
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
File: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft (raw, json)
Hash identifier: DG3/aAaFyYBTkI2UopMeOTYTWW60GiwM+pVKqv5FkTY=
Subject key identifier: ED:94:03:FE:52:75:3A:28:6D:17:B9:E2:2B:9F:4D:A7:86:59:02:23
Authority key identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49
Certificate issuer: /CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549
Certificate serial: 14B0BB03D9075ED46A5B3C062C154430A02AC123
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 23:08:08 +0000
Manifest this update: Thu 23 Jul 2026 23:03:08 +0000
Manifest next update: Sat 25 Jul 2026 02:21:08 +0000
Files and hashes: 1: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: bsuMGNaULmyW/rNtR+yZTvUpMTve5vTq9u9xZYBiDgE=)
2: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl (hash: wQ9PN48uy05K1GP/nCxG1JJq5hr6WwR+dq/nAgGvPyU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl
rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:b0:bb:03:d9:07:5e:d4:6a:5b:3c:06:2c:15:44:30:a0:2a:c1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549
Validity
Not Before: Jul 23 23:03:08 2026 GMT
Not After : Jul 25 02:21:08 2026 GMT
Subject: CN=ED9403FE52753A286D17B9E22B9F4DA786590223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:f4:3f:93:72:0c:41:cf:bc:b2:3c:09:09:
77:ff:1d:e4:90:5a:91:54:03:18:22:84:22:41:c2:
24:1e:55:7c:a0:49:52:b1:6a:ad:fc:fa:1e:01:48:
d8:8a:17:e2:b7:67:32:70:a7:9a:42:32:d5:d2:8d:
50:f6:39:42:2b:07:1e:87:f0:42:48:4c:6c:33:fb:
62:ae:f5:34:5b:77:a2:02:54:0a:9a:f4:39:ad:a6:
cb:39:c3:27:15:65:91:0e:1e:06:c8:fb:ad:2f:13:
75:99:56:4a:f0:2b:f3:61:12:58:20:54:77:40:64:
29:15:bd:84:7c:87:55:8b:29:d6:99:df:f5:75:bb:
1d:fb:64:7b:e7:c4:70:e7:40:a8:c5:dd:0a:6e:84:
a3:78:54:1f:c5:2a:67:d2:41:99:c9:c8:3c:e5:bf:
ee:b5:1d:4c:03:7c:ab:48:b6:70:fd:7a:ea:5a:34:
5f:85:86:35:2b:e4:8f:c8:01:b3:6e:eb:b0:8b:bb:
ba:7f:9e:b6:9f:bf:62:d6:1e:93:30:c6:09:0f:21:
55:6a:fc:49:e8:13:8c:ae:21:2e:63:50:79:87:d5:
84:66:f0:9c:15:d9:2e:49:94:ee:8d:4b:f9:da:13:
3b:88:39:bb:e5:52:27:a8:7f:5c:5c:1b:e2:fe:73:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:94:03:FE:52:75:3A:28:6D:17:B9:E2:2B:9F:4D:A7:86:59:02:23
X509v3 Authority Key Identifier:
keyid:97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e3:07:79:05:d1:2d:ae:a2:23:3f:d3:6d:c0:87:c0:e9:d6:
2f:5d:af:01:63:68:66:4a:74:5a:e9:6b:57:53:b3:8d:52:b0:
1a:85:91:fe:43:6e:a9:d1:cd:4f:9a:8c:74:bb:0c:19:bf:08:
f9:b6:65:a9:0e:ea:b9:2b:39:51:62:ce:94:dc:ae:01:98:08:
e6:96:82:ae:94:a5:7f:af:26:2a:3b:46:f3:75:9e:1b:b9:5f:
36:7e:52:1c:e6:ab:94:3e:96:15:06:73:55:04:41:67:07:ab:
fd:f5:95:39:f3:b9:2d:a7:be:e2:e3:ed:ac:a4:aa:00:9a:c6:
97:28:8c:f1:2d:5f:e0:a0:f1:84:c1:3e:32:c0:2b:53:c8:9d:
42:e7:09:cd:0a:86:f2:40:4c:fe:7d:9f:eb:ea:d8:99:e2:fc:
c5:da:57:99:b3:73:af:04:02:94:27:11:26:5d:b5:18:ec:b0:
b7:7b:11:48:d2:2a:47:17:bf:c4:89:91:9d:2f:a0:5c:c6:d9:
86:7b:9f:1f:0d:40:a6:d7:8e:6b:c9:d4:be:f9:33:23:77:73:
97:8e:cf:ca:17:df:2b:7f:9a:8d:8e:ac:6b:06:cc:25:44:65:
7e:1b:1c:46:28:73:45:62:e0:bb:7d:17:fc:7f:fe:43:95:1a:
0a:7a:6d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:36 2026 by rpki-client