
$ rpki-client -vvf rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft
File: 45E5895753396A59380E8B15A613362BDD0B9399.mft (raw, json)
Hash identifier: SIIvw394yroGUXaSP1Ou8sSMcxhxOeZD2hw0wmC+JZU=
Subject key identifier: 1E:A7:C3:12:EA:9D:A8:C9:FC:5F:66:32:AE:1F:97:9B:90:43:50:6E
Authority key identifier: 45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99
Certificate issuer: /CN=45E5895753396A59380E8B15A613362BDD0B9399
Certificate serial: 244758166BC2B3A652342ECE241FD80E84629750
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 03:14:50 +0000
Manifest this update: Tue 21 Jul 2026 03:09:50 +0000
Manifest next update: Wed 22 Jul 2026 05:10:50 +0000
Files and hashes: 1: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: apfoCrb1SRZGVQ94mZUP6Yq3PvFMs7dSvIUcNJlRoMg=)
2: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: KhIaiPcjWv7aKSlHmjk0jk/GmZyLW5p+ewjbZDKYFRM=)
3: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: 9vIrzXo0hOqXg/rk1f6nwh6INf+P7PQpW2N95A+iLj4=)
4: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: 150lIPhgbdhzp4Y24XpmsufR4h1DDzZZlk0gSQD8XZc=)
5: 45E5895753396A59380E8B15A613362BDD0B9399.crl (hash: TvAFwVyuRgzxbMf7WKsXqehtFuPQNoyGeC1r/o+hLVE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl
rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:47:58:16:6b:c2:b3:a6:52:34:2e:ce:24:1f:d8:0e:84:62:97:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45E5895753396A59380E8B15A613362BDD0B9399
Validity
Not Before: Jul 21 03:09:50 2026 GMT
Not After : Jul 22 05:10:50 2026 GMT
Subject: CN=1EA7C312EA9DA8C9FC5F6632AE1F979B9043506E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:00:26:20:e9:2b:4c:e0:1e:54:a6:27:6d:
a7:c8:06:6e:88:06:54:47:e5:bb:d0:68:b1:44:36:
d2:5e:b8:4b:b8:14:59:80:3c:44:9c:8b:bc:d3:6f:
66:73:4f:ce:e1:90:e0:eb:d5:b9:08:11:05:60:af:
db:7f:ed:d0:b0:a2:d6:18:ba:1f:40:b4:c8:85:ca:
ef:e5:6c:61:bc:88:b9:31:4f:37:bc:e8:ab:a6:6c:
d2:57:0e:ac:50:28:3f:7d:c9:af:aa:55:68:9f:63:
bf:00:1b:a9:1f:e2:b2:2e:21:bb:f4:41:33:d5:78:
37:99:a8:73:c5:39:c8:b7:99:e4:4f:11:5b:26:8f:
45:37:93:da:b3:28:30:0e:7e:ec:2e:dd:e8:a9:95:
15:fd:cd:fa:49:11:ff:4e:77:b5:a2:a2:ee:bc:89:
82:8d:0d:c0:13:d1:00:ed:de:ed:28:8f:49:09:20:
b5:07:ff:b2:cb:88:55:21:94:27:d2:9c:08:a9:09:
a2:55:3a:87:25:54:25:14:81:3f:ff:fe:8e:ce:05:
83:d9:f8:4d:0c:9d:2e:fe:2d:d3:06:83:d0:4a:31:
b7:5e:1e:b5:df:c7:bf:e6:f8:4d:75:ad:ae:4e:be:
cd:0f:8d:83:c5:d5:97:4e:cb:fb:cf:ac:60:4b:32:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A7:C3:12:EA:9D:A8:C9:FC:5F:66:32:AE:1F:97:9B:90:43:50:6E
X509v3 Authority Key Identifier:
keyid:45:E5:89:57:53:39:6A:59:38:0E:8B:15:A6:13:36:2B:DD:0B:93:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45E5895753396A59380E8B15A613362BDD0B9399.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/45E5895753396A59380E8B15A613362BDD0B9399.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:de:8d:b5:9e:9f:5f:2e:90:58:44:45:08:7d:87:49:a7:65:
61:6b:f3:fe:07:22:22:9d:07:59:76:61:9a:eb:38:35:ac:41:
88:40:4a:63:4c:92:e9:c7:3b:dd:b6:69:89:98:2e:d5:05:47:
c3:9c:61:a3:61:5b:53:82:50:26:a0:81:4d:52:f1:c6:ae:fc:
bc:ab:d6:10:34:67:68:31:20:b8:bf:db:20:a6:91:dd:c8:7a:
28:58:5e:bc:fd:db:aa:00:5f:08:b5:5e:09:15:b3:d8:f7:78:
fe:86:db:30:2a:8e:88:91:d6:a8:79:eb:87:35:b4:41:9e:8d:
3a:6c:16:d4:79:eb:be:99:23:f4:48:ac:98:5e:00:09:f5:0d:
65:4f:43:c1:ed:37:f4:d4:8d:1c:13:66:67:50:33:ed:a0:ac:
c1:06:b4:97:3e:d3:5c:33:31:d7:06:8a:e8:6b:8a:e9:d7:8b:
28:fd:af:14:ee:7f:cf:f2:76:51:41:ba:54:99:b8:0a:0b:7a:
c9:95:fc:6c:da:25:29:d3:29:0c:d0:61:e4:ad:54:b3:0a:71:
30:23:40:d1:b5:10:6f:54:b7:a0:c1:56:59:6c:36:cc:15:33:
f4:99:16:4f:73:21:4f:52:70:3b:ac:f3:18:79:b1:b6:6e:80:
a4:84:8d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:49 2026 by rpki-client