
$ rpki-client -vvf rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
File: E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft (raw, json)
Hash identifier: sctdhzSfidYgajuhUnFabL1fFxmz52wZgbVVgu4vrS4=
Subject key identifier: 20:66:3D:4E:8D:ED:7E:7E:9D:75:66:61:08:F9:8E:3D:B9:54:31:02
Authority key identifier: E1:31:77:CE:4E:5C:14:07:46:69:36:B4:19:3E:0B:11:E3:9A:A6:F8
Certificate issuer: /CN=E13177CE4E5C1407466936B4193E0B11E39AA6F8
Certificate serial: 44636C17922C7DB57D722E23FFE06A78A9E29ECD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 16:57:31 +0000
Manifest this update: Mon 20 Jul 2026 16:52:31 +0000
Manifest next update: Tue 21 Jul 2026 20:09:31 +0000
Files and hashes: 1: 3130332e3136362e3234302e302f32332d3233203d3e20313431393639.roa (hash: gGUcfX35JR6LWByHoWtXoWvCull7LxM91Z3jg16aSlo=)
2: 3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa (hash: zZxXDi8iy3KS/uupWW0nVAXq3kN53K+3nF+iOYvJuas=)
3: 3130332e3136362e3234312e302f32342d3234203d3e20313431393639.roa (hash: HkWboPR/l28Qd/gjZFN0EmMYcGZiEVTHPsAa19NTjWI=)
4: E13177CE4E5C1407466936B4193E0B11E39AA6F8.crl (hash: HUPRaVPnOsFCc4jXVjmiOC9ktFwO7KiuNEckkShpGPM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.crl
rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 20:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:63:6c:17:92:2c:7d:b5:7d:72:2e:23:ff:e0:6a:78:a9:e2:9e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E13177CE4E5C1407466936B4193E0B11E39AA6F8
Validity
Not Before: Jul 20 16:52:31 2026 GMT
Not After : Jul 21 20:09:31 2026 GMT
Subject: CN=20663D4E8DED7E7E9D75666108F98E3DB9543102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:07:8c:35:26:5a:0a:f3:09:af:e6:af:b0:
cd:df:5b:b5:60:b0:29:66:3c:a6:7d:cf:96:6a:d5:
8e:b8:6e:a0:50:9e:24:1a:c7:40:96:56:61:d2:38:
aa:02:50:29:e7:54:5a:be:7c:d2:1f:64:8e:8f:ea:
1c:c7:51:54:1c:a8:cc:5d:6d:54:df:60:ae:13:ad:
ec:d4:48:ab:93:e6:2e:76:fb:fb:6c:39:e1:4b:d3:
cd:8d:7e:78:3e:1d:4e:7b:10:b5:c4:ca:6f:aa:7c:
a5:ad:f2:f5:01:5a:a2:af:4f:04:04:b5:dd:88:79:
d8:44:40:2e:ed:30:cf:1d:49:e6:02:67:c0:c4:55:
8f:48:e1:99:d0:59:34:44:a6:0e:23:2a:2a:a4:a7:
79:fc:f2:fe:f2:c7:12:a4:a0:58:fa:8c:f3:e8:dc:
16:80:43:72:71:20:16:3c:66:30:7e:07:46:5b:2d:
c1:16:db:fe:81:f2:b3:45:04:f5:ae:c1:7c:fa:2c:
f6:03:7c:4b:71:bd:17:39:57:29:a1:6f:69:80:3b:
d9:75:d7:cb:b6:54:7e:e2:35:e0:34:e7:89:9e:17:
08:a9:d9:d3:74:08:12:95:a1:d5:75:62:a1:d4:a5:
23:98:b6:66:b2:6a:9d:a1:f0:56:2a:dc:f3:8f:13:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:3D:4E:8D:ED:7E:7E:9D:75:66:61:08:F9:8E:3D:B9:54:31:02
X509v3 Authority Key Identifier:
keyid:E1:31:77:CE:4E:5C:14:07:46:69:36:B4:19:3E:0B:11:E3:9A:A6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:82:50:d6:47:b8:9a:d7:61:b1:0f:23:4e:37:1a:9c:96:69:
67:fe:b6:56:1e:7b:75:03:23:32:97:1f:d6:4b:c0:dd:8b:fb:
1a:90:4b:e7:e2:a2:9f:6f:1f:31:3b:4b:9c:22:5f:54:46:3c:
bf:99:0b:87:14:94:0c:91:3f:05:ca:da:16:cd:ce:6f:09:56:
5d:50:ab:87:74:43:bd:9e:be:77:14:f3:52:07:37:88:92:2a:
7f:2a:68:0e:f1:1a:d7:76:7d:4f:d8:ac:f0:51:ba:26:f1:d1:
98:68:95:1c:56:ea:79:cf:01:f7:27:3d:cb:c2:24:ea:d9:3c:
ef:1f:42:d4:d7:3b:f1:c3:77:c0:86:80:06:17:df:1a:c3:70:
5e:68:29:65:62:35:60:04:77:0d:ae:11:eb:f9:74:97:3e:51:
8e:38:d9:ab:9f:c0:ed:b1:7a:83:72:da:3e:2e:b4:f9:d7:c3:
0c:af:0f:a4:e4:4d:10:30:1e:ce:62:c4:7f:d3:0a:9d:2c:93:
72:48:42:fe:c0:63:55:42:a7:fe:87:4b:35:3e:ad:73:55:96:
5d:90:56:b7:70:15:93:29:84:ab:86:69:f7:d0:11:b6:02:93:
a4:3c:35:5e:87:77:8b:c4:0e:4b:75:d3:2f:36:b8:1a:ea:2a:
18:4b:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:47:17 2026 by rpki-client