
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft
File: D69827B97765F94998CEA76A23999571F2BDA426.mft (raw, json)
Hash identifier: zoESMnX7JX+chRWyouDfxcBlidatizXTZiLDGlBA0bI=
Subject key identifier: 3F:55:F5:9A:4F:3E:68:6F:64:E8:E3:63:38:78:76:7E:37:53:14:09
Authority key identifier: D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26
Certificate issuer: /CN=D69827B97765F94998CEA76A23999571F2BDA426
Certificate serial: 4B2E0EE4AEE9F5FC12384F3BD44796BE4D3C5E36
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 20:21:27 +0000
Manifest this update: Mon 20 Jul 2026 20:16:27 +0000
Manifest next update: Tue 21 Jul 2026 21:51:27 +0000
Files and hashes: 1: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: iLHx8gOj2lpsnRU9gP4XnWUqEugFMffYvM4rOFlrJs8=)
2: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: vm3LwDwLeRAwMnQkRWhgtW4ETHGNuBudAWSRp1ytOKg=)
3: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: 0y6JUWjxpl3UiTjjA3rkmhxCstrj/MfIM81XvNQIAG8=)
4: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: TZoS498ctZpsXD1NhIQ84Q2pw5rT92BFxmYiyFfNKls=)
5: D69827B97765F94998CEA76A23999571F2BDA426.crl (hash: MKVlh/2RuQNtFv14DFi8H376BjBm1b0BWx3TaB5x6QY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl
rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 21:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:2e:0e:e4:ae:e9:f5:fc:12:38:4f:3b:d4:47:96:be:4d:3c:5e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D69827B97765F94998CEA76A23999571F2BDA426
Validity
Not Before: Jul 20 20:16:27 2026 GMT
Not After : Jul 21 21:51:27 2026 GMT
Subject: CN=3F55F59A4F3E686F64E8E3633878767E37531409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:03:63:05:99:15:01:8d:e6:51:e9:83:56:
dc:f5:16:6f:f1:1e:07:3c:22:4b:73:5c:a6:ad:75:
82:63:09:cc:4f:5c:8c:58:18:7e:67:9a:30:48:cf:
08:fc:4b:fe:f2:b9:60:e9:e6:40:7c:2f:e2:d5:2e:
b7:17:75:af:df:ed:fd:95:9e:72:39:5c:3f:86:f0:
92:91:b0:0d:79:c5:b9:c5:72:d2:4b:c4:f9:81:62:
8a:83:84:ca:23:b6:10:9c:1b:23:27:92:da:bc:ce:
ae:6c:54:72:91:42:58:76:89:98:3f:20:0a:f1:79:
d6:a7:b9:73:d7:b4:ef:ac:ef:86:16:3f:da:99:72:
6d:d4:2f:f1:64:43:31:17:31:f9:e4:2c:a0:80:0b:
a8:95:7b:2d:37:57:4c:e9:4b:2e:c5:e8:3d:7d:c8:
47:be:5d:5a:0f:df:93:19:a7:be:82:1b:1b:da:98:
f9:21:7c:83:83:98:f5:71:93:5f:fa:1b:ab:54:2e:
d6:7f:f9:a9:48:26:b0:9d:d3:52:69:84:d7:e3:fe:
1c:6e:bb:65:ed:f5:3d:80:6b:d2:af:90:a4:c4:e7:
b7:f3:25:42:ef:cf:cd:72:da:f5:c0:cf:58:e6:d9:
9b:dd:5a:a6:9a:f1:69:e1:f4:23:98:82:ee:d8:53:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:55:F5:9A:4F:3E:68:6F:64:E8:E3:63:38:78:76:7E:37:53:14:09
X509v3 Authority Key Identifier:
keyid:D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:63:27:a8:34:f1:36:d6:72:a6:bb:ed:b5:33:48:ed:1c:10:
2d:9e:eb:e1:a7:d7:53:0b:f5:41:c3:a9:4b:3e:95:1d:79:0a:
90:c0:85:01:94:f7:83:22:0c:c2:e7:07:9a:eb:49:44:5e:4c:
82:7c:0e:8e:bd:73:af:f5:85:89:76:f6:3a:45:ad:a9:98:ef:
e8:ac:ef:3b:f4:66:87:a7:8c:83:c5:7e:83:af:68:59:90:d7:
58:1e:5f:7e:97:9f:8d:ec:44:bf:cb:4a:5d:9b:7a:11:f6:ca:
e6:ae:f2:64:06:67:6f:be:8a:2f:42:73:33:b8:71:b2:93:2d:
b1:f5:10:8d:be:bc:38:15:ee:1b:4e:7a:1d:e7:98:3e:2c:fc:
8b:f9:47:0c:3f:a7:51:40:af:8d:d1:65:65:d4:3b:e4:26:5c:
91:68:0b:60:57:21:68:87:4a:38:5a:64:4c:d6:24:6c:55:1b:
f9:03:fb:08:e2:c5:d2:3c:62:7c:ab:2b:59:1c:a6:4e:df:b7:
a3:cd:eb:0e:70:9a:9a:9e:c2:c7:98:52:79:34:b4:bc:15:98:
08:aa:50:b7:3d:96:bd:26:99:4e:05:e8:ee:ea:22:7f:02:5f:
63:08:41:95:3f:9c:ac:af:0c:4a:de:a9:0a:51:17:03:3f:c6:
f9:ad:95:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:28:44 2026 by rpki-client