
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft
File: C687463B31D1E298020BCE05C39C8B4C428C4D37.mft (raw, json)
Hash identifier: I6IhhB2DtlL9AIhSgNFWE8i8wl4kM/IpSMlhvsWzFNU=
Subject key identifier: 84:5A:F2:C6:FC:7A:9B:D3:C1:C2:18:62:FB:31:A6:D6:50:DA:1B:6C
Authority key identifier: C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37
Certificate issuer: /CN=C687463B31D1E298020BCE05C39C8B4C428C4D37
Certificate serial: 2E43B486E468FCFE68CB4DF53F992F5B5BB97CF2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 02:49:13 +0000
Manifest this update: Tue 21 Jul 2026 02:44:13 +0000
Manifest next update: Wed 22 Jul 2026 04:15:13 +0000
Files and hashes: 1: C687463B31D1E298020BCE05C39C8B4C428C4D37.crl (hash: cxh+QRj7a1bsR8BuwCbXaZYFh1gX0kaWmU1F5jyUC9k=)
2: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: FMD2KI8vXpC0oPiEKe8NJdG3T8DkuTzlFnyK8zKEONk=)
3: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: YAhRb5MLLPBq7GLmsdwukjSGrR09NAZjb7/Q0IbDPGs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl
rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:43:b4:86:e4:68:fc:fe:68:cb:4d:f5:3f:99:2f:5b:5b:b9:7c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C687463B31D1E298020BCE05C39C8B4C428C4D37
Validity
Not Before: Jul 21 02:44:13 2026 GMT
Not After : Jul 22 04:15:13 2026 GMT
Subject: CN=845AF2C6FC7A9BD3C1C21862FB31A6D650DA1B6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:5d:12:79:5e:7d:d0:15:6c:13:5f:c7:b8:
75:5c:b2:53:26:b7:12:dc:67:c1:39:0f:9d:ce:4e:
61:dc:77:92:a7:b3:5c:7d:f3:75:ad:f1:e6:8b:33:
69:81:a3:79:9f:74:0c:23:48:41:2f:1a:71:7e:19:
40:3f:33:c9:bd:0f:f8:f2:8c:13:2b:5a:0c:f7:82:
f0:bb:53:a2:f7:4a:ea:a2:64:78:11:66:a0:49:35:
eb:aa:a8:23:0e:65:5c:1b:5f:0b:3b:90:e7:90:37:
1d:2a:ba:89:6a:de:5c:1d:90:c9:07:25:af:79:65:
ca:1f:0a:47:b1:f0:07:c2:fd:7e:e5:0e:79:0b:34:
e2:33:17:99:85:f3:3b:23:62:e7:34:6e:4c:65:e2:
63:77:63:54:ca:95:80:88:f7:04:04:0b:13:73:c0:
00:1c:e2:37:c5:f6:55:d5:e6:c9:04:c9:23:ff:4a:
96:27:b4:9e:54:3d:75:69:01:f9:05:08:4d:66:a5:
e3:0f:1d:ae:04:65:75:9b:d7:23:4e:13:3b:99:26:
06:0c:43:1f:55:75:95:96:3a:51:45:c2:6b:80:9e:
84:7a:d6:83:51:0c:67:d5:8c:a3:ad:6d:33:93:d6:
ae:76:45:4b:07:31:d6:69:fd:3d:e3:f0:5f:65:f2:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5A:F2:C6:FC:7A:9B:D3:C1:C2:18:62:FB:31:A6:D6:50:DA:1B:6C
X509v3 Authority Key Identifier:
keyid:C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b2:0d:7d:48:81:0e:e7:2f:ae:5c:a9:d0:d5:f0:40:77:60:
