
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft
File: 096782C6E108EAAEE59692E8A1E468AA698658F3.mft (raw, json)
Hash identifier: +fUjLFvHqA9We6HkMorHpNSiM1cqDFky1YYfy9FgJv4=
Subject key identifier: 57:3D:3C:21:65:05:69:97:77:C0:24:D5:E8:A1:B6:D7:CA:CC:35:04
Authority key identifier: 09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3
Certificate issuer: /CN=096782C6E108EAAEE59692E8A1E468AA698658F3
Certificate serial: 05CE511AEB89B96F15F7FC257E54FCE24D646676
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 02:33:58 +0000
Manifest this update: Tue 21 Jul 2026 02:28:58 +0000
Manifest next update: Wed 22 Jul 2026 04:50:58 +0000
Files and hashes: 1: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: 2fUOKnvs8nbAYX5IeKT2gpYQH5FYCwB7JlXdvrKSoYU=)
2: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: tMpre+MZxLR5ON6NNmXKYRn2JHOCOghwsK548yy7sUU=)
3: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: MoX5ilaIoQNT0YRgbynks7+fFHyOxX0urPfftQqHjU8=)
4: 096782C6E108EAAEE59692E8A1E468AA698658F3.crl (hash: 8zgvNchJu6MvqtZPhSUy90IwOpUTGVjl30fRa/i+MEI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl
rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ce:51:1a:eb:89:b9:6f:15:f7:fc:25:7e:54:fc:e2:4d:64:66:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096782C6E108EAAEE59692E8A1E468AA698658F3
Validity
Not Before: Jul 21 02:28:58 2026 GMT
Not After : Jul 22 04:50:58 2026 GMT
Subject: CN=573D3C216505699777C024D5E8A1B6D7CACC3504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:f9:cd:a4:c4:e4:a3:f8:9d:c2:72:9c:f1:
cb:86:c6:3f:df:32:cf:30:02:d1:3d:31:cb:59:b3:
f7:a4:9b:5b:89:3e:ab:5d:51:30:14:4a:23:48:41:
9b:17:d8:0b:ca:aa:c3:d0:d4:16:c0:2c:47:8c:5c:
ca:dc:ce:ac:c7:04:11:61:d2:ed:6c:6b:d6:6b:0d:
c1:c2:38:53:48:b4:06:35:1c:9d:03:fb:af:33:69:
ec:50:36:e4:10:d8:65:a5:8d:06:7a:00:1d:ba:7e:
c1:da:40:77:06:39:5e:bf:b5:a4:bc:50:c1:87:97:
41:81:f5:9d:61:e6:68:7f:cb:7c:08:ff:10:90:41:
7c:b8:e1:26:4f:a4:92:6b:c0:f0:e6:87:7b:41:4c:
59:08:7d:fd:9f:54:ae:73:b3:af:ea:77:44:ec:e7:
7e:31:67:6b:0b:6b:c5:7a:91:e8:03:ba:ae:eb:51:
ae:89:dd:1f:60:3b:3a:f5:c1:9e:63:74:9c:7b:a4:
d3:be:5d:8e:e2:51:06:dc:84:63:59:e9:e7:a7:4e:
76:dc:51:f6:87:19:f6:32:b5:45:4b:c8:26:01:47:
86:19:c1:af:f6:ec:71:4b:3b:ad:df:64:08:09:99:
99:d9:05:15:0a:5e:f6:91:5d:dd:73:c6:6e:1e:44:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3D:3C:21:65:05:69:97:77:C0:24:D5:E8:A1:B6:D7:CA:CC:35:04
X509v3 Authority Key Identifier:
keyid:09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:78:d3:7e:8a:d2:e5:d8:f4:42:db:aa:de:7d:61:ab:99:ce:
80:0c:42:6b:3e:fc:b0:08:a5:4f:16:cf:af:64:9c:c0:40:b6:
a5:21:6e:e0:cd:22:d5:13:de:f1:0d:05:7f:e5:4b:84:d8:4d:
8d:0f:9b:17:ba:fa:06:da:5d:74:3b:e4:9f:f8:27:c4:19:ae:
34:0d:16:77:4f:e4:75:23:cc:57:d5:3e:73:d8:85:cf:98:a1:
7e:e5:93:60:12:60:db:2c:dd:ac:5d:51:b7:07:68:be:b8:86:
42:51:d2:19:22:71:77:f5:61:b1:75:4a:87:f7:a3:d6:84:42:
d1:8b:1c:1c:df:b4:bf:08:79:04:f6:7c:5d:da:6e:06:f4:5b:
42:0b:68:fe:22:d5:2d:01:b8:3c:a9:0a:56:92:0e:24:64:8b:
65:e4:04:40:34:2d:0e:9f:96:79:b4:07:24:a7:73:90:81:01:
f1:82:3f:d7:e8:74:e7:26:1f:09:13:cf:3a:2d:36:e6:13:85:
79:8c:30:e0:93:1f:1b:78:8c:e9:54:de:6d:8e:6d:88:38:73:
a6:59:36:dd:97:f1:a7:f9:97:f8:a3:a6:d3:d5:22:dd:05:ba:
20:94:66:25:b9:f8:18:1a:47:5d:dd:d4:55:7f:f0:4d:28:3b:
99:0f:fc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:25:28 2026 by rpki-client