
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft
File: 498FC3DB03528A64214589740CA13E84E4775306.mft (raw, json)
Hash identifier: fZXIHwbtbYxglA98uo8OmQPuR+jvGV6fz6fhxGfkSRk=
Subject key identifier: 20:08:C7:EC:10:F8:EC:2B:43:E4:84:A0:8B:1A:95:5E:A5:C6:AC:C0
Authority key identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06
Certificate issuer: /CN=498FC3DB03528A64214589740CA13E84E4775306
Certificate serial: 7540E59387F2AFF6A00E543D19FCDEF159061753
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 02:22:13 +0000
Manifest this update: Fri 24 Jul 2026 02:17:13 +0000
Manifest next update: Sat 25 Jul 2026 04:18:13 +0000
Files and hashes: 1: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: Qd4itvWRyprHNdVdvUE1w9SaI++oaYLomsgyZaFA/9U=)
2: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: y22RwJlcQ0nD5K4HN58evr6z1YokNMr+L0lhKw+Cv9w=)
3: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: 8onh+SuVvqjsbjspZvr4ZBsa7gRz1dix1W7zncUVxG4=)
4: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: Q/fuqQjoEFdToVhIku7pv1Bt2HRCRBa60zPNNAr2glo=)
5: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: OOkicQA5K86MoBkSuxZ02oUQ15K4MqZ+HWDN0IRHS5w=)
6: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: sbRZOMY4qXofH+gweW2UQPxdhQAQJDKmoZuKYzDjDd8=)
7: 498FC3DB03528A64214589740CA13E84E4775306.crl (hash: Cw6k5/q0Imbr+VmdYdxCHCd4jYLV/ULD+u7PccpeSVs=)
8: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: W6PaD9jD2W7QLE6L053n0v5wsFLq3jDzK+h9oZCa+Ww=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl
rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:40:e5:93:87:f2:af:f6:a0:0e:54:3d:19:fc:de:f1:59:06:17:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498FC3DB03528A64214589740CA13E84E4775306
Validity
Not Before: Jul 24 02:17:13 2026 GMT
Not After : Jul 25 04:18:13 2026 GMT
Subject: CN=2008C7EC10F8EC2B43E484A08B1A955EA5C6ACC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:f9:7c:74:d6:66:17:eb:a2:95:97:5d:d2:
1f:ea:d7:13:11:41:b1:8f:60:6c:4b:a8:b2:00:87:
bf:74:bc:6a:38:9b:b9:9e:4c:54:df:d2:a5:59:42:
5a:cd:82:04:a0:e0:f6:cf:80:44:e8:93:95:6a:9e:
9a:68:49:c2:d3:58:a4:11:3e:9c:fc:36:9b:24:d7:
8f:89:68:68:35:04:62:f2:00:1a:1b:75:48:94:a2:
ad:9c:f6:3d:33:cc:dc:44:a4:44:2b:97:f8:4e:6d:
e2:0f:94:e7:ea:3e:9a:dd:e2:8c:37:fe:ef:71:da:
46:67:7a:0a:05:36:7a:ca:bb:e3:69:aa:fe:b3:d8:
56:e6:83:f5:09:7f:ca:ba:2a:84:21:b6:75:e4:5f:
10:e1:06:be:f3:af:87:ac:ac:8a:6f:17:a7:1b:55:
96:76:7a:d1:2f:5b:20:ce:54:00:69:06:8f:c6:4f:
f9:a9:e3:fb:f6:c2:59:43:91:67:91:65:6e:9d:49:
ed:6b:59:02:f1:69:2c:fe:bb:51:17:85:53:51:58:
40:ab:64:fa:2d:fb:c9:5b:2f:b3:b1:e1:f4:62:ab:
f9:fe:42:9f:be:d2:bb:ef:6e:2e:83:1d:61:af:ac:
d8:73:1f:bb:35:42:8c:94:db:72:71:a1:f6:8b:70:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:C7:EC:10:F8:EC:2B:43:E4:84:A0:8B:1A:95:5E:A5:C6:AC:C0
X509v3 Authority Key Identifier:
keyid:49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:64:ea:91:14:7f:c5:2b:c0:17:b4:27:b2:76:6b:05:75:23:
65:99:97:6f:84:ab:25:f8:c6:6e:6d:e1:fd:1d:75:5d:4d:3c:
7b:93:41:41:09:a1:dd:01:ec:0b:86:e7:84:98:ac:a8:88:e9:
9c:03:0b:0e:b9:43:46:01:2b:d7:06:a4:32:e2:f3:7b:cd:dc:
63:2a:48:a1:d4:17:a7:c5:04:69:d8:a8:7e:b5:b7:97:05:57:
b4:f0:2a:69:da:d4:16:aa:58:66:99:62:f4:d9:75:86:82:c4:
ff:2f:9a:99:28:f3:dd:3d:7f:53:62:20:2d:9a:d4:90:b8:24:
d3:77:c1:80:93:93:03:b4:5e:ea:8f:9a:15:ae:4b:79:c8:0a:
8a:06:27:49:e9:ff:aa:e0:12:8d:2a:90:de:2a:7d:4b:d9:ee:
9a:a2:ee:16:5c:df:f4:11:4b:f2:71:bc:43:8f:28:5e:fd:d6:
60:a6:40:f6:f3:31:b9:f6:07:75:f6:5b:e0:7e:1f:1c:72:84:
70:42:a4:fe:db:8a:e8:d0:de:bc:77:34:58:65:79:62:14:86:
1d:ae:6e:4c:d3:56:a1:7c:cd:88:4b:71:8b:d6:3f:74:aa:8a:
bb:40:47:68:24:71:f9:3f:6d:cf:3e:27:48:a1:86:bd:b6:d3:
5c:ce:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:05:20 2026 by rpki-client