
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
File: C771ADE0100457DC61EB95A71BB4E63885DC542F.mft (raw, json)
Hash identifier: LyQoXetK48otkzBHQJFDQ04n2F+tRTSsixCXcSEEHR8=
Subject key identifier: 5C:EB:E7:ED:EC:49:DE:3C:1C:67:FE:35:7C:4B:54:49:F5:60:AE:60
Authority key identifier: C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F
Certificate issuer: /CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
Certificate serial: 59D5F2572E3E57FDE8C1158E4320BF1114741E04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 20:06:07 +0000
Manifest this update: Mon 20 Jul 2026 20:01:07 +0000
Manifest next update: Tue 21 Jul 2026 22:39:07 +0000
Files and hashes: 1: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: cnrnucshQjB1HR7ilM8foFskZiCRkLLcdgQGq/I0/j4=)
2: C771ADE0100457DC61EB95A71BB4E63885DC542F.crl (hash: NSVGHDr2HiG2MBHicuRCHsgN4akx2RDefFs5+pcgPpU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl
rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 22:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d5:f2:57:2e:3e:57:fd:e8:c1:15:8e:43:20:bf:11:14:74:1e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
Validity
Not Before: Jul 20 20:01:07 2026 GMT
Not After : Jul 21 22:39:07 2026 GMT
Subject: CN=5CEBE7EDEC49DE3C1C67FE357C4B5449F560AE60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:73:22:e3:3c:29:b5:86:e5:eb:b6:96:ca:
fb:42:92:f6:72:f7:95:0a:92:93:45:61:fc:da:8a:
1f:4b:59:e7:cb:f0:a5:01:09:f5:03:7c:57:00:8b:
7d:26:9d:20:1c:a5:d4:1d:09:49:60:4d:12:86:0f:
6e:c8:02:80:53:ce:8a:94:11:9d:30:7d:e9:3c:99:
38:53:02:af:bb:05:85:b2:78:c3:58:29:52:ce:ac:
ec:76:f6:8c:d0:ec:bc:ed:49:f2:48:b3:8f:70:fb:
c0:91:a0:ce:09:f3:e3:db:b5:e2:c1:ad:a5:68:98:
2a:28:47:f2:88:88:00:6d:aa:25:2d:3d:6c:61:c5:
54:9d:7a:05:5b:4b:89:43:3a:bf:60:14:1c:19:7e:
c3:e3:31:3f:0c:7c:fd:ea:73:f8:15:26:5e:ec:ea:
b3:25:d4:99:27:26:a6:c7:6f:c8:7c:40:f1:1c:a9:
48:f9:1b:18:fb:cd:ca:95:70:de:4e:2b:2f:c2:dd:
9a:27:3e:23:4a:7a:c7:b7:18:89:49:f1:c8:fe:c6:
20:f4:84:a5:44:03:1f:a2:55:a0:4a:bd:3e:55:b3:
f6:ca:dc:c2:93:e6:40:cd:10:06:82:87:2a:d3:7f:
65:df:a9:8a:61:9f:c3:c3:cf:6d:a6:fd:9d:22:e1:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EB:E7:ED:EC:49:DE:3C:1C:67:FE:35:7C:4B:54:49:F5:60:AE:60
X509v3 Authority Key Identifier:
keyid:C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:21:cb:96:b9:78:27:b7:3f:4b:8b:43:13:84:17:3f:41:6a:
d5:32:71:b3:35:74:6b:e5:2f:29:a5:99:ff:02:1b:5b:45:99:
01:a8:de:15:8e:cb:2f:38:1f:41:70:db:89:e6:a1:58:34:82:
ed:1f:20:96:e8:4e:04:b3:d8:4a:1c:79:6b:52:e0:00:5a:da:
ca:2c:44:52:49:b2:ae:9b:0c:02:53:9c:bb:0a:9a:02:3f:13:
cd:5b:68:e4:93:f8:21:c5:8a:da:77:20:65:3a:40:80:ab:f3:
9f:91:53:32:28:80:26:00:a2:ff:17:1c:be:88:19:5e:27:42:
fc:14:3e:f6:8c:c5:ef:32:e4:94:fa:b9:1a:06:1b:aa:a9:7e:
55:8d:ed:f4:aa:2c:a6:a1:5e:dd:4e:f3:8d:3a:5d:41:dc:33:
fb:f6:e9:9e:c0:8c:48:11:9e:d5:35:7e:24:57:f8:d7:07:91:
5b:47:ab:0b:8a:91:01:d1:9b:cd:e2:51:3a:84:04:f0:4c:17:
e8:f1:d6:c2:3d:e4:a6:33:8a:3c:7a:ee:dd:b2:7c:e3:38:b1:
75:cb:4f:e2:89:d2:d5:4c:71:3e:8d:2f:e5:b6:0e:41:d7:d3:
f6:c3:51:38:f1:5a:4d:a1:51:4f:6a:50:de:a5:08:d3:02:83:
17:e3:28:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:26:12 2026 by rpki-client