
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft
File: 65B2322C56F44BF22F2FEC36B959F99E1D331066.mft (raw, json)
Hash identifier: 8xLvPHqGDZo+QFbK+mwujLlwa4bBIF0k4ZKAu0Wws4Y=
Subject key identifier: C2:A9:EF:0B:35:75:A3:9F:44:2B:12:95:BE:F1:C9:99:85:17:0F:69
Authority key identifier: 65:B2:32:2C:56:F4:4B:F2:2F:2F:EC:36:B9:59:F9:9E:1D:33:10:66
Certificate issuer: /CN=65B2322C56F44BF22F2FEC36B959F99E1D331066
Certificate serial: 7D1173C39C0A3CFCA49D33E64D3CCDA5B64D3859
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 01:48:02 +0000
Manifest this update: Tue 21 Jul 2026 01:43:02 +0000
Manifest next update: Wed 22 Jul 2026 02:43:02 +0000
Files and hashes: 1: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: ArWINNWiCoq7qYCWEDrQkzwtNUnQVElWRhRzX3xlhI8=)
2: 65B2322C56F44BF22F2FEC36B959F99E1D331066.crl (hash: TJtUA8D+yiD/AR3ylNiRVY7MoJyT2cGbC9M1UJC9GkE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.crl
rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:11:73:c3:9c:0a:3c:fc:a4:9d:33:e6:4d:3c:cd:a5:b6:4d:38:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65B2322C56F44BF22F2FEC36B959F99E1D331066
Validity
Not Before: Jul 21 01:43:02 2026 GMT
Not After : Jul 22 02:43:02 2026 GMT
Subject: CN=C2A9EF0B3575A39F442B1295BEF1C99985170F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:00:53:fe:7d:87:8a:33:31:97:28:89:75:
66:41:8d:21:b8:82:69:fe:98:8e:10:b9:6a:37:bb:
c9:98:29:57:4b:20:b2:12:e2:fa:b9:2e:67:22:83:
06:a8:c4:9b:da:51:64:79:5e:5b:d6:53:be:47:3b:
5f:16:29:d0:96:be:02:54:e3:6f:00:3b:a4:97:d4:
df:7a:e0:8b:de:5c:26:96:21:21:1b:70:e9:14:3c:
4f:ba:b5:db:5f:f3:67:6d:7d:fb:43:1b:11:00:20:
72:6f:39:57:06:d1:4d:89:18:95:5c:5c:fd:f6:c6:
fb:3d:52:ad:93:de:10:00:1d:2c:d0:90:fb:2c:89:
25:c3:73:48:df:a3:cd:61:be:58:af:b5:c4:77:0a:
68:fb:b9:31:04:3f:a8:d7:d0:6b:1e:0f:44:98:94:
c0:eb:3e:3b:f2:1a:6e:7f:43:fc:df:ed:d7:ee:da:
8c:75:24:19:fc:75:4e:08:a3:8d:30:07:de:7f:d0:
cc:c7:ec:94:af:c6:fd:3c:8e:f2:64:4d:2b:0b:8c:
1f:6e:9d:db:f7:81:d4:29:09:4e:cb:16:ef:fa:83:
0c:9d:56:91:80:95:3c:df:49:b9:ff:3d:af:e8:59:
18:8a:2d:6b:93:c1:14:59:18:ef:a7:3f:45:93:88:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A9:EF:0B:35:75:A3:9F:44:2B:12:95:BE:F1:C9:99:85:17:0F:69
X509v3 Authority Key Identifier:
keyid:65:B2:32:2C:56:F4:4B:F2:2F:2F:EC:36:B9:59:F9:9E:1D:33:10:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5b:ee:53:7b:36:73:ab:62:33:51:ef:a8:92:58:9f:e6:c3:
08:fb:4d:e2:17:47:2d:a6:cd:ae:1b:54:18:ce:3c:9f:37:69:
72:07:4e:2c:ea:cc:a8:e2:03:42:52:5c:47:b0:94:38:7a:14:
1e:ff:1e:df:2f:89:aa:33:2b:8c:94:88:a6:91:55:bd:c4:62:
fd:5b:a1:7a:19:c4:0e:23:e8:af:c9:df:c9:58:cd:6b:34:2b:
ec:99:f8:1e:85:72:c8:0b:35:df:73:86:45:21:9a:47:40:c6:
cd:b1:88:b7:d2:0c:ab:06:9a:2c:e5:ab:a5:c2:15:1a:1e:b9:
7c:eb:5b:40:70:01:6b:1b:b1:77:a7:e7:3d:8b:55:b3:bc:ba:
c8:01:16:aa:91:64:d4:c9:ad:c1:80:f9:ef:94:5a:f2:a1:44:
4f:84:91:d1:63:e3:7c:72:da:0e:0f:fe:2e:2b:8d:d9:3d:ef:
b9:d3:70:28:0f:b5:c9:13:01:5c:52:f3:58:92:4c:c5:53:73:
3b:19:6b:25:b9:72:24:98:f3:a9:3c:7d:7c:81:37:e7:fd:2c:
31:2d:e6:01:c6:db:fb:6c:ce:12:76:49:db:19:72:1d:d7:4a:
7d:3b:18:5c:1f:d7:39:5c:0f:85:13:9d:ad:da:42:eb:e5:5d:
aa:32:39:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:51:18 2026 by rpki-client