
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft
File: 63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft (raw, json)
Hash identifier: rI686q3T0apbsp6P/Or8dnQWvI9jAlLXP+129pUISDU=
Subject key identifier: FF:5C:C4:FF:4B:08:32:40:FC:66:2D:A5:4D:39:B3:06:60:6E:F2:C5
Authority key identifier: 63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42
Certificate issuer: /CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42
Certificate serial: 29F4998C559B5C53BE102BD597B9EA1AA714C863
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 04:23:55 +0000
Manifest this update: Thu 17 Sep 2026 04:18:55 +0000
Manifest next update: Fri 18 Sep 2026 08:11:55 +0000
Files and hashes: 1: 3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa (hash: SBuezJoeFSmiJFbpK3vYJJG/KYxSwTomdhAqA9qmqSc=)
2: 63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl (hash: e4hEMolq6dvArN/qdA9RR4QDqDEfF66ahHJSU0uuT3I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl
rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 08:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f4:99:8c:55:9b:5c:53:be:10:2b:d5:97:b9:ea:1a:a7:14:c8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42
Validity
Not Before: Sep 17 04:18:55 2026 GMT
Not After : Sep 18 08:11:55 2026 GMT
Subject: CN=FF5CC4FF4B083240FC662DA54D39B306606EF2C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:f9:74:bf:24:23:fe:26:07:5d:7f:bf:f8:
d6:86:57:38:39:51:f3:c0:0f:5a:fa:28:71:cb:b9:
8c:7d:6a:0f:08:2f:b3:0c:88:1f:db:95:a6:87:72:
f1:78:10:bc:57:59:29:c1:64:4b:79:22:9d:6b:02:
6d:61:e4:88:81:cf:82:52:5a:96:18:ef:dc:fc:bf:
dd:00:79:0a:c0:3d:34:67:4d:a7:30:c7:03:18:91:
96:e4:1b:3d:2b:95:40:a0:ac:de:1b:b6:7a:33:16:
c8:bf:5c:95:6c:57:62:43:b3:d2:65:4d:cd:3d:14:
6b:f7:ba:5e:cf:a9:2e:f8:19:4e:23:71:8c:ce:51:
a8:4f:22:d4:f2:45:7b:f4:e0:99:23:ef:2d:7b:f2:
e3:86:b8:43:f0:4a:51:73:e2:a4:b7:f0:da:68:57:
52:16:04:bc:c4:38:f4:c6:5f:c0:59:a6:f4:7d:69:
43:c5:53:f4:8b:2b:de:2b:9e:11:f9:ec:37:7d:f2:
5e:72:6a:23:df:6f:04:4e:6c:b6:d5:bc:91:8d:f9:
5c:d3:7a:06:ba:98:55:fa:91:79:85:ad:47:c9:f5:
f9:1b:e6:79:c8:fb:04:19:bd:4d:ff:91:47:2d:2c:
ba:d8:86:51:47:7a:dd:54:e4:59:8a:02:df:62:2d:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5C:C4:FF:4B:08:32:40:FC:66:2D:A5:4D:39:B3:06:60:6E:F2:C5
X509v3 Authority Key Identifier:
keyid:63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:dd:3a:87:c8:92:53:56:7c:8a:47:d4:96:a0:e2:1a:4e:7d:
