
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
File: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft (raw, json)
Hash identifier: mqMgjdisrYoPc9kVKkiIfyDtYS0WBj9qiDBHohTiR0U=
Subject key identifier: 59:74:C5:BB:C2:0C:E5:38:EE:EF:E6:9A:AC:2F:FE:7E:D0:F6:71:F0
Authority key identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF
Certificate issuer: /CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
Certificate serial: 7F3F784D2839624B5696D0515E1D1ED2B374C212
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 18:48:36 +0000
Manifest this update: Fri 19 Jun 2026 18:43:36 +0000
Manifest next update: Sat 20 Jun 2026 22:32:36 +0000
Files and hashes: 1: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl (hash: iwOMh3Oc3huCpCf2vP1o5ftJiVMEhQfYokd/Nv5N2lY=)
2: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: rh10KjKVWoQwoKdQAU/xuosvzsdN9Rw59HlxfUxCKPU=)
3: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: ArAw1U/ObqC6nylMjrPDR+er3LEvT016ghjJZD3baiw=)
4: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: r+nuLztYujAHMA3h3J8e3UnpoppY1KFa5/V4VYVp7Wg=)
5: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: vO+Q8HZjgmJonBgHOxFWAnJzI9j2ku3exsOHuLSofhs=)
6: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: JbJvmvToLRsj/pbiH1e96nax2mjHa9GpGHMhuuSXERU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl
rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 22:32:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3f:78:4d:28:39:62:4b:56:96:d0:51:5e:1d:1e:d2:b3:74:c2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
Validity
Not Before: Jun 19 18:43:36 2026 GMT
Not After : Jun 20 22:32:36 2026 GMT
Subject: CN=5974C5BBC20CE538EEEFE69AAC2FFE7ED0F671F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:79:1c:bf:6d:1e:e3:66:93:89:80:3a:86:
94:86:07:5e:8b:ee:4d:3a:92:b9:d7:0b:b2:da:32:
56:56:a1:4b:f1:12:7a:7f:ae:88:3e:5c:63:ea:49:
02:26:78:88:ab:dd:7f:4f:4d:38:86:e8:eb:29:4f:
a7:f0:64:65:a0:0b:1c:6d:75:dc:6f:75:a9:43:36:
4b:25:db:9c:c6:53:6c:69:64:68:58:5b:31:98:f6:
c6:6d:2d:ef:e8:54:1e:9e:9a:2e:38:c4:2c:47:b5:
d7:d7:95:23:63:36:8c:3c:88:a6:8c:d5:ae:95:8f:
33:24:51:4d:24:a4:b8:46:d7:5e:39:11:3a:83:6c:
75:7c:f2:eb:8b:1f:84:2f:d4:2d:e7:e0:e9:06:bc:
31:aa:60:bf:7e:76:a9:32:b2:a0:09:2a:e8:fc:09:
51:15:b6:ff:3d:db:21:14:d0:3c:4e:a3:f9:b0:c4:
29:f5:55:14:0f:88:21:84:54:74:1d:90:70:e9:e9:
1f:af:e6:ed:50:cb:2c:17:f9:cc:c9:14:ca:b9:1d:
38:fc:01:3c:7c:a2:49:cb:2a:50:f5:34:52:62:18:
0d:8a:53:64:bc:75:2c:06:53:a2:79:09:a8:6a:ed:
