
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft
File: 97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft (raw, json)
Hash identifier: VWb8vAtz2ylaXPA8xrQVNwFv4m9yZszUnK2kKV0BUsM=
Subject key identifier: 1B:D3:17:98:8D:C9:03:70:32:D1:6C:B7:1B:25:3C:DF:C0:B3:7D:B0
Authority key identifier: 97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A
Certificate issuer: /CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A
Certificate serial: 677FEC4C89C5C19905D668876C748FE9756BA9F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 04:46:41 +0000
Manifest this update: Tue 21 Jul 2026 04:41:41 +0000
Manifest next update: Wed 22 Jul 2026 07:10:41 +0000
Files and hashes: 1: 97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl (hash: RppUn5M7Tyo6CkEm6clzvAQdbu9CiAAp/LW5hGTU+rM=)
2: 3130332e3137372e362e302f32332d3234203d3e20313437313430.roa (hash: sv7PvNJnnZ10opw+lXUbBT0PVWMEcNTxqWez029VNl0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl
rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:7f:ec:4c:89:c5:c1:99:05:d6:68:87:6c:74:8f:e9:75:6b:a9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A
Validity
Not Before: Jul 21 04:41:41 2026 GMT
Not After : Jul 22 07:10:41 2026 GMT
Subject: CN=1BD317988DC9037032D16CB71B253CDFC0B37DB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:aa:68:4e:14:42:92:bb:f7:e1:a4:12:1c:
13:0b:61:a1:71:35:b7:50:bb:e1:03:32:e3:54:6c:
a0:b3:f5:c4:42:b6:c9:89:3c:7d:c5:ed:fb:8d:05:
b0:db:f1:f6:10:01:33:8a:c1:5b:5d:b7:ac:c4:0e:
ce:49:c5:9d:5c:21:32:dd:e0:3e:20:82:a0:d1:bd:
e5:a5:7d:63:d0:f4:2d:95:db:e6:5b:43:0b:ea:a1:
47:81:25:66:e8:c8:e7:54:f5:7b:3f:3b:96:7f:ee:
1c:04:1d:99:de:8c:01:29:f0:43:95:7a:b3:ec:90:
90:df:13:37:f7:9f:bb:c3:19:90:d8:14:01:e0:c5:
d6:18:6d:9b:2f:e9:2a:6c:65:2f:74:22:08:88:01:
6d:59:94:e5:7f:52:65:63:0c:5b:fc:44:9d:c8:a1:
f7:e5:5c:79:48:7e:af:4e:39:b6:19:73:cc:14:71:
ca:81:5e:94:3d:40:ae:23:f4:99:a1:1b:93:f3:94:
3e:05:a9:e7:1e:77:de:7d:eb:b1:59:d9:5c:f1:aa:
bf:e1:ac:74:f8:85:aa:ed:5d:e3:64:07:3a:3c:fc:
ee:63:01:37:94:8b:8c:78:ce:62:e0:5a:3a:a9:79:
d2:14:68:54:24:20:9c:79:b0:23:fa:e5:59:53:98:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D3:17:98:8D:C9:03:70:32:D1:6C:B7:1B:25:3C:DF:C0:B3:7D:B0
X509v3 Authority Key Identifier:
keyid:97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:4e:23:07:4c:02:17:4e:6f:9c:be:18:c2:ba:1e:00:4e:1a:
83:79:3c:5e:24:a6:b9:d4:c6:3a:c1:a0:5e:a9:60:16:ee:55:
