
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
File: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft (raw, json)
Hash identifier: bbnEFUadjWJLyMrlEboWA+DVYzREsE8EqGbuAiwbjcQ=
Subject key identifier: 4B:6F:35:6E:60:3C:DB:3E:A0:07:63:68:B3:73:0C:B7:A8:5F:20:BB
Authority key identifier: 95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36
Certificate issuer: /CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36
Certificate serial: 66A0F9C0E5EA94B9C798F943B049167881459D51
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 22:28:52 +0000
Manifest this update: Mon 20 Jul 2026 22:23:52 +0000
Manifest next update: Tue 21 Jul 2026 22:45:52 +0000
Files and hashes: 1: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: 0J9oKNbFkC4ek4+yIhYejI4HBbjKDbQ0B3Yfg4Dgqy4=)
2: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl (hash: He80AB0owqyBDU8TUTx4BB+iwA9BBwskwZB94TbeRA0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl
rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 22:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a0:f9:c0:e5:ea:94:b9:c7:98:f9:43:b0:49:16:78:81:45:9d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36
Validity
Not Before: Jul 20 22:23:52 2026 GMT
Not After : Jul 21 22:45:52 2026 GMT
Subject: CN=4B6F356E603CDB3EA0076368B3730CB7A85F20BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:37:12:66:fa:65:81:eb:d4:36:b4:4a:5b:
4b:d8:60:94:18:6d:0a:73:a6:1b:b7:ab:03:30:45:
76:68:fa:9c:f2:7a:89:9a:15:a4:ff:9e:12:76:99:
ed:4b:79:77:90:4d:48:25:85:f1:3e:e1:4e:2b:62:
41:2a:e8:83:24:72:ac:70:71:6e:c4:9c:82:a2:29:
57:fe:94:d9:a8:1a:38:0d:19:f1:80:29:f8:ff:dc:
e2:2c:73:5e:79:c8:0d:f9:73:9b:00:ce:4a:e0:15:
e3:36:e5:c5:d4:f4:b0:3e:ec:54:cf:ae:81:8d:42:
16:85:26:7b:a0:1c:a7:c8:d2:78:8a:a0:6e:a1:26:
a0:54:78:92:63:20:f0:b2:cd:bd:e5:71:1a:d8:bf:
1a:9e:e7:32:de:51:4b:e9:bb:cc:4d:07:63:a2:9b:
a7:e4:e2:a3:fa:c7:20:62:56:1d:a5:0b:49:80:f0:
40:f5:e2:47:72:ff:81:dd:03:a7:6b:8b:9e:33:27:
81:8a:cf:3e:cf:45:f2:da:1e:e7:37:4e:46:8f:d0:
33:78:c8:d4:8c:7f:05:bc:e3:55:0a:76:a7:50:a6:
3b:65:dd:d8:a8:7a:6f:0f:1f:c7:4e:e8:05:03:7a:
57:2e:05:e1:39:49:d6:2b:07:33:6f:58:f2:97:11:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6F:35:6E:60:3C:DB:3E:A0:07:63:68:B3:73:0C:B7:A8:5F:20:BB
X509v3 Authority Key Identifier:
keyid:95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ed:23:13:06:fb:ea:66:8a:3f:97:ef:b9:d7:84:fb:63:53:
39:67:e8:b9:b7:21:6f:75:db:14:0e:7b:68:98:16:88:71:61:
0c:3d:c2:da:44:ea:b7:2f:70:af:ec:9f:b5:fd:b8:ac:72:15:
25:5d:36:40:2a:1a:27:09:91:17:64:51:47:1c:48:fb:1f:e2:
19:78:97:3d:64:d6:19:09:43:6c:74:c6:df:0a:9a:e0:53:c0:
19:22:f2:64:c4:a5:da:23:82:f8:7b:99:ad:0a:6c:9a:b8:80:
3b:a3:be:95:f7:04:95:06:65:3a:26:1a:19:b5:ba:b6:b7:c1:
03:09:52:21:26:56:b3:52:85:f1:35:ca:69:da:f4:eb:66:75:
2b:50:87:59:71:5c:6a:e9:2f:db:82:67:1a:92:df:d1:f0:6e:
13:33:22:e0:4d:e7:ec:05:ae:91:64:18:88:8a:bd:fa:6d:95:
f1:6b:b2:2b:45:26:a6:59:d6:93:26:12:dc:f4:4b:4f:99:1c:
5a:31:09:e8:e6:b8:22:d6:ba:fb:99:f5:05:33:3f:5b:7a:de:
e7:a8:9b:9f:61:97:4c:41:d0:68:63:15:a7:12:87:2e:43:ec:
78:c2:be:26:ed:79:ed:19:dd:9d:c0:69:9e:6e:8a:bf:8d:5d:
c0:3f:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:18:15 2026 by rpki-client