
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft
File: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft (raw, json)
Hash identifier: adkLqUzLYEZdygUCD11nkmIAXVZ09DBr6MUKFHpInOs=
Subject key identifier: 5C:36:25:12:64:65:75:E9:EF:77:2D:F3:0C:20:A6:68:C2:2A:78:6F
Authority key identifier: D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25
Certificate issuer: /CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625
Certificate serial: 468A0E5785DA1F1082680FA45519E0A8A6DBDAF8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 12:52:31 +0000
Manifest this update: Mon 20 Jul 2026 12:47:31 +0000
Manifest next update: Tue 21 Jul 2026 14:06:31 +0000
Files and hashes: 1: 3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (hash: 6zRlVB+7VhU+EM3gEBCiqmflsWcB74DY3jlrVLYDaZ8=)
2: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (hash: 4KthRL11gBmJfq1X/84ocL39dco9wY9VllXbFEY9aPQ=)
3: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl (hash: VtzVxqXVsW/bYA4+Fw/vJcKsq1GuQchm+nrHH3ecdEk=)
4: 3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (hash: VU4Fqm4q9lM1qlbwtCDfQfln3xy8Zkz6BXFC8JhBhSw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl
rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 14:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8a:0e:57:85:da:1f:10:82:68:0f:a4:55:19:e0:a8:a6:db:da:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625
Validity
Not Before: Jul 20 12:47:31 2026 GMT
Not After : Jul 21 14:06:31 2026 GMT
Subject: CN=5C362512646575E9EF772DF30C20A668C22A786F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:c2:9d:56:2a:35:f8:bb:9e:7e:92:39:99:
66:20:83:dd:d8:e6:ef:ef:ff:5c:ad:36:d7:61:3f:
c4:2f:1e:a8:13:63:8d:93:a9:cb:33:d5:ca:b5:d5:
dd:0e:80:8a:c3:d0:44:cc:37:89:22:08:3e:54:c5:
ae:cb:0f:d8:9e:52:ec:c7:ee:7c:5f:13:24:b9:5d:
eb:85:17:78:f0:25:2b:88:cd:bf:c8:a0:88:4c:d9:
22:57:5e:f1:c3:ef:08:26:d4:13:22:0c:aa:2d:73:
f3:36:cd:ef:ab:f9:2e:8c:5d:8f:ff:c6:1d:d1:f9:
25:a3:27:1b:c6:94:e0:9e:ee:d3:5a:dd:9a:98:35:
12:62:63:0c:a1:60:e3:5b:a4:3c:25:34:c1:8a:aa:
2b:1e:eb:9a:67:1d:58:e5:7a:74:d8:b3:4f:da:7b:
b3:82:5e:b7:57:8e:9e:22:f0:b8:82:62:0f:e5:d0:
1a:e8:d5:40:8f:6a:9c:5a:03:62:f2:43:4e:7b:5b:
45:6b:4b:12:3f:d7:66:82:48:a1:d8:df:fe:de:d7:
26:df:df:01:9a:53:da:6b:04:d0:15:2b:01:89:61:
62:57:b1:48:17:c5:c6:80:aa:db:09:2a:1f:ef:06:
74:c3:e7:70:81:ce:a5:f7:c6:65:f3:20:5a:35:88:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:36:25:12:64:65:75:E9:EF:77:2D:F3:0C:20:A6:68:C2:2A:78:6F
X509v3 Authority Key Identifier:
keyid:D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0f:b0:43:e2:d9:73:63:8a:a6:bb:24:a6:d0:b7:8d:81:4c:
08:f4:b1:3c:55:da:17:27:ca:b7:f7:47:3a:d1:30:14:9d:4b:
c9:82:6d:c9:17:b9:72:04:02:a4:55:10:60:17:43:e1:ff:44:
3d:c7:58:c9:16:15:8f:9e:cf:2e:21:ec:e2:de:fb:2e:ab:eb:
1f:61:74:da:68:a2:8b:18:47:d3:48:ea:15:ec:41:22:2c:46:
85:17:1d:3c:67:12:d1:98:33:22:34:b3:3f:53:79:18:87:28:
c9:d6:c0:6b:52:7b:8b:ea:4a:d1:7a:3e:4e:8c:cc:43:75:fa:
87:8e:7a:03:f9:92:7a:cf:84:97:60:70:99:4a:d5:43:77:76:
87:04:41:94:33:6f:08:20:cb:b7:15:c4:d8:64:7b:d8:7a:4d:
1a:20:13:66:d8:36:81:c0:52:24:7d:d5:7b:ae:49:dd:fb:ca:
b6:5c:68:ef:1e:ee:f0:60:1e:ba:c6:ab:a2:82:39:67:ee:46:
df:e5:fc:82:14:20:cd:99:a7:99:0d:7d:58:4e:ae:0d:03:4f:
98:e3:48:c6:34:f1:5e:b8:9a:d1:41:d1:b8:0b:65:9e:b8:1d:
9e:fa:45:5e:00:0d:08:8c:c1:03:cb:60:79:c7:22:1c:27:a7:
65:bc:59:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:47:36 2026 by rpki-client