
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft
File: 802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft (raw, json)
Hash identifier: XACovc16YlDiuvI+YCJqnwidbvGhj6SsLm84UJZuf8A=
Subject key identifier: 38:8E:E3:AB:AC:80:25:19:3F:14:8C:F0:50:A4:C1:A8:E9:73:73:D3
Authority key identifier: 80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55
Certificate issuer: /CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55
Certificate serial: 6EC1BA386F76209DDDCEA8D97D36A64106E2B740
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 21:17:32 +0000
Manifest this update: Mon 20 Jul 2026 21:12:32 +0000
Manifest next update: Wed 22 Jul 2026 00:58:32 +0000
Files and hashes: 1: 802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl (hash: aInIUNSyG08zgkZObwn4cdvH3ZKxv1JOTRs0RvF4FDc=)
2: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: kPZOXT2GwEKlfeP/fQyv701xiJsSoJM2RbBmmUbPZZ8=)
3: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: gtZNev9cMMORIviikpj/urAy+yvYIWDnCmncjDmI/0s=)
4: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: qQsnDUNPeHXu+DNiw4SOcpK8StEWum36MYHLhy1M0Kc=)
5: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: dfrPktjrSxat3OJSIEiclXrWQZl7b22xPg7tyk7/iXg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl
rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 00:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c1:ba:38:6f:76:20:9d:dd:ce:a8:d9:7d:36:a6:41:06:e2:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55
Validity
Not Before: Jul 20 21:12:32 2026 GMT
Not After : Jul 22 00:58:32 2026 GMT
Subject: CN=388EE3ABAC8025193F148CF050A4C1A8E97373D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5d:99:4e:0d:50:e7:9c:6a:09:47:6d:7e:e1:
6e:0c:03:38:d9:d5:ac:84:47:33:33:09:48:fc:dc:
c8:b8:d4:aa:d0:14:e2:b7:ac:f2:4e:1a:d7:8c:cb:
c1:67:00:fd:b0:fb:af:57:84:62:0c:86:d3:ca:44:
b5:82:11:63:2f:b8:96:59:84:90:88:7a:5d:5c:90:
a9:89:39:ad:06:b8:8f:5f:d1:e4:77:2a:92:42:dd:
da:20:73:ab:ee:33:9d:31:d8:75:22:e1:39:e7:40:
96:f3:a3:4d:d8:18:44:fe:ba:c5:73:95:22:39:db:
97:3e:e9:03:a4:e4:8d:67:f4:40:18:cd:77:e5:51:
5f:80:aa:82:f9:1e:a2:cc:1e:26:73:2d:53:ce:b1:
42:aa:3a:10:1e:7c:ba:07:21:0d:4d:d6:15:95:9d:
01:f3:ae:3a:17:df:7b:25:b2:2c:bc:0c:d5:b7:1b:
0b:7a:0a:d5:87:1b:39:53:83:0a:9f:d9:55:cb:79:
83:6c:1a:43:c8:da:41:3b:87:62:4d:4d:32:7e:76:
a9:b5:d2:f3:05:75:6f:d8:28:08:4f:fd:f2:48:d0:
84:09:91:1e:28:2b:1f:11:90:36:a8:d5:03:be:bf:
25:d0:d5:43:13:b2:1d:c9:cd:23:3e:53:3e:a0:6e:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8E:E3:AB:AC:80:25:19:3F:14:8C:F0:50:A4:C1:A8:E9:73:73:D3
X509v3 Authority Key Identifier:
keyid:80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ef:c4:58:c5:5a:2e:ea:1f:05:fd:75:1a:4e:1b:b8:e8:42:
37:9b:d6:1f:fd:69:b4:30:c1:53:3d:46:25:98:d7:e3:b2:2d:
55:ba:9c:55:e7:fe:45:77:eb:b6:7d:9a:13:01:7c:5d:1f:ea:
42:89:18:ec:18:99:04:ab:61:be:8d:92:aa:6a:8d:62:79:1f:
bd:8d:a7:57:ae:09:38:5c:97:84:3c:ee:46:41:30:58:26:df:
f8:34:44:be:d5:59:36:18:f6:d9:0b:b7:b9:94:95:df:4a:d8:
f2:d4:bb:ca:03:fb:c7:ae:a3:31:67:9f:6a:01:8a:aa:44:e8:
26:10:37:31:c4:d7:1c:a0:f9:c6:57:14:65:82:0b:3c:97:1f:
0e:88:36:6c:41:e3:a3:25:c9:f7:a0:3b:9f:fb:cf:d4:a5:cd:
4f:5d:24:54:5d:77:6f:ca:03:52:fb:9a:a7:ba:56:a4:f1:5b:
96:be:dd:fb:f1:f9:c4:78:28:e7:4c:c5:28:db:44:1e:ff:4e:
f9:8c:5e:36:b2:36:3f:da:9a:d0:82:85:de:9e:d8:b6:c4:9f:
8c:45:e4:60:2b:c5:d2:19:a0:52:ae:c2:90:b7:93:17:66:fe:
16:40:f9:18:ba:88:69:3f:22:63:7f:e7:df:7a:0b:9d:41:6f:
df:1a:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:42:56 2026 by rpki-client