
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft
File: 80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft (raw, json)
Hash identifier: X0wxVyHkH6ojkvgs5cWCQqgBjfPbioyHxzN4Xg0+e18=
Subject key identifier: 1F:ED:8C:84:3B:12:04:04:74:6A:6E:18:DD:AE:8F:3D:07:9A:91:86
Authority key identifier: 80:30:18:01:E5:9D:6B:55:BD:D4:DD:0C:3C:BD:8E:F9:AC:F5:B6:A6
Certificate issuer: /CN=80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6
Certificate serial: 2CE19B6F9284B553F3BDBD5F56C74E7A338B320F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 22:59:24 +0000
Manifest this update: Mon 20 Jul 2026 22:54:24 +0000
Manifest next update: Wed 22 Jul 2026 02:56:24 +0000
Files and hashes: 1: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: lwbYJ1/QnNwpl26OG3bOMb5FHA287rIfMJk91ei3piw=)
2: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: KLr/aXY9Ze4XqEbalmF1qPRh4IjkQ9N5X6xc0a/32TA=)
3: 80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.crl (hash: 5zvgM04s14me2Cu2DcN6ZtlbkLE0+OJ1efWAGdGUcCU=)
4: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: EcmhUiw7Snwp5Kn69lml8JUMOFi76KPsbkN9tGNhEFs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.crl
rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e1:9b:6f:92:84:b5:53:f3:bd:bd:5f:56:c7:4e:7a:33:8b:32:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6
Validity
Not Before: Jul 20 22:54:24 2026 GMT
Not After : Jul 22 02:56:24 2026 GMT
Subject: CN=1FED8C843B120404746A6E18DDAE8F3D079A9186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:d7:b3:54:11:b3:d4:81:c1:6b:38:34:04:
94:8b:e7:62:59:3e:1e:70:cd:a1:58:17:d9:6e:9e:
4d:f9:8d:46:36:df:3b:a7:34:f5:d4:f3:e3:68:4b:
bd:94:05:cf:cb:f3:c6:02:10:85:64:d4:b0:a0:55:
7d:49:0e:84:f0:7c:2d:ab:9a:15:f4:10:32:8d:8b:
56:fa:cf:4e:3b:59:1e:66:ff:a3:1e:dc:b1:39:83:
98:8f:ad:a9:34:25:68:14:67:32:b3:93:32:05:ba:
ff:62:50:df:50:0c:50:78:c4:4d:59:1f:a3:8f:59:
e8:3b:97:53:df:0a:49:ab:3c:ba:34:3b:92:61:8a:
db:9a:27:42:f3:46:47:29:56:1b:6d:09:94:2c:f8:
14:fe:fc:11:cf:fd:68:8c:b1:db:18:db:72:40:cb:
df:40:04:38:f8:3b:17:5f:f0:db:5f:27:53:9c:d6:
c6:0f:a3:ec:d6:70:93:f5:54:da:61:d0:0a:08:3c:
1f:88:e3:63:32:b7:ef:c1:49:f2:2d:a6:fb:1b:c1:
ad:0c:cc:90:55:f5:37:75:bc:4d:c7:3f:49:ef:c0:
10:63:dd:9f:2c:73:9f:e8:d0:02:c5:51:1b:d9:bf:
3f:43:de:75:60:19:c1:ba:fa:9d:d2:a8:f9:08:1d:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:ED:8C:84:3B:12:04:04:74:6A:6E:18:DD:AE:8F:3D:07:9A:91:86
X509v3 Authority Key Identifier:
keyid:80:30:18:01:E5:9D:6B:55:BD:D4:DD:0C:3C:BD:8E:F9:AC:F5:B6:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1f:9f:b5:e3:90:05:44:bf:4a:9c:79:09:cc:66:e6:7a:0a:
53:f1:e8:ec:92:9b:1a:08:61:13:44:a5:b3:f2:c3:24:25:35:
4e:6c:10:ce:7b:42:b0:9c:1d:1e:b3:cc:37:37:39:19:3b:30:
56:f4:49:94:39:25:3f:20:e0:8a:7c:53:41:e8:cb:c1:a4:bf:
cd:35:49:11:64:07:06:f8:4b:8e:3c:cd:0a:c8:ab:94:4e:b6:
cc:c0:a0:3d:13:81:e5:2c:d0:ac:46:f9:ba:4e:a9:55:fc:76:
66:55:62:60:32:f5:3f:41:c3:e3:9f:3e:44:4d:16:37:b3:7b:
41:2f:6c:10:da:28:ab:df:ba:80:ea:b8:c6:18:ff:60:be:f0:
44:53:70:fe:57:d6:d2:91:36:9c:b1:18:fd:5e:bc:1d:80:94:
d5:c5:0d:1f:fb:68:dc:63:91:e3:6d:8d:18:2e:6e:bc:6b:44:
af:ca:48:98:55:c9:54:bc:1f:07:53:4c:dd:b0:05:63:ac:85:
17:51:8f:8e:f6:31:dc:bc:54:b2:c8:c1:cb:c8:03:a6:00:0e:
e1:f1:4d:e0:1a:96:19:9c:ca:08:aa:39:75:39:cc:21:98:a2:
be:82:fa:65:a9:a0:27:7e:ef:00:4f:c3:55:ee:cf:63:1a:c8:
57:fc:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:21:35 2026 by rpki-client