
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
File: 6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft (raw, json)
Hash identifier: 5yDqFDmxDWwaHV7Kmkimhw5R5EoVqEqUhcnzlV8d1SM=
Subject key identifier: 0D:50:00:D5:39:D7:DE:8F:E0:0F:4F:92:38:67:6B:3C:60:CA:58:CA
Authority key identifier: 63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
Certificate issuer: /CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87
Certificate serial: 0D40FF4E0C6DE08C988357C70D8A1DE4AC81C76C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 15:15:26 +0000
Manifest this update: Mon 20 Jul 2026 15:10:26 +0000
Manifest next update: Tue 21 Jul 2026 18:55:26 +0000
Files and hashes: 1: 6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl (hash: BstsRX67uRFaRVHEbQuESyj+USo/2s9c4cyI3fbRRIA=)
2: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (hash: Iu8i3UFA5NfxNCWcLP6UJ8lab0FJ/BYVXvfcqAte7gA=)
3: 3130332e39362e35342e302f32342d3234203d3e20313530393637.roa (hash: xf+UK/SwcRIX/nRJ4Hg+4DQ/f5k64bhWTyYNX0IjW+4=)
4: 3130332e39362e35352e302f32342d3234203d3e20313530393637.roa (hash: UKBnj/25IlskFYrMWggMls6cOgB4lTLBiHIfSuSGJ+4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl
rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 18:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:40:ff:4e:0c:6d:e0:8c:98:83:57:c7:0d:8a:1d:e4:ac:81:c7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87
Validity
Not Before: Jul 20 15:10:26 2026 GMT
Not After : Jul 21 18:55:26 2026 GMT
Subject: CN=0D5000D539D7DE8FE00F4F9238676B3C60CA58CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:97:06:30:05:1d:a0:9a:c0:cd:08:51:b0:
f7:e0:75:40:a6:38:7e:c4:8a:f8:ce:ae:1b:96:69:
1d:fe:06:d6:4d:08:3f:50:05:8f:0b:56:1f:1a:6d:
5c:ca:44:6b:ac:1b:78:4f:ad:11:63:d3:5c:a1:73:
01:17:b9:89:ab:57:1b:3a:fb:cd:4d:05:d8:e2:91:
ec:96:b1:f4:9c:3a:ce:18:a2:30:17:c0:5e:63:39:
a6:65:b4:a3:4d:3a:16:47:0b:08:6a:9f:23:bc:ce:
15:72:2e:3c:df:be:4b:bf:74:e0:de:40:27:bf:b2:
5d:28:9f:ba:86:fe:a7:81:40:33:7a:37:3e:13:45:
74:d5:e0:98:23:2d:82:94:ac:71:20:b1:5e:7d:2a:
bc:34:42:9c:61:57:94:3e:92:97:e7:12:04:9a:bf:
52:bc:50:59:52:0c:9b:17:18:d5:f1:1e:1b:ef:69:
1c:68:0e:bf:4b:0b:27:fa:18:b9:43:9e:fc:b3:92:
01:19:02:5d:d1:7b:c6:fe:b5:95:ce:9d:23:05:a2:
c3:6f:87:04:34:8b:ff:68:de:05:9e:5c:a5:90:5b:
7f:a9:48:63:b9:46:e0:41:ee:74:21:14:a1:10:95:
92:3d:9d:6f:5e:c6:05:0f:f4:e5:23:7d:cb:40:c9:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:50:00:D5:39:D7:DE:8F:E0:0F:4F:92:38:67:6B:3C:60:CA:58:CA
X509v3 Authority Key Identifier:
keyid:63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:df:a0:75:80:05:40:43:55:68:8f:25:c1:82:56:f3:ff:2f:
fd:5b:6d:96:c0:7c:c9:aa:34:bb:41:b3:a3:76:97:bb:76:94:
e0:20:8a:93:fc:b6:47:86:88:13:0c:30:76:32:6c:60:00:41:
73:39:8d:91:71:62:9b:b5:1e:e3:4c:51:82:3f:6c:67:ff:50:
27:1a:37:e5:74:53:ad:fb:73:ed:58:d3:b2:fd:2f:bd:2e:73:
0b:2a:38:9e:37:57:6c:07:2a:34:9b:07:16:7f:fe:54:f0:81:
96:f3:df:51:e6:6f:47:b8:c5:27:da:9c:a4:c1:45:2d:69:b3:
03:b5:28:72:4b:db:08:51:c3:8b:eb:68:3c:72:c6:55:94:dc:
74:93:49:a1:df:5c:37:a7:b4:6d:d5:b6:20:78:74:86:52:68:
74:35:99:f5:b3:82:62:47:3d:e2:bd:b8:ff:5c:4b:7f:e4:4e:
e9:98:27:ea:e4:54:71:59:a8:f0:43:e6:d1:49:80:6c:60:ff:
f2:5a:91:59:9a:c3:09:8b:c0:e6:ad:54:ca:34:35:59:58:f4:
c2:d0:6e:5a:a3:cb:ad:7d:4f:7b:3d:ad:18:d4:94:85:28:6e:
00:88:ce:25:0f:f2:fd:57:dc:0b:e5:74:13:17:56:77:33:e9:
71:61:5e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:43:18 2026 by rpki-client