
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft
File: E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft (raw, json)
Hash identifier: 0h8iPf2nJm71f6i/L/OXcHDhCM37vfLftMrfLeLIIw0=
Subject key identifier: ED:86:28:78:FF:95:2F:71:1A:92:EB:57:30:C1:EB:7F:0B:E3:A8:17
Authority key identifier: E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13
Certificate issuer: /CN=E1476FC7E4095A3095E47FBC4834D7ECE111F313
Certificate serial: 16AAC7A7518D2AED997D8128DD88597FC437654F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft
Manifest number: 6C
Signing time: Mon 20 Jul 2026 19:10:10 +0000
Manifest this update: Mon 20 Jul 2026 19:05:10 +0000
Manifest next update: Tue 21 Jul 2026 23:05:10 +0000
Files and hashes: 1: E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl (hash: VU7bi6HzZoXVxEWi/3d7fbPUCUOFI7GqlxoCBPDBeLQ=)
2: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: /1MgccGZfskMTbGr8xqejz+aa0C1YMlfgjpiT2WdsBo=)
3: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: +kRo7LiXN7GRQQL/5vawAMwmjkMc/A/ZykmCvCb8Chs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl
rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 23:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:aa:c7:a7:51:8d:2a:ed:99:7d:81:28:dd:88:59:7f:c4:37:65:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1476FC7E4095A3095E47FBC4834D7ECE111F313
Validity
Not Before: Jul 20 19:05:10 2026 GMT
Not After : Jul 21 23:05:10 2026 GMT
Subject: CN=ED862878FF952F711A92EB5730C1EB7F0BE3A817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:15:d0:97:f7:83:67:b0:57:58:65:8a:79:
41:d9:8e:ae:9b:aa:f5:22:1c:3d:55:0e:ee:42:82:
8a:d7:cd:77:02:4e:e8:75:e3:97:51:6e:de:83:32:
c2:32:ec:e3:74:8e:df:7a:c0:f5:78:e2:a4:2d:72:
bc:c0:7c:33:50:64:31:c9:30:bc:6b:f9:13:6f:e2:
15:cb:78:ac:d9:02:9e:29:b5:56:ea:a0:c8:76:3b:
23:1f:46:8d:53:5d:6b:67:14:6f:94:0c:fa:62:c0:
ac:f4:af:86:dc:4b:35:96:40:29:2c:e7:f7:e0:0b:
5b:96:e4:b6:35:93:b3:d2:da:c6:ac:55:1d:8a:3d:
be:ca:1d:fb:e1:02:ae:8a:4a:08:d3:94:41:18:bf:
5d:b9:34:dc:02:ac:e1:70:42:50:f0:da:79:08:9c:
ce:b5:e9:1c:7f:fd:7f:17:16:c4:d0:d0:05:db:5e:
a9:6f:b5:c0:cd:2a:41:ec:35:63:39:9b:38:57:4c:
35:42:14:30:3a:b6:9e:44:8b:39:e9:d9:72:74:4a:
6e:a1:eb:3e:25:f6:73:20:f2:91:fc:6e:ef:1c:5a:
1f:bb:7a:b9:9a:10:34:28:c0:3a:4b:6f:54:e1:38:
2d:9c:0e:39:d8:f3:74:66:5e:7b:78:d7:97:72:71:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:86:28:78:FF:95:2F:71:1A:92:EB:57:30:C1:EB:7F:0B:E3:A8:17
X509v3 Authority Key Identifier:
keyid:E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e1:e5:7f:f3:b3:2c:5e:b3:d9:b1:05:f6:39:f2:c6:5d:1b:
f1:7a:3b:a0:12:72:09:1e:29:21:52:66:13:e2:55:5f:0f:7a:
ba:39:d8:22:5c:63:ef:d6:e2:d9:bb:7e:99:c1:3c:7d:0e:b2:
4c:24:c3:80:11:09:49:94:0f:6c:fb:71:90:9c:53:f1:95:50:
e9:a5:5d:53:61:c3:37:24:85:35:8f:0c:fe:3f:43:fb:ae:e4:
a2:4d:3e:20:fa:cc:62:0f:f1:51:82:c8:6e:d2:37:5b:16:c8:
60:b0:03:3a:ad:38:37:31:51:ba:e5:24:63:82:dc:58:e0:00:
84:9d:ad:19:0e:d4:0f:ff:d6:bd:68:f4:f5:93:08:3c:0a:14:
c3:22:5d:ee:96:2b:76:9f:10:ed:2a:aa:db:da:3a:7e:95:9d:
46:b6:a9:b7:07:65:aa:b2:22:30:8b:bb:b6:d1:56:c7:af:4f:
91:71:44:9d:c0:2c:8e:6f:1c:8f:3f:60:ad:94:e7:be:3e:54:
c3:0a:f9:84:50:8b:16:45:d2:be:be:75:4b:4c:bc:52:53:a3:
3a:fa:58:ca:d3:da:da:1e:ab:ee:4e:49:6a:fb:b6:e4:aa:31:
83:69:6f:6e:3a:21:a5:a8:9b:86:e4:ca:7f:c6:12:9a:ae:08:
9d:80:78:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:51:55 2026 by rpki-client