
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
File: D626CC25972BF9948C6B3BDE4E354C71F2570880.mft (raw, json)
Hash identifier: jyv/0qDl6vQbrUZcApW2JiYfEpZTwEywmXhYwuXpHS0=
Subject key identifier: 51:AE:B1:25:4D:02:D7:24:8B:0E:82:F4:37:4E:98:4D:9C:BB:DB:FB
Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
Certificate issuer: /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Certificate serial: 15C9F8FC949A16E061BF8BFED274AF7DB685D90A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 12:31:52 +0000
Manifest this update: Mon 20 Jul 2026 12:26:52 +0000
Manifest next update: Tue 21 Jul 2026 15:35:52 +0000
Files and hashes: 1: D626CC25972BF9948C6B3BDE4E354C71F2570880.crl (hash: FHADM9y4bxfbAVxU0vBAWB95AGfhl0iS7/BABfaDZHY=)
2: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: nb8z2N9rnH96t5B0H624NhPlR7I0KYPMhvCR0O/fhs4=)
3: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: yo9Rg0RIu4bi5AvFSf1HgeoEO2ptRcGKCjbNNgnoU1A=)
4: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: 0aDHxXMr4KUimzxt4JkDC404Ezku76mxRU40fEJqQUU=)
5: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: +bc1aSBLcX6ZQm4jECmlMCivSavxhqXkBTLrz820pWg=)
6: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: jRI7u+pgcEtmrDDRmjulrcR4SRRZM/aGtsQfGUXuJ24=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 15:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c9:f8:fc:94:9a:16:e0:61:bf:8b:fe:d2:74:af:7d:b6:85:d9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Validity
Not Before: Jul 20 12:26:52 2026 GMT
Not After : Jul 21 15:35:52 2026 GMT
Subject: CN=51AEB1254D02D7248B0E82F4374E984D9CBBDBFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:dc:c2:69:ca:38:88:88:96:28:b7:ed:14:
df:da:63:9a:c9:41:a3:da:05:b0:0e:6d:55:40:3a:
40:fb:10:46:e5:88:b4:5e:e9:12:39:75:60:63:db:
d2:09:86:7a:56:02:06:ed:05:3f:f2:71:c6:e1:4a:
05:02:03:76:14:76:c1:d2:fa:51:cf:3a:ad:43:74:
e4:ba:d9:3c:ea:8b:11:3c:f2:1f:64:fe:a8:33:7c:
ec:5a:64:c4:d5:98:98:b5:65:3e:b9:10:bd:1f:56:
0a:ba:db:a8:ce:d6:32:c4:ef:25:ba:10:80:f3:a2:
51:64:54:0d:e8:21:1e:1b:45:34:14:10:59:a6:a1:
9f:ce:74:a7:00:c3:29:88:8d:e4:e5:13:dd:33:18:
74:53:9d:2c:a9:7a:e0:71:3f:3d:7e:ac:0d:df:e6:
3a:fe:7e:a5:85:c1:b5:1f:46:a1:c4:ce:6c:a1:e0:
3a:7c:f8:63:64:c6:5d:bd:f3:2d:a8:77:6f:c7:f1:
8a:f4:2b:97:cf:66:a2:05:9e:97:20:76:f6:c5:8e:
ed:63:ea:ca:b7:ea:0a:74:44:08:f7:77:f9:68:e9:
11:da:c5:b5:aa:8f:14:e2:30:89:42:ac:ba:8b:87:
fe:1e:fe:9c:6a:9e:ce:91:34:cc:f3:90:65:5d:35:
84:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AE:B1:25:4D:02:D7:24:8B:0E:82:F4:37:4E:98:4D:9C:BB:DB:FB
X509v3 Authority Key Identifier:
keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9a:19:aa:d3:5b:5b:42:88:2e:f0:a1:70:4f:2b:01:e9:08:
d7:d7:81:02:d0:ff:02:28:f2:69:4f:2f:9c:e1:fb:01:51:76:
4e:92:44:9e:30:b2:70:34:03:a1:ab:a7:94:45:6c:d7:2d:06:
7b:1b:69:f4:42:11:88:ed:6a:a9:e5:ef:53:76:81:02:2a:c8:
1f:5b:eb:49:e3:ba:13:59:71:30:a7:bb:08:c1:0d:7b:93:a4:
15:f1:22:18:53:11:42:24:e2:62:a1:0a:72:27:45:c9:80:d4:
da:56:e6:8f:8d:77:73:47:20:8d:2c:32:75:19:6e:60:b0:c1:
68:8e:e9:77:75:46:1c:c1:2c:86:11:e4:42:f6:9b:ee:15:7d:
1e:ed:72:de:f1:57:9e:22:ab:5d:85:20:dd:17:20:c4:70:8d:
6a:a9:e1:bf:97:65:5f:72:54:dd:d0:d9:04:4f:8f:db:d0:53:
30:03:24:84:00:8c:1e:95:5f:de:ac:d9:c1:7f:d1:56:cf:db:
7d:48:0c:e0:d9:52:f3:20:33:ba:ee:30:e9:93:7f:c9:1b:4f:
44:ab:5a:31:ac:9f:da:ae:8e:aa:00:2e:27:64:df:d1:51:39:
ba:69:00:f5:dc:4b:d6:16:28:88:9d:dd:15:50:f8:0f:94:48:
65:ee:fd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:43:34 2026 by rpki-client