
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
File: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft (raw, json)
Hash identifier: KhwABfAFZ4c5mrKbh+BdHyznctPJ+r/y/LFofMhCV9k=
Subject key identifier: 62:D9:BB:7F:0A:DC:4D:AB:17:6F:72:CD:3B:88:E8:57:16:EC:40:E6
Authority key identifier: 81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B
Certificate issuer: /CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B
Certificate serial: 1854F3E6820328C34D99A8655F0A17748FBC01A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 03:30:14 +0000
Manifest this update: Tue 21 Jul 2026 03:25:14 +0000
Manifest next update: Wed 22 Jul 2026 05:12:14 +0000
Files and hashes: 1: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: S09DylQ/yldBJCxeAdZuhd1EyaS2Xybcb8te/eWM2dM=)
2: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: +rTucgGLiY8uqL8eF3DTMn/pET3ZcxtiVlAUU6weN/o=)
3: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl (hash: tM9fxMqLo866yqmLrDP5en6ImsOvehkTCeIHfDyBLNM=)
4: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: 33Yh92al19b28Gnrtu4qIdUOBoZECAqIchLAQkEaJ/I=)
5: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: C4VhfRzKoT9ksZvdL8CPzP9K+3FYQAaDgMeeFvQaFx4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl
rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:54:f3:e6:82:03:28:c3:4d:99:a8:65:5f:0a:17:74:8f:bc:01:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B
Validity
Not Before: Jul 21 03:25:14 2026 GMT
Not After : Jul 22 05:12:14 2026 GMT
Subject: CN=62D9BB7F0ADC4DAB176F72CD3B88E85716EC40E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:77:e6:f0:21:d3:a8:e0:88:8b:d4:6e:ca:
b9:7e:69:12:f1:40:f0:b9:19:3c:85:24:01:13:3d:
2f:b4:7c:8d:09:f2:c5:a2:90:96:be:c4:31:46:ce:
38:bd:13:96:06:52:b4:57:6d:01:d0:5c:68:ee:5e:
14:04:48:06:61:b6:5f:6e:42:75:0f:61:67:8d:e6:
2e:23:23:58:51:11:ee:c6:1b:ef:8a:9c:2b:91:30:
31:60:bd:31:ba:a8:fa:fc:2f:72:79:af:50:8d:85:
d7:1e:b7:f0:c1:53:1d:9d:d7:06:b9:52:ef:b4:7b:
a9:82:c9:52:75:87:15:4a:41:c5:21:ea:1c:bb:9e:
82:70:ca:f8:18:80:09:43:bd:b6:9f:ff:9c:d7:8f:
42:48:58:cf:ca:30:3d:08:68:1c:f9:c0:19:07:bb:
e2:7d:5f:91:38:d1:89:d3:10:48:29:8e:74:f6:47:
41:15:51:66:75:dd:b6:4d:54:54:9f:d3:50:cd:16:
a8:cc:bf:95:15:13:d2:3c:b0:86:b1:74:10:c8:41:
6e:a2:f1:17:6e:26:2e:a5:3f:1a:a7:65:f7:a2:71:
d0:b6:96:bf:60:05:48:fa:f3:29:76:9b:87:b1:0a:
1c:06:ae:a1:d1:b5:fa:66:52:e1:b5:22:1d:84:9b:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D9:BB:7F:0A:DC:4D:AB:17:6F:72:CD:3B:88:E8:57:16:EC:40:E6
X509v3 Authority Key Identifier:
keyid:81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cb:06:0f:54:dc:36:d5:ee:f6:95:a0:a0:b4:bc:e6:77:5c:
b1:1c:a2:d8:a4:3d:02:6f:31:7f:53:14:5d:b3:ff:c2:e4:9e:
53:08:49:fa:5d:d6:93:c3:cd:34:05:d4:1a:12:65:3a:4d:40:
5c:61:f2:3c:b7:c9:4d:92:22:9f:1e:db:1a:80:15:2d:e8:58:
90:07:01:b2:0f:84:dc:57:d5:cc:34:90:d8:7c:b7:98:0e:e3:
44:de:4e:11:ec:86:ef:76:30:d3:9c:3d:90:a3:bf:70:b4:cf:
c6:4f:a5:b9:e2:8e:2a:ed:c0:78:b3:7e:ef:72:14:18:b4:a1:
94:f9:34:a5:45:86:b8:02:c6:21:ab:6f:b9:e3:15:d0:ff:44:
a9:eb:94:f8:cf:1f:1d:22:ed:96:3c:90:c9:79:90:42:8f:42:
e9:5b:29:51:e4:08:f5:30:c7:bc:a7:5b:ed:3d:f7:68:e6:84:
be:83:22:03:5f:e9:f3:d5:d6:ac:c0:91:95:16:e9:8d:0a:60:
d9:c8:24:10:6f:b5:f2:6f:7c:ef:4b:af:a4:85:2c:cf:36:67:
c3:93:34:92:ff:55:94:e9:2b:c9:5e:54:82:37:6e:df:8b:b2:
ac:ae:15:68:30:84:68:1c:57:b1:f2:aa:e1:74:fb:93:34:c6:
3b:10:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:57:33 2026 by rpki-client