
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
File: 01B748FE9E379A963DF80DAA39E554231A002AB4.mft (raw, json)
Hash identifier: UhjyS/J0Y5f+RqUHuwlP9Waakw2+NFc9A4Zj2JpHxjU=
Subject key identifier: 6C:56:23:4E:E6:E4:A3:70:40:8C:2E:56:3A:51:55:29:D4:CD:80:5C
Authority key identifier: 01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4
Certificate issuer: /CN=01B748FE9E379A963DF80DAA39E554231A002AB4
Certificate serial: 3DDE83E3CB3A964A8493CBDF620EA96926881959
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
Manifest number: 6C
Signing time: Mon 20 Jul 2026 17:12:41 +0000
Manifest this update: Mon 20 Jul 2026 17:07:41 +0000
Manifest next update: Tue 21 Jul 2026 20:19:41 +0000
Files and hashes: 1: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: OUi2dWqVUs4mn5PgnV5FjoZyNlm2gHfbdDmeMNM+lt0=)
2: 01B748FE9E379A963DF80DAA39E554231A002AB4.crl (hash: it/7CgODbd9ugFaevXZUWOrUHVg39SC/G2Cft0shD60=)
3: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: 5PA+RoFsU/KO7v+L0x7qbIvSiKy1qc9c1F5T1nVZmHM=)
4: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: NB4ptyBbAbjhwyj4mleVlSYym5zGdWDUdcXFOkuUENA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl
rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 20:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:de:83:e3:cb:3a:96:4a:84:93:cb:df:62:0e:a9:69:26:88:19:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01B748FE9E379A963DF80DAA39E554231A002AB4
Validity
Not Before: Jul 20 17:07:41 2026 GMT
Not After : Jul 21 20:19:41 2026 GMT
Subject: CN=6C56234EE6E4A370408C2E563A515529D4CD805C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:f6:39:51:86:49:9a:33:50:4e:5a:be:50:
ec:04:8d:bc:98:cb:8c:2b:87:ab:e9:c0:b5:53:a8:
0b:9d:e9:bb:d3:8b:e8:8c:f9:dc:c4:6a:03:90:80:
23:dc:93:3e:4c:f8:c3:1a:02:be:1c:3d:5a:4e:ca:
c3:4b:ee:71:2a:b2:49:f6:e5:d0:5a:94:e6:80:93:
ca:79:54:85:2d:5f:b5:cc:bf:3c:0f:94:87:de:e8:
15:3f:a6:02:43:40:66:dd:41:79:2e:7e:30:c3:60:
68:01:c8:70:1d:6a:dc:8c:35:f4:71:e2:00:80:81:
3b:85:82:b8:ab:19:4d:70:a8:0d:b3:82:b1:6e:87:
bd:63:cc:ed:c9:d4:49:2e:31:25:b3:36:42:d7:3a:
f9:49:6d:7d:2e:0d:d7:1e:97:a0:66:02:6f:cf:e9:
d9:1b:9d:c0:9e:39:f7:61:3b:a9:f0:4c:de:85:42:
9a:3a:20:9d:96:4f:3b:51:5d:b2:62:81:3a:1a:8f:
c9:fd:b2:57:14:ce:59:8e:bc:af:8b:35:08:17:a1:
28:1f:23:41:00:d1:af:ab:9f:c1:16:55:2e:f9:f3:
9a:a8:08:1b:ad:c5:9e:29:88:de:74:03:7e:93:5a:
8e:6f:4c:84:85:f2:f5:51:3b:28:0a:29:e5:98:ca:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:56:23:4E:E6:E4:A3:70:40:8C:2E:56:3A:51:55:29:D4:CD:80:5C
X509v3 Authority Key Identifier:
keyid:01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e0:9f:28:14:7b:db:0e:bd:e1:86:01:2e:7b:56:42:ae:ee:
3c:cb:8c:2d:91:86:59:f8:bd:00:63:fd:95:63:d0:c1:d7:0a:
5e:57:78:52:99:f5:49:c5:d8:29:d5:5c:23:7a:50:6d:c9:2e:
10:d7:f6:7f:85:04:a7:5f:44:b2:e6:42:94:f5:54:d5:a7:22:
4c:07:d8:3a:cb:a0:8f:22:73:7d:ac:7f:f1:dc:4a:0a:59:9b:
81:57:f2:7f:5c:26:22:30:61:c0:5f:7a:85:0b:ec:5c:80:fe:
9e:75:82:44:99:34:59:5c:e0:8f:07:16:4b:52:f0:84:da:9d:
45:1e:a2:bb:ae:04:b2:e6:2c:83:90:3f:6b:5e:c8:12:ef:51:
9a:73:2d:b0:23:1b:22:34:40:cd:28:1c:cc:3d:86:54:e0:f4:
05:14:dc:a2:5b:ef:ee:e2:c4:83:e3:f1:89:78:28:a2:b9:10:
7d:ba:91:ef:8f:62:2b:c1:45:f3:37:75:a9:ed:88:1e:d0:74:
68:80:50:65:ce:09:e5:89:92:5a:b8:3b:4b:96:98:81:dd:85:
65:c4:08:18:b9:c2:55:97:91:80:6a:8d:d5:db:c0:3c:95:b1:
07:f8:98:97:40:bb:e2:1a:44:31:c6:42:c3:a7:01:ea:3d:42:
59:0b:ee:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:16:54 2026 by rpki-client