
$ rpki-client -vvf rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft
File: 7637E963EF709E2BBD39881202E68EA7BA09EB64.mft (raw, json)
Hash identifier: De9BHCX7rlS1nS+fafdLE9MZQ4BwW3B4MuBfMIHLO24=
Subject key identifier: 38:42:86:DB:84:65:16:DB:85:E5:7B:B4:86:74:0E:60:29:F2:9D:B3
Authority key identifier: 76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64
Certificate issuer: /CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
Certificate serial: 7840A984502473EE4ECCCD698675A0A10EFCB7E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 17:10:41 +0000
Manifest this update: Tue 02 Jun 2026 17:05:41 +0000
Manifest next update: Wed 03 Jun 2026 17:18:41 +0000
Files and hashes: 1: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: aRqarVDmeezXJU+Pwuv00vHqWnKaxtDs6IZN+swCI28=)
2: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: VcEziwvajBz0ScjFh/mK+RRpNiyAva/gnfSzmxA7gy8=)
3: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: OGWj7w+3IXgMzGQNophA491Hc35+yTJ0Ol+4T3sD95Q=)
4: 7637E963EF709E2BBD39881202E68EA7BA09EB64.crl (hash: 94fPwu4T18z+kSH4mIC64iyW2CwvHADiw0uJS6riFDw=)
5: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: nWI4uIvaFgK4Hk7GaUoKI1TVheMwIL3XscjU5iDUJX4=)
6: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: SGR/VUMdxBsuFmwp4lsUWkYdYAOdn6A4y8vkO6Hv4pk=)
7: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: Yr07K6DWQdF2XKTnmuR+IZeyvkTjOYoZ4wAJOdd5cXc=)
8: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: jDwYR0eXqs/UReeXAyA7K2tU1AiHfANmWKIdRhF2du0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl
rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 17:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:40:a9:84:50:24:73:ee:4e:cc:cd:69:86:75:a0:a1:0e:fc:b7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
Validity
Not Before: Jun 2 17:05:41 2026 GMT
Not After : Jun 3 17:18:41 2026 GMT
Subject: CN=384286DB846516DB85E57BB486740E6029F29DB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:20:07:1f:ac:50:0d:d6:62:52:a0:cf:a8:
1e:16:85:10:a7:ed:87:9a:11:0c:da:58:1a:6d:7a:
ed:10:71:49:09:a9:28:3c:fd:44:5e:97:b4:d1:24:
3c:9e:6c:79:90:ae:77:19:c3:60:66:12:41:a4:83:
ee:3d:cc:fd:2b:36:39:1d:d9:dc:a5:2a:40:10:1c:
d6:66:76:51:61:08:10:61:4e:78:41:01:b3:c1:0b:
1b:52:3a:45:22:3a:e0:3c:2c:70:93:9b:86:56:f3:
68:e9:86:97:7f:56:19:f9:51:43:33:96:06:b8:77:
81:e0:9d:7c:dc:54:39:52:f0:b7:ee:ea:33:2e:18:
8e:fd:8b:af:3b:43:25:87:45:08:53:30:aa:52:cd:
ff:79:ba:a4:fb:14:19:d0:f9:a2:62:95:ed:a8:b3:
2b:37:49:ce:dc:82:50:8c:1f:a1:35:05:53:e3:42:
55:90:0e:7a:57:af:fb:8b:6c:48:32:0f:a9:63:43:
9d:a4:70:50:ef:25:4a:17:2d:0f:3a:11:b6:ea:48:
36:7e:7d:e2:b8:04:69:cb:db:b0:8e:41:40:9e:d4:
55:4f:34:19:9d:9a:33:5e:de:c4:9d:9f:1b:2b:42:
75:0f:0a:bf:13:2e:55:9e:f7:5d:27:49:15:2c:50:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:86:DB:84:65:16:DB:85:E5:7B:B4:86:74:0E:60:29:F2:9D:B3
X509v3 Authority Key Identifier:
keyid:76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1d:59:15:22:c4:d4:20:cb:84:0e:2e:b2:64:03:12:df:df:
1c:37:2d:30:fa:11:15:83:e8:fa:92:69:29:87:25:7d:fd:fd:
ed:81:88:1c:b3:99:13:eb:c3:be:2d:61:da:7f:ec:41:92:03:
c4:81:bd:07:e5:97:6e:d9:28:bf:88:87:89:fe:5a:47:64:48:
fa:58:45:06:22:f7:24:7c:bd:9f:ee:d9:f5:be:5f:63:83:69:
ba:6d:1a:59:41:ab:bc:0d:ec:f8:8f:5b:91:a0:aa:fe:9e:f6:
13:af:cf:79:67:9a:e7:72:2d:01:9e:68:53:0f:0c:d3:3e:78:
4b:e3:1c:83:19:9a:a1:18:3f:62:88:25:2a:10:55:f2:f8:e3:
a4:ff:66:02:90:e5:15:3e:5d:24:d0:2a:59:3d:5f:ed:cf:b9:
93:53:35:f4:92:07:cc:b8:c6:ec:c2:77:dc:88:01:76:aa:6f:
c1:29:ef:49:97:46:07:71:5d:5b:fd:04:7f:23:dd:d0:b1:00:
27:10:d5:e3:d4:0c:c0:96:fc:c2:a3:51:b3:3b:5f:06:05:41:
d6:35:79:c4:ae:da:e5:8e:1d:99:ac:fb:7c:4b:a2:3c:43:56:
cf:87:af:a7:7c:f0:dd:0f:15:d3:f8:8a:f4:d5:b4:63:ad:74:
8d:e2:55:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:15:40 2026 by rpki-client