
$ rpki-client -vvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
File: 412965964A4E12BD59BDF602A054F3394E99DC57.mft (raw, json)
Hash identifier: Qmci3ckwpKtnvHS+o72vOhkpy7dagUGRx53357/eEMg=
Subject key identifier: 62:E4:84:7A:C6:71:BC:27:60:89:B5:FE:41:02:69:F0:2D:C3:84:3F
Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
Certificate issuer: /CN=412965964A4E12BD59BDF602A054F3394E99DC57
Certificate serial: 633084BE79FA541E975AC256CEDCC0F082681B1D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
Manifest number: 60
Signing time: Mon 13 Jul 2026 19:59:41 +0000
Manifest this update: Mon 13 Jul 2026 19:54:41 +0000
Manifest next update: Tue 14 Jul 2026 23:45:41 +0000
Files and hashes: 1: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: SenSDJoyF/7+T+Cte5ij0s1hRLf2P72+k6wabdM015Q=)
2: 412965964A4E12BD59BDF602A054F3394E99DC57.crl (hash: /Whu5FlD51pKqiG8LAOzB59K2wo16yDmSbouhQLgzzc=)
3: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: PR4TqG8Gt/NDoejWkXR5KiYWrPCc3WE35fh/Jxbvano=)
4: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: TwoAdTsM3NEVv7qQwQrrGzyUs0c/Mt2dxvgYNM1lek8=)
5: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: uLq3gfPOGWF6ZWj1F9WMmGzvCujMeECGwqgAQGV2Nv4=)
6: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: s2Tpgag7FxdnRddbkWVhsKOC3K9zk4kizsUSEDbaWVQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 05:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:30:84:be:79:fa:54:1e:97:5a:c2:56:ce:dc:c0:f0:82:68:1b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57
Validity
Not Before: Jul 13 19:54:41 2026 GMT
Not After : Jul 14 23:45:41 2026 GMT
Subject: CN=62E4847AC671BC276089B5FE410269F02DC3843F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:d2:93:f7:70:1d:58:26:00:07:d0:ae:58:
aa:de:2f:d8:ba:db:02:a8:4d:b1:71:24:9d:31:ec:
97:0c:89:27:ca:d0:ad:c8:72:fa:ef:3a:7c:e2:3d:
29:c7:6d:42:1b:fb:36:85:d4:7c:cd:40:3b:26:05:
5e:81:cc:f5:1c:e2:89:ce:c0:fd:4f:80:0d:6e:4d:
0b:24:3b:58:8b:1c:44:6d:6d:4a:67:2d:c8:ce:7e:
1c:fe:bd:0e:82:07:d8:2d:0c:b5:0a:ac:e7:b7:e7:
c8:9f:11:20:49:d0:e1:6d:8c:5a:12:0d:12:02:23:
db:eb:0f:17:a8:73:9d:e7:ec:e3:ba:bf:15:25:33:
f0:62:e4:1b:06:a8:f1:84:22:b3:ec:c2:8b:27:bb:
73:1a:23:76:92:62:84:3d:a1:f6:bf:1b:24:19:21:
3a:cd:99:f6:bf:14:7f:f3:1f:ad:54:3f:e4:e1:de:
37:74:75:0b:99:0f:a1:58:92:c5:2c:cb:75:12:c3:
86:ce:ad:59:02:32:bc:e0:0e:01:06:9c:df:86:38:
53:a1:00:6a:d7:16:f0:88:ac:b6:c4:6f:5e:37:89:
5a:b8:aa:34:75:e9:34:b1:92:0f:43:98:b5:de:e2:
3a:43:e4:f2:27:c0:c7:7f:92:49:34:2a:ec:82:8c:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E4:84:7A:C6:71:BC:27:60:89:B5:FE:41:02:69:F0:2D:C3:84:3F
X509v3 Authority Key Identifier:
keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:32:f7:6e:12:a9:e4:64:35:99:ee:3d:48:00:7f:4e:a2:6f:
12:a6:83:3c:2e:61:73:d6:6f:17:d4:55:89:03:cf:4a:d0:d3:
dd:a1:0e:15:88:08:6e:1d:54:8a:dd:e2:e3:b4:40:88:44:3f:
64:33:06:55:41:f1:ba:69:8f:ad:7b:ee:70:33:72:9f:77:82:
06:14:7b:93:c6:b8:fa:59:51:ad:19:a2:41:10:fb:8e:42:c0:
07:81:fa:b9:7c:a5:c7:a3:c5:d7:74:6a:f1:05:dd:ad:0b:c0:
2b:e7:57:07:25:52:97:21:3d:11:7b:e5:99:21:8b:e2:20:65:
7c:47:2a:4d:61:3d:0f:39:1b:08:15:52:fa:6b:63:4d:24:6f:
e2:5b:c9:0a:b3:dd:ba:7d:8b:51:17:c7:79:ba:76:85:6b:42:
b5:92:a4:b7:45:99:95:ea:75:6a:46:fd:50:0a:56:2c:5d:cb:
70:b0:03:94:95:4f:60:a9:d4:37:ea:ec:13:7a:ef:36:b6:74:
ce:58:49:70:45:fd:cf:fc:2c:a8:8a:df:a9:d5:67:b3:2e:8a:
5b:cb:25:67:62:fb:68:33:24:84:55:1f:40:2a:54:5c:0e:cf:
61:f8:e4:d2:9c:5d:e7:dc:1a:92:b6:fb:72:13:b5:e3:4b:48:
dc:03:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 21:58:23 2026 by rpki-client