22:f2:11:1e:68:5a:df:7a:c0:fe:b1:1f:ab:f4:76:62:49:c2:
c9:11:8f:9f:b0:f3:9d:95:5a:a7:95:87:a2:47:2d:ed:69:4b:
f8:ac:4c:a3:76:17:c0:5b:94:81:3b:7d:5b:ef:92:7a:6d:05:
06:25:59:5b:46:0f:e1:db:5b:dd:e9:8a:3c:98:c9:3c:9d:fe:
62:ef:30:f3:1e:e8:c6:ea:56:82:c2:bd:ec:04:a3:6e:e5:dd:
d5:55:67:4a:63:73:2f:5a:27:2a:5a:de:fe:0d:e9:ef:48:ca:
ff:dc:9a:e1:3a:17:88:0f:4b:ad:21:ea:fa:2f:91:16:53:1f:
00:a6:10:84:c9:db:20:81:5c:86:46:8c:60:3b:63:52:4b:77:
26:19:d6:d1:56:8c:e2:4a:92:9a:c8:b7:3a:ea:5e:fa:36:26:
ca:16:85:4c:86:a0:b2:03:30:af:0c:f2:f5:3f:59:a4:12:7a:
c0:61:e4:02:d2:b8:9f:47:3f:c1:76:8e:a0:10:05:e9:27:34:
66:3e:90:b4:55:2f:ae:a6:d5:81:f2:b8:06:df:15:93:dc:fa:
3b:78:dc:d3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ3/sTInFwZkF1miHbHSP6XVrqfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdFQjJDNjYxQTVGNDU2RENFMkFFM0E3M0E2NEJDMURB
MEIwRDgxQTAeFw0yNjA3MjEwNDQxNDFaFw0yNjA3MjIwNzEwNDFaMDMxMTAvBgNV
BAMTKDFCRDMxNzk4OERDOTAzNzAzMkQxNkNCNzFCMjUzQ0RGQzBCMzdEQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkKpoThRCkrv34aQSHBMLYaFx
NbdQu+EDMuNUbKCz9cRCtsmJPH3F7fuNBbDb8fYQATOKwVtdt6zEDs5JxZ1cITLd
4D4ggqDRveWlfWPQ9C2V2+ZbQwvqoUeBJWboyOdU9Xs/O5Z/7hwEHZnejAEp8EOV
erPskJDfEzf3n7vDGZDYFAHgxdYYbZsv6SpsZS90IgiIAW1ZlOV/UmVjDFv8RJ3I
offlXHlIfq9OObYZc8wUccqBXpQ9QK4j9JmhG5PzlD4Fqeced95967FZ2Vzxqr/h
rHT4hartXeNkBzo8/O5jATeUi4x4zmLgWjqpedIUaFQkIJx5sCP65VlTmBs7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUG9MXmI3JA3Ay0Wy3GyU838CzfbAwHwYDVR0j
BBgwFoAUl+ssZhpfRW3OKuOnOmS8HaCw2BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2I3MWZjNmQtYWEzYi00ZWQ3LThmZWMtNzQyN2FhMDYxZjhlLzAvOTdFQjJDNjYx
QTVGNDU2RENFMkFFM0E3M0E2NEJDMURBMEIwRDgxQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85N0VCMkM2NjFBNUY0NTZEQ0UyQUUzQTczQTY0QkMxREEwQjBE
ODFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I3MWZjNmQtYWEzYi00ZWQ3LThm
ZWMtNzQyN2FhMDYxZjhlLzAvOTdFQjJDNjYxQTVGNDU2RENFMkFFM0E3M0E2NEJD
MURBMEIwRDgxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMlOIwdMAhdOb5y+GMK6HgBOGoN5PF4kprnU
xjrBoF6pYBbuVSLyER5oWt96wP6xH6v0dmJJwskRj5+w852VWqeVh6JHLe1pS/is
TKN2F8BblIE7fVvvknptBQYlWVtGD+HbW93pijyYyTyd/mLvMPMe6MbqVoLCvewE
o27l3dVVZ0pjcy9aJypa3v4N6e9Iyv/cmuE6F4gPS60h6vovkRZTHwCmEITJ2yCB
XIZGjGA7Y1JLdyYZ1tFWjOJKkprItzrqXvo2JsoWhUyGoLIDMK8M8vU/WaQSesBh
5ALSuJ9HP8F2jqAQBeknNGY+kLRVL66m1YHyuAbfFZPc+jt43NM=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:18:27 2026 by rpki-client