a:5f:9f:b7:0a:3d:af:6a:c2:48:17:c2:49:d8:6e:5c:
2f:e5:b9:6e:28:04:f7:e7:82:98:27:62:3b:79:12:7c:68:23:
f3:ae:53:9d:67:fe:b5:0c:c5:ee:4f:d3:d7:0d:b7:97:76:0e:
10:98:8f:e0:8c:2d:05:f5:42:bf:ce:5a:e0:b4:40:4e:27:4a:
1d:4a:b9:f2:4f:0e:c1:51:1e:1f:e2:4d:fc:8a:e6:9e:99:c7:
56:6c:3b:6b:9d:04:f8:f4:38:54:8f:f0:12:58:c6:e6:06:3e:
b9:1c:a7:5a:58:ba:4b:3a:36:21:46:85:91:08:c2:b6:02:43:
ab:75:9a:96:21:3e:35:32:7e:ed:54:00:b5:f4:ab:5f:a5:0e:
d1:27:49:85:55:42:81:ba:f3:23:48:81:59:0f:34:e7:b6:5b:
ed:50:aa:d2:79:05:08:01:ad:53:c6:90:b6:1f:2c:5e:29:96:
b9:96:5a:37:ed:fb:43:ed:9f:4b:20:cc:92:9e:f2:0b:91:3f:
c8:6d:1d:32:8d:a0:cb:57:74:5f:77:78:34:5a:4d:9d:82:ae:
e9:1d:c1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:40 2026 by rpki-client