c5:5d:1c:9c:fb:7a:33:bf:58:b4:82:67:e9:17:1c:1b:89:c6:
e1:79:90:e6:83:8f:dc:58:98:e9:18:e2:08:9c:5d:49:80:72:
6d:0f:62:50:41:04:1d:fb:8e:9d:cf:39:b9:18:cf:87:69:f5:
91:72:e1:1b:5b:57:7d:6f:ab:c9:27:02:4d:9d:50:75:da:32:
e9:ee:68:03:e5:eb:85:a9:6b:14:c2:94:48:01:44:62:5a:02:
1d:d2:25:1a:ea:4c:52:79:f6:e7:7f:37:e4:44:51:66:01:16:
51:56:a7:65:9f:b7:cd:18:d0:e5:e3:29:6e:87:67:6c:41:bf:
e6:e1:b8:a4:bb:34:a4:04:c1:52:02:3a:1b:68:73:8f:ac:53:
84:5d:ce:22:8c:14:a2:06:dd:8e:38:40:89:fe:b3:74:05:57:
48:b2:d4:f6:cd:c9:15:6a:97:d1:cc:2a:33:52:58:84:d4:f1:
3b:58:4b:0a:10:53:7a:57:a4:37:df:b9:b4:18:82:f5:78:fd:
fb:9b:27:96:9d:14:25:c5:b9:10:c5:32:9d:b3:d0:8e:6c:2d:
54:6b:42:c3:86:a6:c1:4a:45:1e:28:c4:e4:dd:53:da:8d:e2:
e0:c4:26:77
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKfSZjFWbXFO+ECvVl7nqGqcUyGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNEQjJDRDc3QjNERjk1QUMwRjlGQzVCQkI4NUM2MzM0
QUNENUE0MjAeFw0yNjA5MTcwNDE4NTVaFw0yNjA5MTgwODExNTVaMDMxMTAvBgNV
BAMTKEZGNUNDNEZGNEIwODMyNDBGQzY2MkRBNTREMzlCMzA2NjA2RUYyQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHOPl0vyQj/iYHXX+/+NaGVzg5
UfPAD1r6KHHLuYx9ag8IL7MMiB/blaaHcvF4ELxXWSnBZEt5Ip1rAm1h5IiBz4JS
WpYY79z8v90AeQrAPTRnTacwxwMYkZbkGz0rlUCgrN4btnozFsi/XJVsV2JDs9Jl
Tc09FGv3ul7PqS74GU4jcYzOUahPItTyRXv04Jkj7y178uOGuEPwSlFz4qS38Npo
V1IWBLzEOPTGX8BZpvR9aUPFU/SLK94rnhH57Dd98l5yaiPfbwRObLbVvJGN+VzT
ega6mFX6kXmFrUfJ9fkb5nnI+wQZvU3/kUctLLrYhlFHet1U5FmKAt9iLTFzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/1zE/0sIMkD8Zi2lTTmzBmBu8sUwHwYDVR0j
BBgwFoAUY9ss13s9+VrA+fxbu4XGM0rNWkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjI2MGYwM2MtODk2OC00NzBmLWI2MTgtZDNlYjJjOTI4YTRkLzAvNjNEQjJDRDc3
QjNERjk1QUMwRjlGQzVCQkI4NUM2MzM0QUNENUE0Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82M0RCMkNENzdCM0RGOTVBQzBGOUZDNUJCQjg1QzYzMzRBQ0Q1
QTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI2MGYwM2MtODk2OC00NzBmLWI2
MTgtZDNlYjJjOTI4YTRkLzAvNjNEQjJDRDc3QjNERjk1QUMwRjlGQzVCQkI4NUM2
MzM0QUNENUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMXdOofIklNWfIpH1Jag4hpOfcVdHJz7ejO/
WLSCZ+kXHBuJxuF5kOaDj9xYmOkY4gicXUmAcm0PYlBBBB37jp3PObkYz4dp9ZFy
4RtbV31vq8knAk2dUHXaMunuaAPl64WpaxTClEgBRGJaAh3SJRrqTFJ59ud/N+RE
UWYBFlFWp2Wft80Y0OXjKW6HZ2xBv+bhuKS7NKQEwVICOhtoc4+sU4RdziKMFKIG
3Y44QIn+s3QFV0iy1PbNyRVql9HMKjNSWITU8TtYSwoQU3pXpDffubQYgvV4/fub
J5adFCXFuRDFMp2z0I5sLVRrQsOGpsFKRR4oxOTdU9qN4uDEJnc=
-----END CERTIFICATE-----
Generated at Thu Sep 17 09:15:45 2026 by rpki-client