
$ rpki-client -vvf rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
File: D51AA8B3D72CDB71C90345B767919665E60A217F.mft (raw, json)
Hash identifier: bfPW6sVxy7jFGcg1giVIF7iD0Ir5i3HYBbsb0Y/UuDQ=
Subject key identifier: 13:55:23:B6:07:B9:12:85:FC:7A:EB:D3:FF:9C:2F:4A:7C:01:69:AA
Authority key identifier: D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F
Certificate issuer: /CN=D51AA8B3D72CDB71C90345B767919665E60A217F
Certificate serial: 028467EA3CA5E3DED8B7A36B61A130F56E9A6877
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 03:30:08 +0000
Manifest this update: Tue 21 Jul 2026 03:25:08 +0000
Manifest next update: Wed 22 Jul 2026 04:15:08 +0000
Files and hashes: 1: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: rfjdhFUeqRzlpu/a6IIMJJdIbxMUcj3gavb0NZINzaQ=)
2: D51AA8B3D72CDB71C90345B767919665E60A217F.crl (hash: e0sDIEf3uxJThoY0Bc2T9biQH2KEe+4/xUpGFml8pzo=)
3: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: qWXJBwwFjRlNPlzGu34yKlzyWtSJkvJR6tTW+DXklsI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl
rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:84:67:ea:3c:a5:e3:de:d8:b7:a3:6b:61:a1:30:f5:6e:9a:68:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D51AA8B3D72CDB71C90345B767919665E60A217F
Validity
Not Before: Jul 21 03:25:08 2026 GMT
Not After : Jul 22 04:15:08 2026 GMT
Subject: CN=135523B607B91285FC7AEBD3FF9C2F4A7C0169AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:69:62:78:4a:0c:c2:4d:7c:b5:a5:07:11:
ff:e0:ae:a0:af:26:f3:a8:a4:2f:1f:41:99:a6:39:
83:31:e0:74:58:59:a3:c1:6e:1c:b4:c3:46:2c:14:
5c:92:de:f7:8a:37:94:6f:dd:2e:bc:95:59:95:74:
09:21:c2:0a:05:fd:f3:89:31:42:e5:e1:fe:bb:14:
11:d0:1e:13:24:95:3a:5d:b2:97:b8:24:bc:6c:19:
9e:c1:e1:4d:22:c6:52:d1:8b:d0:5d:ec:88:ff:5a:
60:4b:d7:fc:64:e4:24:6d:b4:e4:0c:c5:ed:5a:fd:
57:c0:f6:66:ae:bd:53:09:b2:23:02:ec:d1:62:34:
b8:66:32:cc:d1:a7:17:77:e7:bb:df:e6:b7:9e:99:
ba:36:73:53:dd:da:f3:41:2e:78:88:4f:2a:d9:b2:
20:fd:69:24:12:5b:96:b6:aa:70:5c:e2:63:36:a4:
46:89:15:de:3a:16:d0:08:89:0d:18:d3:0e:11:a4:
7e:34:2f:35:12:da:ef:c9:90:34:40:d3:39:68:b1:
dc:ad:da:64:25:03:d0:a5:3a:28:af:b9:55:31:46:
97:a5:4d:2c:8e:7e:5f:3e:8a:4a:f9:66:6c:f6:2f:
00:bd:4a:72:68:6e:ce:7d:68:26:b4:73:43:28:f6:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:55:23:B6:07:B9:12:85:FC:7A:EB:D3:FF:9C:2F:4A:7C:01:69:AA
X509v3 Authority Key Identifier:
keyid:D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e7:18:61:28:7e:b0:34:ec:58:7b:0a:08:f9:33:dc:84:fa:
13:db:9b:f8:12:48:d0:cc:28:65:03:f2:73:3f:a5:7a:22:bf:
57:31:11:40:22:f0:3f:d6:e9:73:12:f0:9f:aa:84:d8:14:f1:
0a:55:d1:70:6e:27:14:68:c9:b8:6b:0c:9c:47:a5:ef:64:58:
61:7e:cb:71:59:37:b7:df:85:9d:10:8c:19:ec:1c:68:0d:6a:
39:93:19:cb:83:12:0d:1c:83:d2:da:fb:de:9d:26:34:6e:11:
83:07:9f:57:ee:f3:13:e0:c2:36:cc:b6:17:16:55:df:81:b1:
91:24:91:5b:a5:c3:98:21:e4:87:d6:42:03:ce:ee:5e:6e:59:
a0:f9:17:25:58:66:eb:4a:7e:7c:37:bc:37:64:16:10:0b:8e:
4c:b7:84:2c:51:4f:e1:0d:3e:82:bf:5d:f8:e3:e2:01:a7:8b:
09:dc:1a:4a:38:81:98:8a:32:d0:a4:91:b3:12:7b:7b:6b:c0:
cf:28:c0:58:ac:ea:a0:48:e4:d3:d6:0a:35:b0:e0:bc:dc:52:
23:6b:f2:62:3a:e1:bf:b5:6a:8c:32:64:7b:aa:dc:03:f4:fc:
9f:90:4f:52:5c:ea:72:63:aa:a1:27:53:45:cd:b2:d7:c3:33:
b8:11:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:51 2026 by rpki-client