
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
File: 2677581645A49D82B36AA830484865F4B9D0FC43.mft (raw, json)
Hash identifier: ztpRCrxBGThYPKkzscZAX2WU6V9n1GO/CZ5y5eDQbEI=
Subject key identifier: 75:F5:78:D6:95:B9:C1:DA:0D:12:32:69:D4:78:C3:C8:BB:9B:0E:27
Authority key identifier: 26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43
Certificate issuer: /CN=2677581645A49D82B36AA830484865F4B9D0FC43
Certificate serial: 206441E2BB162C1858FA5D93020729E0EBC1BDCB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 14:53:08 +0000
Manifest this update: Thu 23 Jul 2026 14:48:08 +0000
Manifest next update: Fri 24 Jul 2026 17:54:08 +0000
Files and hashes: 1: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: ePHUQHjUtQqmubSQINVLXHx5bVCNeo3QJkNOBue6jYg=)
2: 2677581645A49D82B36AA830484865F4B9D0FC43.crl (hash: PzIujeWJZYuFyjjhrtdkAXMdHXtCT7TgisP4iAt9BQE=)
3: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: 5qL4Akm0PbHI3eo3BSoRkovQkTSvAIBUTKI6uUAYPHA=)
4: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zMOWhJqH1J6fUN/OnJAxp19ayumIrg3uRIfyARwlsqI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl
rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:64:41:e2:bb:16:2c:18:58:fa:5d:93:02:07:29:e0:eb:c1:bd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2677581645A49D82B36AA830484865F4B9D0FC43
Validity
Not Before: Jul 23 14:48:08 2026 GMT
Not After : Jul 24 17:54:08 2026 GMT
Subject: CN=75F578D695B9C1DA0D123269D478C3C8BB9B0E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:18:28:90:1b:5a:32:15:06:86:2b:7a:ba:
4d:85:64:a8:6a:70:a5:98:64:d4:14:23:97:31:82:
97:a0:56:87:50:8c:dd:f3:32:b6:d4:ca:da:17:b7:
25:da:5a:5a:71:6b:8b:1b:53:b0:1c:b1:64:26:97:
50:fe:46:b9:d5:80:29:59:97:70:f2:cf:bb:dd:cb:
2b:93:99:16:23:f2:a7:fe:d6:ab:1e:d3:ac:f9:52:
11:c9:16:a0:f1:90:5d:63:24:4b:52:30:4c:02:3b:
b6:49:00:8a:4d:86:e4:24:a8:17:2e:01:e9:50:2d:
f3:f9:42:e7:fc:55:0a:aa:ee:86:9b:dc:1b:f4:31:
2a:6b:53:13:b9:57:c6:b4:8e:ea:d0:48:56:aa:0c:
e7:cc:72:63:b4:22:3c:a5:89:6b:e5:d1:8b:48:03:
1a:43:ea:43:de:38:22:fa:0c:3c:8d:86:43:45:bd:
b3:05:d2:35:73:2b:51:fb:5b:01:0d:b4:eb:ea:cc:
78:92:0c:21:07:85:33:5b:26:c4:7c:1e:86:03:33:
5e:b3:97:f0:55:80:01:96:ff:2c:b0:8b:b3:17:e7:
10:6e:c4:5a:ca:e4:1e:10:85:57:36:85:f7:86:48:
44:b5:80:e7:e2:15:84:8c:50:a1:e3:f2:57:ec:6c:
88:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F5:78:D6:95:B9:C1:DA:0D:12:32:69:D4:78:C3:C8:BB:9B:0E:27
X509v3 Authority Key Identifier:
keyid:26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e0:6b:10:e3:aa:6f:3f:21:86:52:b6:8b:2c:ef:27:6b:16:
ba:28:fe:ee:8b:2e:0f:6d:0f:11:9b:24:0c:8a:00:d8:f7:0c:
0e:99:cd:8f:11:91:37:db:ec:c5:57:a7:79:85:26:13:ba:e8:
8f:ce:40:40:a9:7d:a3:a7:5e:d4:24:1c:db:c8:8a:ca:3c:3f:
ab:b3:8b:e9:d4:c6:ce:12:53:c3:ae:e2:c0:6c:e8:72:06:82:
9b:5a:7e:52:99:dd:c2:73:70:3f:e9:1c:54:6f:e3:f6:5f:8d:
0e:09:80:5a:b1:70:6d:29:24:9a:93:b8:bb:fd:1a:36:4d:a2:
cd:da:2e:8d:ae:e5:47:d3:47:a6:5e:80:b7:28:78:da:c9:0a:
d5:9e:e4:a7:ae:6b:6f:9a:93:82:1d:a1:2c:5c:bb:48:f7:c2:
ff:f1:01:b7:00:b5:c3:b4:17:18:2e:c8:5a:da:d9:51:8d:b7:
da:03:75:ff:10:62:dd:bd:c4:b1:5a:db:02:32:8e:f6:f9:dc:
9b:0e:e7:64:1f:c5:8a:4b:c6:ff:80:89:1f:31:5e:84:34:86:
57:94:92:19:9e:e7:95:36:82:51:7e:6e:66:25:e8:32:a0:34:
c7:2a:eb:29:c4:aa:7a:04:82:03:df:21:50:22:76:af:ca:f2:
11:0b:87:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:40 2026 by rpki-client