ce:cc:d2:a9:7d:42:1f:6a:80:ed:46:c1:ec:74:b5:82:81:71:
f5:73:9e:dc:11:59:c3:88:b6:1a:88:56:8b:5d:01:de:c6:32:
16:92:4b:9b:72:7e:08:83:c2:d0:40:87:49:23:99:73:90:9d:
7f:07:a1:af:1c:00:9b:a0:ed:2a:3a:42:04:0e:06:76:11:51:
18:99:ba:30:31:ed:77:75:62:17:2f:4c:fa:e3:b4:84:00:8e:
80:9b:f8:06:f8:4e:c2:5b:58:3a:af:a4:eb:55:5d:fd:10:a7:
cb:9d:d4:32:87:9d:92:70:1e:a4:54:23:4a:98:67:6c:ab:aa:
74:82:69:09:e3:b1:ea:88:bf:81:92:70:65:47:15:8e:db:5c:
4c:9a:8b:94:c5:c3:fb:d5:02:74:3d:72:c9:bd:03:1e:d0:ec:
81:71:01:3a:0d:80:98:c9:d6:89:4f:7c:ce:ed:1b:37:53:f4:
7a:18:b4:ff:12:50:5c:6d:01:a3:81:b9:ae:24:d9:72:3d:d4:
c8:0f:53:48:f2:8b:12:97:8f:19:4a:e5:7f:7e:e1:e1:88:93:
af:88:e5:aa:8a:96:41:e3:b3:9f:cc:72:8f:37:fa:c2:08:57:
c9:42:ee:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULkO0huRo/P5oy031P5kvW1u5fPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0
MjhDNEQzNzAeFw0yNjA3MjEwMjQ0MTNaFw0yNjA3MjIwNDE1MTNaMDMxMTAvBgNV
BAMTKDg0NUFGMkM2RkM3QTlCRDNDMUMyMTg2MkZCMzFBNkQ2NTBEQTFCNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/l0SeV590BVsE1/HuHVcslMm
txLcZ8E5D53OTmHcd5Kns1x983Wt8eaLM2mBo3mfdAwjSEEvGnF+GUA/M8m9D/jy
jBMrWgz3gvC7U6L3SuqiZHgRZqBJNeuqqCMOZVwbXws7kOeQNx0quolq3lwdkMkH
Ja95ZcofCkex8AfC/X7lDnkLNOIzF5mF8zsjYuc0bkxl4mN3Y1TKlYCI9wQECxNz
wAAc4jfF9lXV5skEySP/SpYntJ5UPXVpAfkFCE1mpeMPHa4EZXWb1yNOEzuZJgYM
Qx9VdZWWOlFFwmuAnoR61oNRDGfVjKOtbTOT1q52RUsHMdZp/T3j8F9l8tjfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhFryxvx6m9PBwhhi+zGm1lDaG2wwHwYDVR0j
BBgwFoAUxodGOzHR4pgCC84Fw5yLTEKMTTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzZjMDAzNzYtMzM1MS00ZmEzLTk3ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0Iz
MUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0MjhDNEQzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNjg3NDYzQjMxRDFFMjk4MDIwQkNFMDVDMzlDOEI0QzQyOEM0
RDM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZjMDAzNzYtMzM1MS00ZmEzLTk3
ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhC
NEM0MjhDNEQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEuyDX1IgQ7nL65cqdDV8EB3YM7M0ql9Qh9q
gO1Gwex0tYKBcfVzntwRWcOIthqIVotdAd7GMhaSS5tyfgiDwtBAh0kjmXOQnX8H
oa8cAJug7So6QgQOBnYRURiZujAx7Xd1YhcvTPrjtIQAjoCb+Ab4TsJbWDqvpOtV
Xf0Qp8ud1DKHnZJwHqRUI0qYZ2yrqnSCaQnjseqIv4GScGVHFY7bXEyai5TFw/vV
AnQ9csm9Ax7Q7IFxAToNgJjJ1olPfM7tGzdT9HoYtP8SUFxtAaOBua4k2XI91MgP
U0jyixKXjxlK5X9+4eGIk6+I5aqKlkHjs5/Mco83+sIIV8lC7iI=
-----END CERTIFICATE-----
Generated at Tue Jul 21 07:07:55 2026 by rpki-client