
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
File: 63C9C3AAF95A607F8365E51C375621EF611B029E.mft (raw, json)
Hash identifier: Zuiv/+oasedyEnVfiNLgzSkCOioTpVrdmI4JnzoYckg=
Subject key identifier: 15:D4:CA:09:20:FD:94:F3:17:18:26:53:1C:E0:10:07:7B:57:18:E1
Authority key identifier: 63:C9:C3:AA:F9:5A:60:7F:83:65:E5:1C:37:56:21:EF:61:1B:02:9E
Certificate issuer: /CN=63C9C3AAF95A607F8365E51C375621EF611B029E
Certificate serial: 2237803759028214868B18135606A6B4FABB64DB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
Manifest number: EC
Signing time: Sun 25 Oct 2026 01:15:38 +0000
Manifest this update: Sun 25 Oct 2026 01:10:38 +0000
Manifest next update: Mon 26 Oct 2026 01:20:38 +0000
Files and hashes: 1: 63C9C3AAF95A607F8365E51C375621EF611B029E.crl (hash: GDqi7C9f9GPMfmQ87yj1803bJEljxstJOMv9QpIiK94=)
2: 3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (hash: Gj72PKyTW4uThzHAv98WsY3O2r0uo97/yFBA+Iq7xgw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.crl
rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:37:80:37:59:02:82:14:86:8b:18:13:56:06:a6:b4:fa:bb:64:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C9C3AAF95A607F8365E51C375621EF611B029E
Validity
Not Before: Oct 25 01:10:38 2026 GMT
Not After : Oct 26 01:20:38 2026 GMT
Subject: CN=15D4CA0920FD94F3171826531CE010077B5718E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:f1:08:a4:05:25:60:5e:51:49:e4:68:26:
84:2f:2e:fc:0d:78:9d:50:b4:2d:ab:2b:0a:2c:67:
a4:5e:06:fa:59:bd:c3:5f:9b:18:f3:49:f3:15:9e:
f7:65:14:10:72:06:50:4c:7f:cc:be:83:9f:b7:25:
ba:d8:4d:d2:2e:30:55:fc:d2:3a:69:bf:d2:c7:b7:
aa:aa:cc:d5:16:16:83:cc:c8:82:e7:6a:68:f1:9c:
c1:35:72:2c:e5:19:16:18:b2:2a:2b:06:c0:1b:a4:
9a:85:4b:dd:be:c4:47:60:61:03:34:58:7b:15:12:
06:a6:de:de:ff:17:ee:40:20:e2:99:1b:b4:0e:e0:
1b:56:8d:84:ab:83:d9:f9:e2:c4:d1:a3:8b:c7:a4:
ed:bf:a8:3f:3d:dd:a6:eb:b8:3f:2f:08:ef:4d:66:
cd:32:fd:c9:db:0a:96:58:77:97:aa:fa:81:62:95:
f0:50:0a:71:dc:11:d6:a5:f9:be:d7:af:bb:97:a7:
74:fc:f7:ba:f7:e7:2b:1d:ee:13:aa:ca:df:40:63:
a4:94:b2:52:f6:0e:92:9a:59:e3:3e:01:63:09:74:
99:c2:43:46:79:b7:e0:bb:a2:78:c1:80:29:1b:a0:
6f:bc:0c:2d:51:43:74:3e:3d:85:af:89:3c:92:c0:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D4:CA:09:20:FD:94:F3:17:18:26:53:1C:E0:10:07:7B:57:18:E1
X509v3 Authority Key Identifier:
keyid:63:C9:C3:AA:F9:5A:60:7F:83:65:E5:1C:37:56:21:EF:61:1B:02:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6e:e6:3d:ad:5c:71:4b:92:05:77:b8:6b:b5:e1:e2:95:a9:
cd:80:f1:bc:74:4c:03:a3:5b:9b:1e:5f:07:03:1a:ae:be:e4:
6d:da:1d:c3:2d:5c:c5:81:c3:1f:13:c0:3b:c7:f8:c0:2e:6d:
d8:14:16:78:1c:c8:9f:17:f0:2f:e7:c7:ee:a8:46:61:4d:1d:
d6:58:bd:3d:74:cd:f9:b8:21:d5:46:42:fe:3f:f5:82:1e:69:
fa:7b:b9:89:17:06:36:f0:51:91:ea:f5:87:97:7d:1e:8c:75:
8e:87:c7:b7:e6:ea:8b:24:16:00:e9:38:4d:04:b0:65:77:81:
13:f9:a8:3b:22:ea:7d:8b:49:73:a9:39:9b:1f:6f:f1:27:90:
4b:d6:01:58:ed:8f:e0:03:2e:f6:23:38:1a:4a:f6:ce:12:2a:
5c:ae:16:80:20:7d:83:f5:d8:07:03:45:3a:39:eb:7a:fd:09:
3b:20:bb:e9:08:04:8f:1b:77:f8:09:bd:23:e8:dc:95:90:cc:
4f:6d:f8:40:11:c5:34:92:c5:a1:e5:13:aa:e7:af:f7:46:06:
3f:ae:61:bc:92:41:bb:52:95:cf:ab:fe:cc:62:f6:01:ac:8c:
8c:a6:9c:cc:36:46:3f:fa:68:63:60:d6:4b:2e:38:18:00:aa:
d0:42:c2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:02:33 2026 by rpki-client