
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
File: 6392804C8E02387641837CC130058F05667A805F.mft (raw, json)
Hash identifier: PcSxeFdPW17Q3l6M39fK4P3N/vuMM9oCxN5xGepj2f0=
Subject key identifier: 39:32:DD:EC:15:18:1C:EE:72:B0:3F:CF:A7:6D:87:BA:B8:3B:53:50
Authority key identifier: 63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F
Certificate issuer: /CN=6392804C8E02387641837CC130058F05667A805F
Certificate serial: 20B2E16E5ABC5492E4B268A2106328C291630199
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 18:33:18 +0000
Manifest this update: Fri 19 Jun 2026 18:28:18 +0000
Manifest next update: Sat 20 Jun 2026 21:50:18 +0000
Files and hashes: 1: 3130332e3132392e3232312e302f32342d3234203d3e20313338303632.roa (hash: TRMnk8iAgB4rpOEvi1c2ELL28OXN6Zn5l8OWp2rvcOg=)
2: 6392804C8E02387641837CC130058F05667A805F.crl (hash: fmMldgtJRvexAeIRN5EYP1g/oJF8AkupR+9i/atkSeQ=)
3: 3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (hash: SLlp2TgUJDxKzIChZFNu8nUMQolYFP9BFrEaRb9z5dQ=)
4: 3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa (hash: pPJq2G46Sz99bsDL9wBJRoipwgn9lZRSYh+JhFJc+0o=)
5: 3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (hash: l3e6649ftGy/RyoIrij/BvUADN52ueYZyLhMioJKOn8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl
rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 21:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b2:e1:6e:5a:bc:54:92:e4:b2:68:a2:10:63:28:c2:91:63:01:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6392804C8E02387641837CC130058F05667A805F
Validity
Not Before: Jun 19 18:28:18 2026 GMT
Not After : Jun 20 21:50:18 2026 GMT
Subject: CN=3932DDEC15181CEE72B03FCFA76D87BAB83B5350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:19:a5:ff:bf:f2:ab:6e:f0:d5:d8:83:c2:
67:d2:6b:f1:f4:4c:b5:2b:32:d8:24:fd:90:c4:37:
3f:f3:0b:10:0d:bb:89:6d:f1:2a:5f:ea:a9:09:60:
a9:ad:71:fe:10:6a:e7:22:39:44:9b:c3:f3:85:96:
ac:1b:00:f1:62:69:20:ce:25:60:e2:1b:b9:90:8d:
58:a5:7f:78:49:ce:e7:ca:9b:e2:1f:d5:ec:3b:c0:
50:1f:21:f3:2a:f7:29:ad:4b:2b:f5:74:9c:e5:70:
50:74:bc:83:64:39:50:2f:44:b4:13:6f:58:39:f1:
c6:f1:5d:5c:d1:bd:26:37:4f:a6:ca:e7:3d:ab:8b:
8b:25:e9:64:e4:04:81:3e:81:e2:36:5e:95:1f:57:
c9:16:7d:e7:b6:f5:dd:9e:14:de:14:87:aa:12:1e:
2d:48:85:d3:95:7a:24:76:18:e8:8a:11:6d:24:94:
d8:89:b2:d3:86:fb:7e:65:1c:8a:03:e5:57:33:82:
19:29:53:a7:d5:02:95:eb:5d:50:21:ff:7c:fb:78:
91:76:2c:f2:fb:49:43:91:5d:e5:4f:e2:7e:a2:4f:
3f:3c:b4:02:0e:4a:88:bc:2f:2e:71:30:dd:63:57:
ca:79:87:1a:ea:99:5e:83:a7:4a:2c:b3:6b:76:4a:
28:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:32:DD:EC:15:18:1C:EE:72:B0:3F:CF:A7:6D:87:BA:B8:3B:53:50
X509v3 Authority Key Identifier:
keyid:63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:12:53:dd:52:d9:34:27:5a:09:4c:c9:7f:ae:a0:8b:07:92:
27:b5:f3:81:c9:72:bd:93:cd:d3:a4:96:2c:1e:8e:84:cf:0f:
c6:48:cf:88:78:44:f6:14:65:71:98:e6:93:5f:d8:23:59:09:
66:80:38:c3:2c:6e:25:0f:51:65:29:da:23:06:7f:fa:18:01:
4e:e4:30:d1:e5:b7:2c:10:46:7f:a9:a8:8e:ff:7b:8c:67:9a:
ac:55:09:a2:c6:4d:ad:b5:32:1d:8f:2e:fb:57:b8:c2:8d:3b:
da:02:9d:47:31:57:23:4f:53:21:79:af:f6:fa:16:73:04:9a:
ad:18:c2:39:4f:e5:9d:36:b5:10:c5:91:29:a4:3f:6e:4e:b3:
08:7d:b9:98:3b:7e:2a:14:14:e5:2b:2c:90:2c:9a:5c:b5:11:
1a:18:bc:1b:21:61:e1:c7:db:8e:35:c3:58:b8:26:e9:d9:28:
18:cc:c0:fb:dc:e7:ad:ce:63:24:ca:16:97:ba:82:f3:26:50:
54:ed:f9:41:e5:dd:76:01:4c:16:95:6d:65:e4:3a:6f:4f:60:
d0:e0:8d:94:cc:71:63:7c:c6:a9:7e:7e:01:6c:b3:c1:0f:6e:
fd:93:27:ee:63:b4:a7:3a:cf:18:4e:0d:48:7f:32:62:cc:df:
30:62:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:21:08 2026 by rpki-client