
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
File: 63C9C3AAF95A607F8365E51C375621EF611B029E.mft (raw, json)
Hash identifier: kCbAo5w2M0TFsG3PQtQwA1Uqu+qTuEQZRgH7u9JoaLs=
Subject key identifier: EA:07:60:4D:94:41:6B:AB:F7:46:1E:7E:A5:80:99:3D:4E:F8:22:B4
Authority key identifier: 63:C9:C3:AA:F9:5A:60:7F:83:65:E5:1C:37:56:21:EF:61:1B:02:9E
Certificate issuer: /CN=63C9C3AAF95A607F8365E51C375621EF611B029E
Certificate serial: 4F71D4099699C6B8D101B38371A135BDC918F9A4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
Manifest number: 42
Signing time: Fri 19 Jun 2026 16:45:59 +0000
Manifest this update: Fri 19 Jun 2026 16:40:59 +0000
Manifest next update: Sat 20 Jun 2026 17:34:59 +0000
Files and hashes: 1: 3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (hash: Gj72PKyTW4uThzHAv98WsY3O2r0uo97/yFBA+Iq7xgw=)
2: 63C9C3AAF95A607F8365E51C375621EF611B029E.crl (hash: 9JEOv8evcrYAKwUpf/Rnja5LBaq86pdhc/EQaY3EAfw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.crl
rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 17:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:71:d4:09:96:99:c6:b8:d1:01:b3:83:71:a1:35:bd:c9:18:f9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C9C3AAF95A607F8365E51C375621EF611B029E
Validity
Not Before: Jun 19 16:40:59 2026 GMT
Not After : Jun 20 17:34:59 2026 GMT
Subject: CN=EA07604D94416BABF7461E7EA580993D4EF822B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:af:61:1d:f2:12:c6:2e:75:de:2b:c1:e9:
a1:86:34:5f:25:d7:85:5e:de:36:ea:9d:1b:3a:a2:
ac:0c:06:1b:7d:a3:f6:41:cc:bb:b5:3e:c1:fc:98:
32:e5:8d:01:1f:43:c4:c8:10:a3:71:11:a4:fe:6c:
1d:26:ab:2b:5a:be:e0:86:cc:41:6b:1b:72:95:ec:
47:ea:a6:e1:1c:9f:62:6a:48:ad:ce:7b:bf:31:92:
c8:45:b7:b3:a2:26:9e:b5:59:a1:5f:ad:0f:ab:9a:
21:c5:27:be:36:77:2c:48:8e:de:49:1e:2c:7d:37:
47:b0:99:39:9a:03:4e:21:7f:77:53:d9:00:da:f6:
f4:05:80:41:3b:37:1f:3b:6f:0f:7c:24:88:c5:86:
b0:0b:20:f9:3a:71:4f:11:f1:11:3f:66:6f:cd:be:
41:f5:a9:3a:22:6d:9c:83:b0:2d:77:ee:13:94:22:
31:bf:e1:6a:7f:d0:8f:90:e0:16:5f:1a:98:03:9e:
ee:90:f8:ae:73:7a:c3:a3:11:f0:06:2a:a7:f6:08:
a2:b9:05:28:28:13:cd:bf:37:cb:72:29:be:8f:00:
5b:42:58:3e:8b:43:ab:6d:e5:5f:ae:df:f9:37:5b:
95:a5:62:84:43:29:d8:d4:c3:16:63:df:04:b6:dc:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:07:60:4D:94:41:6B:AB:F7:46:1E:7E:A5:80:99:3D:4E:F8:22:B4
X509v3 Authority Key Identifier:
keyid:63:C9:C3:AA:F9:5A:60:7F:83:65:E5:1C:37:56:21:EF:61:1B:02:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d2:0a:ad:05:fb:b5:de:ac:a6:ad:17:4f:0f:25:5b:a7:e7:
a9:2b:a3:72:55:cc:b7:5f:77:1b:dd:f7:81:2e:ca:86:27:c0:
83:cc:66:b3:94:a0:15:67:5e:a2:19:a9:8b:35:94:a1:20:1f:
24:18:f0:f7:36:df:40:6f:5f:c2:3a:8e:2e:36:21:73:02:d8:
98:20:d0:9b:93:da:db:fb:94:09:22:e8:b0:3a:dd:02:8f:1f:
f1:71:f1:8d:20:a8:39:84:30:c6:a6:b3:41:d2:50:f8:02:02:
30:57:9e:3e:a8:9e:6a:4f:74:64:d6:91:d9:ae:37:dc:09:60:
bc:a2:c4:f3:2d:a5:4c:ea:aa:31:ad:e7:11:0e:ca:48:d0:1c:
51:f4:8d:87:ac:9e:2c:a2:b8:f1:9b:5b:0a:5b:3e:98:a1:2d:
0c:5d:76:c2:36:69:0d:d1:10:06:87:74:d6:87:44:00:95:b2:
2b:ab:6e:c4:37:c2:a6:24:3b:ec:65:81:d3:67:2a:3c:65:d7:
38:16:a1:bf:e8:6d:8d:2e:a8:6d:48:74:c8:1b:02:5d:4c:6e:
90:6e:8a:fd:ae:95:97:35:0b:01:b3:fc:bf:34:4a:d9:a4:47:
89:6f:33:74:ba:a5:bd:fa:27:65:b0:03:c7:77:3a:55:aa:e1:
2f:28:05:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:21:47 2026 by rpki-client