
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft
File: F576D7187FE092471757158DEF85D92023BB827A.mft (raw, json)
Hash identifier: pgteCzOJAWSdgt4WB2ORcjrtGdofwoJP+yePeGhXYAc=
Subject key identifier: 53:B1:40:10:75:40:6E:7E:55:C4:03:F3:B3:28:E5:2D:82:2A:C9:94
Authority key identifier: F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A
Certificate issuer: /CN=F576D7187FE092471757158DEF85D92023BB827A
Certificate serial: 59AB4708AEAA0891D45C7019F6FF3C8D36908D6A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft
Manifest number: 66
Signing time: Fri 17 Jul 2026 13:24:28 +0000
Manifest this update: Fri 17 Jul 2026 13:19:28 +0000
Manifest next update: Sat 18 Jul 2026 17:20:28 +0000
Files and hashes: 1: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: 4zXAf/L+AniN8j9yaENVjCZM42RaS1KRlWjNorgEXzk=)
2: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: rVdmDzQFD5XQKuWG8ocH4/yOjCGzvuLA3P7Uzu2MMmg=)
3: 3136302e32352e3132362e302f32332d3233203d3e20313534343130.roa (hash: D7D7+eNACx2VPV6VDU/GlsPiDsYcZqOGcWBVAzfAkao=)
4: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (hash: 6Qo8l/n/t0M13iYl+2beLLikwdIbh6DFG76tlW903nY=)
5: F576D7187FE092471757158DEF85D92023BB827A.crl (hash: v3sJyx1dTjdIAJdSnD6LUHswM2W8DDtwSN7KCbaJRe0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl
rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 17:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ab:47:08:ae:aa:08:91:d4:5c:70:19:f6:ff:3c:8d:36:90:8d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F576D7187FE092471757158DEF85D92023BB827A
Validity
Not Before: Jul 17 13:19:28 2026 GMT
Not After : Jul 18 17:20:28 2026 GMT
Subject: CN=53B1401075406E7E55C403F3B328E52D822AC994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:25:7c:ea:c1:44:e8:90:6c:f7:f6:a5:b7:
0d:f0:55:92:af:cc:06:1f:23:97:e5:07:5a:f5:a7:
fc:d7:cd:63:da:14:80:05:1f:2d:ed:81:af:bb:f9:
84:f7:b9:c4:9e:c1:3e:b0:d1:95:6b:a7:38:58:a2:
c1:8e:1a:aa:5f:6b:58:e1:07:e0:46:bb:b2:32:cf:
ec:b4:00:78:97:3f:29:83:40:f0:4d:f5:51:9c:4b:
da:b0:33:b1:01:2d:4d:12:53:bd:ba:fa:21:e5:4d:
94:4e:67:3c:ba:e1:a3:53:b4:70:2c:54:e0:d3:13:
4a:b1:cf:3d:09:95:25:95:51:33:20:8c:b9:fc:c4:
c0:2d:0b:95:b1:bf:bd:25:c3:cd:90:6b:25:ee:d2:
27:71:68:af:a9:aa:fd:86:00:90:61:84:01:28:18:
f2:c3:8f:87:e6:04:ce:29:df:a0:0f:c0:85:7a:1f:
61:af:51:d4:ad:ed:27:bc:e4:01:cd:83:ae:4b:18:
58:41:59:68:90:31:fa:93:f0:90:65:24:ba:37:ab:
a5:0d:bc:04:9b:a6:64:6d:8d:ad:77:af:a6:8a:65:
c2:de:73:27:e6:12:07:29:0c:5c:ce:1e:aa:09:1c:
13:ad:05:95:f5:5d:05:44:b2:b6:00:4d:ae:1c:bc:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B1:40:10:75:40:6E:7E:55:C4:03:F3:B3:28:E5:2D:82:2A:C9:94
X509v3 Authority Key Identifier:
keyid:F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:67:b4:9e:79:8b:f5:d5:b7:47:75:c0:43:a1:80:f2:cd:bf:
ba:f4:1d:80:17:4a:56:35:ac:2c:b9:ec:6f:01:25:d3:ab:7a:
26:96:39:7d:63:9d:08:8d:7a:11:9f:60:2a:e3:c3:55:2b:1f:
e5:d5:10:ea:29:54:b1:c6:ed:90:d1:0f:99:b9:a9:c7:fd:37:
68:ae:44:a2:f0:e2:5e:be:2f:1f:0b:9a:e8:de:0b:73:dd:a0:
f2:a5:5d:cd:ff:c7:3a:00:34:70:8f:e3:f8:48:b5:59:cc:81:
00:f3:6d:d1:45:e1:e1:39:f0:1b:e0:a6:db:a0:fd:c2:dd:be:
28:12:bc:c4:6e:0d:c1:64:1a:28:13:c6:e8:27:59:85:71:5e:
14:a5:4e:c6:7d:dd:30:ae:74:74:b0:a3:29:7f:4c:ae:4b:d3:
95:cc:3e:17:28:0f:24:82:73:a7:2a:9f:cc:cd:31:7e:91:52:
e4:d8:d7:a2:29:d5:c2:bf:de:d6:f8:73:48:a3:f7:22:92:4e:
18:d0:3f:31:14:3c:4a:36:10:fb:7e:a9:6f:34:75:27:73:ad:
37:79:05:82:db:e3:74:47:c1:48:0d:32:f1:ba:f1:51:21:9a:
43:56:e5:a4:3c:9e:0e:2e:26:b2:05:90:27:c5:1f:d6:77:58:
0f:f6:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:17:38 2026 by rpki-client