
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft
File: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft (raw, json)
Hash identifier: LKIfssN+WCdKxSn+NFYi/74tSHTRJgB3b51LRpcY4/g=
Subject key identifier: A3:D9:6D:D0:BC:4E:76:9D:E1:62:02:AC:E8:1B:66:E0:BF:79:DC:5B
Authority key identifier: 54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E
Certificate issuer: /CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E
Certificate serial: 416A87F21B6C52CC3680C3DD31094E64622F79C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 02:49:18 +0000
Manifest this update: Tue 21 Jul 2026 02:44:18 +0000
Manifest next update: Wed 22 Jul 2026 06:21:18 +0000
Files and hashes: 1: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (hash: z7b5wYvP0ol8wMsB+eUBC4JsGZJCfnyyWM+aWZV2US0=)
2: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl (hash: 2UL8O2J2nPO2EDmkmOYqWLxf7fZQwFpQSq2YnI8Ik/c=)
3: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (hash: WXJAvvrLyVsCEeqVhO/3ROtMMzsfMOa0TSLjg89eRJQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl
rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6a:87:f2:1b:6c:52:cc:36:80:c3:dd:31:09:4e:64:62:2f:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E
Validity
Not Before: Jul 21 02:44:18 2026 GMT
Not After : Jul 22 06:21:18 2026 GMT
Subject: CN=A3D96DD0BC4E769DE16202ACE81B66E0BF79DC5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:34:b4:ea:e7:04:a3:65:33:bf:77:8f:32:
d8:59:fe:7b:37:ec:51:10:32:6a:97:a8:b4:96:79:
0d:8a:ab:9c:82:12:e3:d0:5b:cf:e7:1e:2a:4f:b8:
28:76:66:b6:ee:c7:8e:ad:cb:8c:c4:86:43:7d:9a:
a8:1d:96:c1:eb:f9:8b:f1:b3:82:63:ce:18:d4:5c:
86:28:42:8a:e3:73:19:50:32:83:95:00:16:cf:d4:
9c:bb:d5:8f:fe:76:63:1b:dd:bf:65:a7:35:44:78:
9f:d5:02:4c:4d:22:cf:a0:6b:90:de:c8:fe:36:c0:
41:b5:fc:a1:f0:9a:ab:b9:d6:8a:d4:51:14:fc:69:
1b:83:8a:ce:14:33:b9:d2:83:de:d0:16:73:82:61:
4b:00:d6:04:34:07:ce:fd:49:8c:1a:23:8e:ab:86:
84:65:d8:c6:69:5c:56:6f:8d:b5:44:ff:b5:45:56:
ba:8b:8e:45:f2:c6:53:c5:85:6d:a2:34:d2:81:4a:
1c:6f:f4:12:fc:49:f0:5a:08:e7:2b:01:8f:99:64:
cb:df:8a:d4:dc:d1:26:b3:9d:d8:96:3e:a2:b4:27:
d4:77:c9:84:67:39:64:b7:22:c1:79:98:a1:57:d2:
13:bf:4f:6a:3e:f2:18:29:82:4b:4a:46:b0:6b:2a:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D9:6D:D0:BC:4E:76:9D:E1:62:02:AC:E8:1B:66:E0:BF:79:DC:5B
X509v3 Authority Key Identifier:
keyid:54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:99:6f:5c:7e:6a:20:a8:cc:b3:27:95:dc:f6:cc:8c:ba:f7:
e6:14:75:8a:27:b8:fb:9a:b9:0a:e7:6e:bb:e2:1b:6d:a4:d7:
3c:7f:78:06:45:fc:22:23:06:62:d6:1d:2e:f4:ad:35:c6:83:
d9:06:42:50:9c:0e:ea:20:ef:00:13:51:01:b4:77:af:4a:f8:
68:63:32:05:af:ca:70:e8:54:ca:9a:e3:32:f3:13:a6:2e:ef:
ca:6e:a8:0c:6c:b1:50:56:e4:09:78:dc:0a:2b:fc:85:3a:9c:
ac:7d:e9:6d:04:22:f6:02:b7:62:7a:0a:de:4e:65:99:35:1d:
ff:87:ff:7f:92:8f:84:07:35:02:3e:cd:de:4a:30:c9:87:98:
d6:f0:60:4a:50:8e:3f:e6:67:e5:61:0e:67:d4:81:2b:45:80:
bf:b9:69:69:91:f2:fe:c7:59:5e:59:7e:e0:10:0a:e0:c1:32:
d6:a2:e4:37:3a:08:b6:c4:03:4e:f7:84:52:49:c9:3d:0f:4d:
15:5a:d3:58:91:60:cd:b7:8a:60:7f:0c:fb:92:bd:74:d6:0f:
e6:cf:60:b2:ab:f9:69:75:53:e3:6e:f2:66:b2:47:a6:e3:be:
f5:ba:ec:af:45:45:b3:3d:ff:c1:ff:f9:0e:c3:64:e2:e1:11:
bd:ea:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:46 2026 by rpki-client