76:17:02:13:18:cc:0b:40:1c:e2:24:b4:ae:5c:57:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:74:C5:BB:C2:0C:E5:38:EE:EF:E6:9A:AC:2F:FE:7E:D0:F6:71:F0
X509v3 Authority Key Identifier:
keyid:B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a0:15:82:3c:8c:16:14:07:b0:f2:93:71:b9:46:2a:08:82:
ce:42:2a:57:c0:c3:04:c7:95:64:52:f6:98:8f:4c:56:7e:45:
bf:f7:08:8b:e1:1d:be:c6:fa:25:2c:84:c6:16:0b:e5:18:1b:
71:c0:3e:fb:46:9e:1d:65:8b:29:7f:da:d5:73:8b:65:6d:a2:
c7:b0:69:6f:27:dd:9f:66:9c:cc:c0:de:a6:2e:bf:f1:d7:79:
d1:c4:12:ec:ab:e1:ea:c3:37:94:33:7f:83:c9:9e:ac:83:aa:
9c:ce:5c:af:fa:d6:1a:c7:a3:f1:11:2d:7a:30:38:24:ed:60:
be:62:2c:53:57:b8:e6:98:fa:f8:47:03:62:a3:d1:61:ed:85:
d7:d1:bb:96:55:cc:a5:43:82:18:ce:7f:7b:d7:b6:2b:f8:08:
23:34:a7:d6:72:b8:a3:73:4c:22:ea:b4:fc:01:d9:cc:cf:87:
de:4c:b1:b3:b5:a5:21:92:a4:32:53:a5:55:63:80:f6:67:b0:
e2:41:45:28:a4:53:c4:c9:97:e7:da:bd:e5:8f:74:d6:bc:42:
96:8c:d3:1c:45:5a:81:1e:38:3c:e1:fa:e9:b7:57:ee:be:7b:
21:fe:6a:9b:94:ef:86:b2:ac:42:90:d5:99:57:bb:9c:70:c2:
e2:11:bb:6c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfz94TSg5YktWltBRXh0e0rN0whIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4
MDc3QjRFRjAeFw0yNjA2MTkxODQzMzZaFw0yNjA2MjAyMjMyMzZaMDMxMTAvBgNV
BAMTKDU5NzRDNUJCQzIwQ0U1MzhFRUVGRTY5QUFDMkZGRTdFRDBGNjcxRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGB3kcv20e42aTiYA6hpSGB16L
7k06krnXC7LaMlZWoUvxEnp/rog+XGPqSQImeIir3X9PTTiG6OspT6fwZGWgCxxt
ddxvdalDNksl25zGU2xpZGhYWzGY9sZtLe/oVB6emi44xCxHtdfXlSNjNow8iKaM
1a6VjzMkUU0kpLhG1145ETqDbHV88uuLH4Qv1C3n4OkGvDGqYL9+dqkysqAJKuj8
CVEVtv892yEU0DxOo/mwxCn1VRQPiCGEVHQdkHDp6R+v5u1QyywX+czJFMq5HTj8
ATx8oknLKlD1NFJiGA2KU2S8dSwGU6J5Cahq7XYXAhMYzAtAHOIktK5cV50vAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWXTFu8IM5Tju7+aarC/+ftD2cfAwHwYDVR0j
BBgwFoAUtkqtYtkC9gi7lf0L0/HaioB3tO8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJE
OTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4MDc3QjRFRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNjRBQUQ2MkQ5MDJGNjA4QkI5NUZEMEJEM0YxREE4QTgwNzdC
NEVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4
ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURB
OEE4MDc3QjRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAICgFYI8jBYUB7Dyk3G5RioIgs5CKlfAwwTH
lWRS9piPTFZ+Rb/3CIvhHb7G+iUshMYWC+UYG3HAPvtGnh1liyl/2tVzi2Vtosew
aW8n3Z9mnMzA3qYuv/HXedHEEuyr4erDN5Qzf4PJnqyDqpzOXK/61hrHo/ERLXow
OCTtYL5iLFNXuOaY+vhHA2Kj0WHthdfRu5ZVzKVDghjOf3vXtiv4CCM0p9ZyuKNz
TCLqtPwB2czPh95MsbO1pSGSpDJTpVVjgPZnsOJBRSikU8TJl+faveWPdNa8QpaM
0xxFWoEeODzh+um3V+6+eyH+apuU74ayrEKQ1ZlXu5xwwuIRu2w=
-----END CERTIFICATE-----
Generated at Sat Jun 20 15:41:59 2026 by rpki-client