
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
File: 149E265C01ED66DA98905D22913EE8E5950357C5.mft (raw, json)
Hash identifier: F7kziOgj16XCYnlIi6XDMYf7CnMPIzu+ScsjXgAdLug=
Subject key identifier: 6C:9E:02:34:1B:DB:77:46:23:08:65:3E:A0:1A:B8:85:EC:02:48:E7
Authority key identifier: 14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5
Certificate issuer: /CN=149E265C01ED66DA98905D22913EE8E5950357C5
Certificate serial: 577AAF2F431147D0CDD7E3B6D88A1915628C956E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 20:16:17 +0000
Manifest this update: Mon 20 Jul 2026 20:11:17 +0000
Manifest next update: Tue 21 Jul 2026 21:52:17 +0000
Files and hashes: 1: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: 2go2VsHnKk8a4v5C9iDrB1c2z6BX7uzmEdbp34kt9Ig=)
2: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: o6su7IMCtejCKrMWVaKfnnGbeizQl5tOylIJ73OtfwA=)
3: 149E265C01ED66DA98905D22913EE8E5950357C5.crl (hash: sOcuFG+mffo/i7m58YHbS8zi5oCTF6x9udXaQ87fT9c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl
rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 21:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:7a:af:2f:43:11:47:d0:cd:d7:e3:b6:d8:8a:19:15:62:8c:95:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149E265C01ED66DA98905D22913EE8E5950357C5
Validity
Not Before: Jul 20 20:11:17 2026 GMT
Not After : Jul 21 21:52:17 2026 GMT
Subject: CN=6C9E02341BDB77462308653EA01AB885EC0248E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a7:74:0f:f1:a1:85:69:57:c7:4f:7d:c2:2b:
53:53:26:ea:bc:cc:27:46:ca:2a:75:7c:45:1a:bb:
5b:00:d2:a5:e0:04:c1:f4:f6:28:d6:bb:26:b5:78:
99:c4:a3:f9:4f:fe:6d:a9:e3:7e:2c:a6:63:7a:37:
00:a7:f6:2f:c9:ae:9e:ea:7e:8d:c9:59:1c:fb:1b:
ff:51:af:d0:dc:2f:5b:5e:c1:c4:9d:9e:c3:b6:84:
ae:f2:95:f3:38:ef:61:e7:42:16:61:2a:fd:6d:01:
e6:4a:21:a7:7c:30:22:c6:a1:d5:ba:92:32:06:af:
02:69:60:51:01:eb:fe:45:c1:c3:0e:2f:89:90:c0:
4f:11:c6:90:d5:e1:29:97:4a:eb:af:23:47:3a:a3:
f4:fd:4f:5b:ab:22:7e:7e:0b:9c:7d:24:c5:69:8d:
c7:b9:8c:0b:e9:4c:5c:74:e2:99:0b:23:6d:73:94:
f0:ef:5b:38:eb:e2:34:a0:9d:f3:75:63:30:4c:81:
22:29:dd:f7:6d:f7:02:72:69:25:62:07:62:fd:54:
22:9f:06:3f:99:fc:bb:90:3d:4c:5b:6b:ff:76:93:
9b:18:98:13:8a:67:67:f8:39:c8:b1:67:8f:09:a4:
31:6a:5d:a2:2a:05:18:83:bc:de:22:02:ad:8f:18:
df:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9E:02:34:1B:DB:77:46:23:08:65:3E:A0:1A:B8:85:EC:02:48:E7
X509v3 Authority Key Identifier:
keyid:14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:56:6c:ce:5b:f0:58:66:f9:7a:26:32:8a:a8:8f:fc:19:33:
2e:60:33:35:c1:15:63:74:61:5b:e8:aa:eb:aa:fd:2e:a7:fe:
54:4d:35:f5:ff:01:a5:f1:5d:48:72:3a:32:aa:22:43:a0:d5:
f2:6f:8c:d1:8d:f0:50:d5:68:60:1e:f6:cc:e8:9c:7e:6b:d2:
59:a4:b6:45:00:d8:1b:11:2d:63:3e:95:1e:9f:90:4e:b5:1f:
f6:50:f1:22:7c:50:e5:38:93:5b:f8:6e:0b:18:c7:8a:94:1e:
fe:78:77:51:6c:a8:f1:84:de:57:35:f5:7b:a2:7b:a2:b0:c2:
51:de:87:d6:d5:04:80:62:a6:2d:e1:e7:fa:90:06:0b:3d:dc:
12:05:d7:3f:af:33:35:7e:43:a9:2d:d0:6a:61:e7:18:de:65:
5c:7b:dc:6d:64:2c:75:49:d6:ba:a1:e5:2f:90:58:47:77:37:
f7:3e:10:5d:20:e6:30:6d:e4:0a:9b:17:49:ea:40:f4:43:4e:
e3:7b:01:2c:a4:a9:76:3f:b6:62:47:b4:39:40:7f:64:72:8a:
f0:a8:08:fc:8f:87:35:ea:0d:04:5f:22:ce:97:17:96:3f:1f:
16:16:aa:79:72:3c:76:78:ba:ae:91:31:8a:a6:7c:f0:59:1d:
0c:59:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:06:12 2026 by rpki-client