
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft
File: AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft (raw, json)
Hash identifier: jTF7ALBlDTiuxLuwMP10ZxOhpGubvtlfd78ExHwpaWc=
Subject key identifier: B6:E7:10:67:3D:28:87:A0:17:8A:AE:4E:3D:B7:F0:65:E7:AC:37:B8
Authority key identifier: AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B
Certificate issuer: /CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B
Certificate serial: 12C988B17087B0184D08A127191EB9389D73D94A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 19:55:52 +0000
Manifest this update: Mon 20 Jul 2026 19:50:52 +0000
Manifest next update: Tue 21 Jul 2026 20:01:52 +0000
Files and hashes: 1: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (hash: mIxFRHOE8DmYRrXlDisTfwK6lb1/0VKqM0Rpgtaxvto=)
2: AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl (hash: 2vvW9nF7OquLnvgmsiEjqS85bZoOE1OLEcR2dW6djn0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl
rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 20:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c9:88:b1:70:87:b0:18:4d:08:a1:27:19:1e:b9:38:9d:73:d9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B
Validity
Not Before: Jul 20 19:50:52 2026 GMT
Not After : Jul 21 20:01:52 2026 GMT
Subject: CN=B6E710673D2887A0178AAE4E3DB7F065E7AC37B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:c5:f9:ec:be:9c:18:88:ea:3d:d9:e7:8a:
d7:56:71:51:ef:45:3e:05:ca:a1:98:e7:85:a9:4a:
58:3f:40:ca:4d:6f:08:58:a5:19:0a:42:d8:4f:47:
ec:cb:e4:45:15:79:1b:20:cb:dc:e9:ba:94:fd:64:
15:ea:6e:53:79:e0:9a:28:fe:33:73:9f:07:75:22:
01:5f:77:6a:ae:8e:34:8f:24:2b:d8:e1:50:e8:7c:
2a:e3:0b:9a:83:b6:78:0f:d1:93:09:8f:7d:08:6c:
1c:b7:00:ef:1a:b7:50:2e:ca:9a:ad:a8:23:ce:41:
9e:66:e8:bb:c4:ed:11:51:b2:04:eb:5a:28:54:9b:
0f:75:67:bf:65:4b:d1:0e:be:76:27:74:42:c0:e9:
6f:7c:7e:cf:e0:c2:30:6a:59:dc:31:ef:f3:f8:63:
a4:8c:2a:ab:74:f0:6d:aa:81:06:83:1b:87:05:1c:
61:4a:80:62:1c:fc:b6:30:a1:02:26:52:81:85:1c:
08:80:84:69:e6:41:3b:a2:e9:24:39:04:4e:ce:29:
ea:63:e3:71:60:ef:38:c8:e5:74:f7:10:2b:d3:49:
4f:82:58:96:79:24:ea:7c:c0:5f:91:71:27:79:1c:
e9:7c:50:8a:f0:41:b3:6a:c9:cd:87:12:8a:ff:fc:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E7:10:67:3D:28:87:A0:17:8A:AE:4E:3D:B7:F0:65:E7:AC:37:B8
X509v3 Authority Key Identifier:
keyid:AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:50:d6:27:e8:1e:5f:78:0f:98:a1:76:59:d3:0b:8f:90:c6:
ab:e7:d3:b8:e4:e6:20:f6:cc:5c:78:00:0f:aa:c4:3d:ce:b0:
76:e2:97:73:3f:09:17:0d:ba:1f:76:78:d6:ad:c8:6b:81:48:
99:9d:65:85:eb:28:c1:f7:94:8e:49:1f:92:fe:4b:3d:01:04:
bf:d0:82:3a:d9:76:e3:18:9f:14:88:5d:5e:7f:28:20:3c:2e:
05:b0:cb:dd:c9:4b:c1:9e:84:fe:8a:e8:12:7d:5e:d1:04:55:
9b:df:13:65:49:81:c8:79:ee:41:f6:b4:c4:e2:ac:13:eb:47:
2e:69:4e:16:2d:3e:1f:4a:e1:30:d8:73:9f:c8:a6:7e:ab:f7:
50:f8:48:72:2f:dc:14:9d:60:f2:70:69:dd:70:81:23:da:09:
57:d8:46:a5:dd:92:dd:18:26:c1:a7:ce:cd:55:66:e1:3e:b0:
4e:98:96:45:5e:89:12:0f:a1:a4:e8:bf:fd:dc:66:6f:a7:29:
0c:62:78:72:06:4c:6e:08:50:c6:e7:b0:eb:69:2d:28:d8:2e:
f3:5f:cb:7c:3a:d3:58:71:39:fb:f1:63:82:00:b6:e3:08:cb:
66:94:bf:35:93:c4:65:4f:26:78:f3:2d:52:09:0f:4b:ad:6f:
30:3e:1b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:52:35 2026 by rpki-client