
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
File: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft (raw, json)
Hash identifier: 1oIaCfSZ9raDtcXE7TCwyqfURUuHOdPGrWE9r8jDl9s=
Subject key identifier: 31:F4:6D:DE:5E:12:3C:3E:60:79:97:CF:D3:29:A2:0F:6B:5C:39:52
Authority key identifier: 71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95
Certificate issuer: /CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795
Certificate serial: 3F2AB4544F41FAE795538FC663AD1D8497CD61E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
Manifest number: 6C
Signing time: Mon 20 Jul 2026 12:57:34 +0000
Manifest this update: Mon 20 Jul 2026 12:52:34 +0000
Manifest next update: Tue 21 Jul 2026 14:22:34 +0000
Files and hashes: 1: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: rUHpYIR2vJnsoxcjoNwsrIMb/p49L2kYzJuwadosSIk=)
2: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl (hash: 3Eykte5W7/kY07CTYBgXlzx2TECztIo4wxjy25L8Wy0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl
rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 14:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:2a:b4:54:4f:41:fa:e7:95:53:8f:c6:63:ad:1d:84:97:cd:61:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795
Validity
Not Before: Jul 20 12:52:34 2026 GMT
Not After : Jul 21 14:22:34 2026 GMT
Subject: CN=31F46DDE5E123C3E607997CFD329A20F6B5C3952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:ff:d9:53:ef:ab:29:68:f2:e1:6f:7d:0d:
b2:68:e8:5d:8c:3b:bc:34:61:ca:0d:20:8e:6a:54:
50:8c:62:86:d3:2a:aa:2f:5c:79:af:b2:8e:c7:e8:
74:f4:c8:b3:47:f1:45:58:10:d5:77:60:3d:13:45:
28:4c:64:62:be:62:42:ba:42:5f:8d:fd:8b:ee:a9:
85:bf:1c:c2:3a:4f:82:13:92:64:8f:be:ed:7a:78:
89:21:e1:16:49:18:2a:59:a3:21:c1:73:54:11:5f:
63:f1:13:d8:da:c6:54:13:ce:54:ec:49:a1:ca:4f:
8d:4a:2b:85:86:44:38:c6:5f:7f:59:22:2e:34:96:
f4:85:7f:21:aa:cc:ad:53:74:61:17:1e:64:ce:5c:
55:07:d0:35:7d:a5:2e:a8:d3:b6:64:ee:15:ff:ad:
af:66:4d:c5:e5:b9:31:f0:21:61:5b:91:7d:b7:b7:
2f:b6:ad:e2:a9:dd:a7:75:7d:ee:ad:c9:e8:51:db:
2c:44:f9:08:00:fc:95:d0:7c:05:85:7b:7d:2a:7b:
96:a5:59:96:7a:4c:bc:19:5a:3c:53:14:ce:21:f4:
a0:6f:cc:9f:dd:06:74:01:c7:80:59:9e:ff:ab:4b:
f8:0a:9c:38:d2:64:81:35:72:61:65:ca:05:03:14:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F4:6D:DE:5E:12:3C:3E:60:79:97:CF:D3:29:A2:0F:6B:5C:39:52
X509v3 Authority Key Identifier:
keyid:71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ea:87:0d:59:53:5d:7c:c7:66:ab:cf:35:85:13:40:ab:ee:
71:0b:29:37:22:01:5b:eb:83:f1:8f:ea:e5:e0:2e:52:3b:e7:
64:87:fb:18:14:52:f2:62:37:2a:d8:c2:42:0d:26:4c:e5:a4:
dc:db:c9:50:4d:a6:d5:da:7a:90:5b:e4:8c:6c:48:fb:1e:46:
a6:b8:89:6e:39:4d:13:3f:a4:13:c2:d2:8e:72:f9:b9:b0:8f:
23:5b:55:7e:eb:0d:fb:9a:51:7f:47:e3:54:61:b3:4a:04:6f:
11:fd:db:ee:9b:79:d5:07:66:14:31:ff:8f:d8:a8:53:af:0c:
ab:ff:1f:d5:8c:ed:c3:01:f5:3d:35:be:7e:10:a3:c0:31:c2:
78:92:0f:7f:90:71:d6:6a:83:1f:2c:e9:01:52:6a:fa:cd:a0:
5f:6f:6b:4f:2f:86:22:9a:bc:b3:cb:b7:22:f4:53:b2:da:16:
ca:a2:c0:62:0c:f2:6c:82:6f:09:6f:d9:71:14:99:26:14:f3:
db:7d:c7:c6:82:7e:2c:e3:5d:3d:ea:0f:aa:28:22:31:a7:a9:
19:7a:82:fc:91:49:84:a5:0c:61:ca:bc:48:12:52:05:bf:2d:
f7:4f:e0:f9:c8:1b:b2:fd:4f:b3:f3:e2:cd:8a:4b:69:86:df:
8a:93:a2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:01:50 2026 by rpki-client