
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
File: 518CB795450041B0537FB0312901D771579DCEC4.mft (raw, json)
Hash identifier: Z74GfJybSsMmUZoZTrRF8pIVgnvcczf7d8pZspDgXuc=
Subject key identifier: 04:02:17:2E:49:FC:54:25:B4:DA:EE:3D:34:B6:09:55:13:37:D0:7B
Authority key identifier: 51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4
Certificate issuer: /CN=518CB795450041B0537FB0312901D771579DCEC4
Certificate serial: 2C687111A2ADD3C2B2FA761F0ABD901E0D69A582
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 05:07:06 +0000
Manifest this update: Tue 21 Jul 2026 05:02:06 +0000
Manifest next update: Wed 22 Jul 2026 06:12:06 +0000
Files and hashes: 1: 518CB795450041B0537FB0312901D771579DCEC4.crl (hash: XU0h38ARI5O21kPYU3x770bbjUTeHn2e1zMitnRUgsc=)
2: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: X+iPKuq3a//oKJcRH7RCMyPd3wqSs+gr09rlg8og0vI=)
3: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: iCJ8MTvJq5y1PpIDZMP2NlWvXH8yCPvTkvBM8kuoTNA=)
4: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: GypeOWXaZk/hIkKcj8p9VzDp/KvisMSO2917iwkOduU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl
rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:68:71:11:a2:ad:d3:c2:b2:fa:76:1f:0a:bd:90:1e:0d:69:a5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518CB795450041B0537FB0312901D771579DCEC4
Validity
Not Before: Jul 21 05:02:06 2026 GMT
Not After : Jul 22 06:12:06 2026 GMT
Subject: CN=0402172E49FC5425B4DAEE3D34B609551337D07B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:4c:ad:1b:88:f9:14:8c:f5:0d:a8:db:0e:
33:6e:fd:93:38:ef:62:10:30:cb:19:6d:dd:39:49:
34:f5:c9:37:5b:09:40:89:83:29:d2:a6:c9:83:cc:
b5:29:0f:17:6b:20:f7:df:f8:d8:0c:e5:f0:e0:72:
f7:19:72:59:2d:12:d5:29:77:db:2a:11:cd:53:59:
e1:60:52:a2:c8:d3:09:55:ff:15:3f:f1:f7:6b:b9:
8c:f7:e0:ba:19:5c:b7:a0:31:19:01:8d:d7:5b:f2:
e6:0b:00:af:b1:bd:31:92:07:5d:40:b5:b0:ae:40:
d6:a6:cc:02:3e:d5:0d:c9:49:61:65:f9:28:22:f1:
3f:8b:72:7d:e1:37:18:91:3b:15:46:4a:58:09:e3:
df:c6:cb:46:2a:4d:ad:94:9f:b3:07:5e:82:94:e1:
55:18:9e:6e:7b:f3:65:fd:c9:4b:b6:cb:97:5f:7c:
d0:66:82:8f:03:9e:92:ee:b4:b2:3c:fc:b6:e7:ab:
06:7f:7c:04:8b:aa:b3:2c:1d:4a:d0:94:db:86:b1:
00:38:a0:e4:91:14:d4:24:fc:2c:af:a1:fe:e9:6f:
ae:3f:f4:c3:b3:c7:ed:41:06:f2:3e:64:8d:17:df:
c5:e2:f2:e7:a7:bb:83:b7:16:67:48:b9:cd:e5:fe:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:17:2E:49:FC:54:25:B4:DA:EE:3D:34:B6:09:55:13:37:D0:7B
X509v3 Authority Key Identifier:
keyid:51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:df:48:9e:78:b6:ca:b2:f7:5d:65:2c:61:b1:98:9a:c4:cb:
23:cf:23:85:ab:c7:f8:2b:53:3c:6e:07:b9:d6:35:41:8f:22:
91:f3:4b:fc:2d:be:53:d0:a9:09:06:66:c4:48:df:be:b9:4f:
61:da:32:de:15:d3:f4:26:2b:a1:2e:75:60:a1:cd:25:e6:b0:
99:51:9d:51:34:11:1f:8e:01:7a:05:83:78:38:27:16:e0:c8:
9b:72:52:9b:0e:e5:d1:05:56:9c:81:28:4e:a2:e9:f1:c2:80:
ab:3e:c3:db:9f:61:b8:f1:d9:4c:dd:85:4f:d3:9a:80:ac:9e:
ea:f0:4d:bc:e4:0d:99:75:9c:80:08:26:7c:95:b7:39:d8:e2:
b8:ff:36:7a:20:86:aa:83:ae:aa:fc:61:3a:35:9d:44:f7:48:
d3:8d:8a:32:49:f0:39:f3:96:e0:c6:3b:71:6b:af:f1:33:9c:
03:b0:4c:49:2b:bc:b4:c7:05:da:11:38:05:e4:df:70:59:79:
a1:95:1f:19:30:be:56:a2:e6:fb:f3:e6:13:bc:fe:b7:31:d3:
d9:45:0e:93:97:f2:c7:a6:47:f5:c4:73:f4:9e:bb:f7:e3:b5:
d1:da:66:a1:b7:20:2b:27:f9:2e:0d:27:ec:ce:86:ef:1b:3c:
5e:35:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:48:16 2026 by rpki-client