
$ rpki-client -vvf rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft
File: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft (raw, json)
Hash identifier: QVYGjv2Lk0GNR0o1LbMwc/sA9Lx0RpkNcOjPAFLnMoU=
Subject key identifier: 64:0D:DA:B2:B4:E9:14:6E:FC:A7:F5:44:34:05:47:A2:89:FE:C5:8B
Authority key identifier: 1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05
Certificate issuer: /CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205
Certificate serial: 05A4502D5C67017EB344A4B90FC7C56293EB6AD7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 01:41:20 +0000
Manifest this update: Fri 24 Jul 2026 01:36:20 +0000
Manifest next update: Sat 25 Jul 2026 04:33:20 +0000
Files and hashes: 1: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: sefAns8WGP+QODtyZI5xSMBLlCAhkEsg1IdG1oXtiJc=)
2: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: krKKJL8xoxgN2wyxvjJrqrqA9vT6YHk/PFCm7/PP3c4=)
3: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl (hash: LOscQ8okbwXDoEPC05CTz+SqxQFtefn/DFaucQUf0ko=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl
rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a4:50:2d:5c:67:01:7e:b3:44:a4:b9:0f:c7:c5:62:93:eb:6a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205
Validity
Not Before: Jul 24 01:36:20 2026 GMT
Not After : Jul 25 04:33:20 2026 GMT
Subject: CN=640DDAB2B4E9146EFCA7F544340547A289FEC58B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:fc:72:5f:4a:cb:56:3b:49:f1:04:42:24:
bc:d6:c5:c2:f9:00:b5:9e:1c:42:13:78:c9:cb:85:
9d:6c:7b:b9:64:6d:fe:24:5b:c9:5d:07:90:68:d4:
c2:8b:45:e4:3f:5c:e3:45:e3:38:51:b5:17:05:e3:
4f:1f:86:dc:f8:28:8a:5a:aa:6d:bb:cd:27:d5:80:
28:f9:f5:64:d3:ac:70:d1:13:78:2b:10:d8:83:93:
ce:5c:03:32:13:85:ea:17:17:cf:17:07:6a:a8:93:
77:26:20:4a:63:6d:a2:94:0e:11:62:8f:04:d0:b1:
57:27:10:25:12:f6:db:b5:af:1d:3a:2b:c7:c7:c4:
55:5e:b0:6f:07:00:05:8b:59:d9:19:7b:8a:30:6b:
86:a4:87:1d:bc:91:a8:f2:05:28:36:df:60:96:28:
31:09:d6:0b:08:85:2d:43:68:09:1b:da:43:ec:09:
a2:8b:56:17:e0:1b:74:fb:b3:b5:97:17:8d:ea:d3:
ed:d9:88:b2:ec:69:fc:61:3b:de:a4:ad:ac:5a:a5:
8d:1c:59:b1:cb:7a:a7:6c:cb:9b:03:4a:d0:ca:fa:
1a:47:b2:74:f5:85:4f:74:13:f3:44:39:ab:33:92:
8e:be:17:98:b2:91:8f:a9:63:38:6c:4e:8a:b7:27:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0D:DA:B2:B4:E9:14:6E:FC:A7:F5:44:34:05:47:A2:89:FE:C5:8B
X509v3 Authority Key Identifier:
keyid:1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a6:b4:c0:d2:4d:a9:07:65:d0:44:2f:f6:bb:c2:e4:f9:20:
17:0a:10:c9:8c:38:6b:9a:b7:c9:ab:6e:80:50:d0:4e:86:49:
14:e6:08:d4:9c:79:ec:91:4e:51:d9:21:6d:18:43:7a:36:32:
01:9f:de:ac:f0:bb:ab:87:39:5e:0f:41:81:d3:8a:a5:93:ea:
ee:bc:8c:da:4a:42:da:4b:d7:59:b7:42:23:c8:c2:6c:67:fc:
cf:e9:70:63:0a:69:5e:cd:5f:21:77:cd:8e:d0:a8:be:89:ea:
e1:69:40:54:ed:69:73:8d:ac:d2:22:fe:fe:a3:2e:01:d3:42:
8d:98:4e:6b:ed:57:26:cf:09:e8:22:cb:7b:f0:61:63:a5:22:
0f:16:a9:35:66:2a:16:50:ea:8e:9e:2c:c6:5c:ca:ea:11:bd:
81:4f:7f:91:7a:b0:f3:ec:85:eb:14:d0:e4:e2:1f:ef:95:6e:
1c:ee:6a:67:c7:85:70:e4:39:7e:37:cb:03:42:a8:d3:5a:17:
d0:e7:72:2a:cf:64:0e:9c:69:1e:14:d1:ce:f2:8c:40:93:31:
72:2f:c1:e6:09:5b:1a:58:41:d5:28:15:3d:e7:d0:10:b4:8d:
2b:ba:af:8b:4f:16:52:66:fc:64:da:99:c3:4d:fa:57:61:bb:
a3:ee:a7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:54 2026 by rpki-client