
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
File: 04D52083D82721F61634E6629E16C7C7A870B9F5.mft (raw, json)
Hash identifier: 6xYKd1VVneCRRIAY8NeiFcIq5N0gxSHIIAzNdvnqXns=
Subject key identifier: A8:73:BB:15:86:03:01:F5:A9:93:27:B1:65:84:B4:70:AC:88:60:CE
Authority key identifier: 04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5
Certificate issuer: /CN=04D52083D82721F61634E6629E16C7C7A870B9F5
Certificate serial: 629864A42BC09A4330E7F15FF4B4FD4B3A155377
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 03:45:30 +0000
Manifest this update: Tue 21 Jul 2026 03:40:30 +0000
Manifest next update: Wed 22 Jul 2026 07:22:30 +0000
Files and hashes: 1: 04D52083D82721F61634E6629E16C7C7A870B9F5.crl (hash: JBuIhX2S0HLjByzvKMLuvwV/7ZJX88r1bjAIhNcuVR8=)
2: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: JXl9nF73Wg0ANBBDSP3R1eZt9u9/t+JbOCpzL0EVDI8=)
3: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: VKlwIPdpyMpqk0maSmWSiVv4EZTH1WpK0M+m3jBjjUU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl
rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:98:64:a4:2b:c0:9a:43:30:e7:f1:5f:f4:b4:fd:4b:3a:15:53:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04D52083D82721F61634E6629E16C7C7A870B9F5
Validity
Not Before: Jul 21 03:40:30 2026 GMT
Not After : Jul 22 07:22:30 2026 GMT
Subject: CN=A873BB15860301F5A99327B16584B470AC8860CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:b2:b1:d6:bc:65:fa:91:f2:ff:28:be:c5:
8a:c3:93:52:f8:b3:82:b6:ac:b2:7b:3e:a0:8e:ce:
ee:65:1d:16:b0:50:c7:6f:31:c0:5a:1d:81:b7:48:
b1:7b:05:c5:ef:83:55:87:c8:f5:54:e1:da:d2:fd:
e6:6b:3e:84:0e:a3:0a:8b:0b:c4:25:8c:e6:f1:d2:
24:e7:4b:13:0d:68:a5:34:58:85:a0:d4:eb:09:f8:
e2:c8:55:0f:6d:aa:5d:de:7a:7c:65:57:d5:22:d0:
ab:b9:ab:f8:d2:fc:d2:51:a3:0f:82:1f:fb:76:ee:
6e:e2:40:49:2f:bc:da:1e:09:46:fb:d2:56:2c:07:
37:87:df:e6:d9:49:76:d6:40:c6:c8:e2:aa:12:f0:
a8:d2:96:75:f4:55:c8:31:35:7b:1e:21:e8:28:43:
e2:fc:a7:e4:76:7d:29:1d:51:04:70:31:39:58:24:
29:d3:a6:1b:7b:63:99:d0:c7:e0:db:09:ac:70:58:
9b:3c:37:e3:51:8d:c0:54:12:62:b0:9d:28:11:5d:
84:fa:79:29:35:a0:c5:96:74:9c:99:95:ab:74:d5:
17:a8:eb:1f:8c:d8:d3:5a:03:b1:35:5f:f4:35:e7:
de:fa:fa:99:28:6a:66:ed:1f:45:81:64:65:a5:70:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:73:BB:15:86:03:01:F5:A9:93:27:B1:65:84:B4:70:AC:88:60:CE
X509v3 Authority Key Identifier:
keyid:04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:85:0e:ca:8d:2c:87:ed:bd:14:0c:e7:3b:56:dd:b0:55:1c:
77:2d:18:12:f5:af:04:63:3e:be:d9:2a:5c:6a:95:7c:16:80:
b4:6b:61:9e:aa:77:03:8a:c3:a9:0b:d3:aa:1d:23:40:17:0b:
7d:35:43:3e:54:5d:f2:91:2d:ef:fc:d5:b6:17:2e:3e:ec:7f:
28:2f:b1:54:0c:c2:7e:ff:f9:e8:a8:a3:14:f3:2f:1d:f8:b4:
ea:9c:b8:69:0d:29:35:e4:52:31:c4:55:c4:38:06:a9:01:60:
56:95:0c:fb:41:9e:2b:00:ae:90:28:f9:c6:d4:85:2a:59:b0:
b3:d9:f6:a7:e6:e9:ab:15:c6:e3:a0:01:69:72:45:e1:9c:3a:
ad:1e:d6:00:06:58:f4:e4:f5:46:be:5b:11:e3:bc:1d:3d:3f:
e0:17:4d:f0:67:34:c6:3f:a1:8c:03:1d:c5:60:89:93:58:a5:
47:d7:6d:64:3b:f7:69:e7:61:96:bf:68:c4:fa:61:d4:59:a6:
3c:49:ad:23:5d:cc:69:37:c4:47:71:3b:3b:47:c4:8a:68:eb:
69:ef:9b:8e:a7:3d:b5:65:87:fb:b0:18:d0:f0:0a:a0:44:2e:
f7:71:72:6e:5c:96:78:db:f0:f9:8f:b0:5e:46:ca:74:33:89:
fc:64:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:45 2026 by rpki-client