
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
File: 6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft (raw, json)
Hash identifier: HoaQ3mCRYl1Nwib7vFvknAvX52cfCtn4cIB59AToI0Q=
Subject key identifier: 05:C0:C7:29:82:6C:EA:5D:BF:9C:68:2F:5D:C9:84:D3:9B:57:0F:07
Authority key identifier: 63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
Certificate issuer: /CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87
Certificate serial: 773283A7E8A1030CA5F24E96999509B4E9A89A33
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
Manifest number: 2B
Signing time: Wed 03 Jun 2026 00:05:01 +0000
Manifest this update: Wed 03 Jun 2026 00:00:01 +0000
Manifest next update: Thu 04 Jun 2026 00:16:01 +0000
Files and hashes: 1: 3130332e39362e35352e302f32342d3234203d3e20313530393637.roa (hash: UKBnj/25IlskFYrMWggMls6cOgB4lTLBiHIfSuSGJ+4=)
2: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (hash: Iu8i3UFA5NfxNCWcLP6UJ8lab0FJ/BYVXvfcqAte7gA=)
3: 6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl (hash: wa/tBUZkJa0Tryrao9e+3Rp8/ay86jJfW1wtcaS2Ars=)
4: 3130332e39362e35342e302f32342d3234203d3e20313530393637.roa (hash: xf+UK/SwcRIX/nRJ4Hg+4DQ/f5k64bhWTyYNX0IjW+4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl
rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:32:83:a7:e8:a1:03:0c:a5:f2:4e:96:99:95:09:b4:e9:a8:9a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87
Validity
Not Before: Jun 3 00:00:01 2026 GMT
Not After : Jun 4 00:16:01 2026 GMT
Subject: CN=05C0C729826CEA5DBF9C682F5DC984D39B570F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:39:55:0f:db:4d:bb:6a:30:1e:35:48:df:31:
fb:6e:83:09:70:47:94:23:a2:08:f9:60:72:c6:8a:
42:93:70:e3:0c:8e:0a:97:e4:76:4b:91:94:f1:9f:
13:30:c4:0e:bf:46:6f:b7:be:89:44:80:00:ce:1b:
d6:64:4b:1c:9a:2d:a8:c1:7b:48:ca:91:bb:e4:58:
31:8d:53:66:2f:64:eb:12:17:81:72:9b:d8:5a:e7:
02:b9:eb:3d:dd:94:ad:57:4e:f0:39:ff:8b:82:05:
f8:42:5f:05:ae:f1:7c:14:db:f0:70:44:d4:df:41:
b6:a6:29:d5:2e:6f:4a:ae:9a:af:e4:0a:a6:ab:84:
e6:d5:ea:f9:e3:df:ea:42:c4:4c:2a:d4:eb:a9:ca:
30:e5:74:0e:4d:f7:e4:22:1a:aa:fa:17:8e:8a:b6:
9d:fe:83:68:b5:b7:42:88:1e:6c:c7:ef:34:a9:29:
cf:c0:9f:04:71:4a:f1:72:cf:36:46:25:ef:d4:62:
c9:e6:62:88:1b:7b:61:15:01:8d:a5:6d:a0:e3:23:
10:c5:87:73:6e:4e:1d:8d:65:a7:78:45:70:ba:83:
29:da:7b:43:ab:ed:24:d9:69:1d:5d:10:65:44:d3:
fb:02:fe:37:b7:dc:48:4d:74:7b:1e:5a:01:9d:4b:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C0:C7:29:82:6C:EA:5D:BF:9C:68:2F:5D:C9:84:D3:9B:57:0F:07
X509v3 Authority Key Identifier:
keyid:63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:74:53:e0:7f:a5:0e:78:eb:2f:15:62:e4:37:33:e0:7a:fd:
db:89:44:35:67:8b:da:bb:62:5b:37:66:cf:b0:5c:2d:85:de:
c5:15:a5:dc:54:3a:c6:43:10:a7:96:43:50:73:f2:e9:4c:33:
a7:d3:3d:bd:b6:63:c2:b2:50:50:a2:2e:ae:8b:25:8d:52:c4:
dd:76:0f:f2:1c:17:fe:69:9b:14:41:9a:f4:05:2f:01:ec:3b:
02:2e:77:c7:e6:62:ed:85:32:05:ea:e0:61:7e:5d:84:f8:79:
88:48:b4:5f:d3:8a:94:71:1c:59:28:fb:67:95:32:76:76:33:
ac:d7:b2:13:04:8e:df:35:79:c0:d3:d7:cd:ca:53:ed:6e:c9:
3b:c8:55:ab:a5:51:07:4b:36:e0:c1:70:90:d3:09:af:4e:5b:
ef:e6:bc:93:f5:70:55:82:f6:95:9a:79:8f:e5:d6:a1:cc:4e:
b2:0e:35:e4:7e:d1:ba:b2:7e:ef:f9:46:f9:02:90:dc:c8:d8:
7c:ef:9f:f7:ad:3b:bc:4d:95:15:21:e0:cb:5e:e6:dc:de:b5:
61:ab:35:62:45:a6:e8:7a:87:76:e5:16:ec:1e:5d:f3:e9:63:
a5:1f:64:da:d6:4e:34:a4:07:49:b4:42:f5:cd:77:3e:76:85:
42:2a:80:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:01:39 2026 by rpki-client