
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft
File: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft (raw, json)
Hash identifier: nWTI8G3eqTeWHb/DQmhnq1q8XnO4aE7IsJTGKsqB2qQ=
Subject key identifier: 9E:21:6D:02:E6:6A:84:1B:42:8F:FD:58:84:88:1C:8C:F5:00:2B:96
Authority key identifier: D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C
Certificate issuer: /CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C
Certificate serial: 0D249688A85E0FC0E34143351425E58414C0E3E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 23:09:32 +0000
Manifest this update: Mon 20 Jul 2026 23:04:32 +0000
Manifest next update: Tue 21 Jul 2026 23:37:32 +0000
Files and hashes: 1: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl (hash: JgVE4CIYD0+u1cq5/DNZLw/nBzpxCIm2vx2qBZ4y8gw=)
2: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: qJeB9IbjX5ag+QxaHUzr5lUIsrKHS9OTMwiaemsfQJ0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl
rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 23:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:24:96:88:a8:5e:0f:c0:e3:41:43:35:14:25:e5:84:14:c0:e3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C
Validity
Not Before: Jul 20 23:04:32 2026 GMT
Not After : Jul 21 23:37:32 2026 GMT
Subject: CN=9E216D02E66A841B428FFD5884881C8CF5002B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:ca:27:2c:4f:aa:05:a7:20:fb:42:68:3b:
28:3a:51:f5:6f:be:d1:9f:05:17:5b:e0:77:3c:de:
6a:86:f3:98:4a:a9:a1:ed:e5:09:f7:5b:54:50:80:
02:31:46:30:c0:24:38:ed:dc:02:bb:ad:82:ca:e2:
94:f4:13:0d:72:58:88:24:95:71:c0:9b:db:a6:05:
f2:c0:58:6e:55:b4:03:98:06:a6:11:59:43:03:fa:
7b:bc:3c:f6:40:be:41:30:f4:87:9a:59:a9:bd:e6:
7f:c2:a4:a6:30:ce:36:2f:5b:0f:7d:05:d5:f1:2b:
2e:e1:1c:2b:de:9d:6a:ed:04:ef:1f:d9:ab:5f:05:
af:e4:99:02:6b:37:db:46:22:b6:a5:de:e5:86:46:
08:16:78:94:6c:04:ab:9a:17:6b:f0:39:d1:41:e6:
75:10:8a:cf:8a:e3:12:66:da:51:fd:c6:66:2d:3c:
f1:b3:98:88:b3:8b:cb:f2:7b:10:b3:10:36:76:5f:
ab:64:0d:9b:e0:c4:ac:cb:6e:c2:46:e6:e5:7b:69:
10:84:26:54:49:79:83:e2:2a:b7:cb:42:1e:09:77:
f2:a1:6e:13:82:c2:81:ab:67:78:dd:a7:cb:e6:97:
8a:a4:8e:e5:d0:f4:80:e9:6b:af:f3:ec:26:19:55:
35:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:21:6D:02:E6:6A:84:1B:42:8F:FD:58:84:88:1C:8C:F5:00:2B:96
X509v3 Authority Key Identifier:
keyid:D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d2:b7:8f:65:5c:b8:f4:fc:fd:fe:95:56:90:8f:2c:15:36:
62:41:38:80:a6:9a:b9:06:da:64:28:f6:83:ba:d9:45:f1:75:
d2:29:43:b8:23:9a:8b:a1:5e:6e:15:fd:f3:3a:65:a4:77:03:
fd:f2:09:7b:b9:a4:9d:1f:ce:b5:be:bd:d7:ec:b1:07:cc:33:
29:e6:e4:77:12:9a:52:09:ac:2e:b8:c7:8d:86:bd:68:88:77:
7a:85:d6:33:04:63:a6:fa:68:8d:f5:b3:00:83:6a:66:8d:4c:
5f:b0:3c:51:65:5a:7a:09:52:d2:5b:fe:d7:fa:67:12:4f:20:
2e:d4:d0:2c:e6:31:7f:e6:fe:74:ac:96:93:d8:28:96:d4:a1:
c9:a1:40:40:5f:e9:c0:2a:b2:4a:fd:eb:d5:74:95:62:b4:9c:
ed:7c:09:28:33:8e:4f:bb:4f:ad:e0:2d:2b:dd:bc:d5:ad:c1:
5a:79:74:01:4f:1d:35:e7:b1:b7:81:96:68:cb:71:92:cc:2a:
3d:b8:59:5a:47:24:9c:74:e2:dc:5b:c1:01:bc:b0:3b:40:65:
ed:91:ff:d6:8b:ca:64:a1:f2:02:54:2e:56:8f:74:d6:bc:a0:
d4:f7:95:70:92:74:15:ab:00:9e:96:a1:dd:4c:9d:8d:a0:ec:
0a:dc:6a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:56:53 2026 by rpki-client