
$ rpki-client -vvf rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
File: 064B9E28C1AE598921210EB5E94CAE9E89533533.mft (raw, json)
Hash identifier: 0mpGSS9xdys8mn1DsDTq5RIYINZ9AsiAo3b9/x8g90g=
Subject key identifier: DC:EF:E3:B3:18:98:56:FF:F2:5D:BC:3A:0C:33:F6:C0:E0:3B:AE:CA
Authority key identifier: 06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33
Certificate issuer: /CN=064B9E28C1AE598921210EB5E94CAE9E89533533
Certificate serial: 4BB75E33FACDE8F46AE0B88FFFF4AC62BAD21BB9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
Manifest number: 70
Signing time: Thu 23 Jul 2026 17:57:01 +0000
Manifest this update: Thu 23 Jul 2026 17:52:01 +0000
Manifest next update: Fri 24 Jul 2026 20:37:01 +0000
Files and hashes: 1: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (hash: rh0sBxj81btPPODPu5P0eEgRgLm8ewf9kn1GsH7FYgE=)
2: 064B9E28C1AE598921210EB5E94CAE9E89533533.crl (hash: gy4V1JDQqFeHdGXB5GgxAz9vNmE/aYUUy/uBI7IxG1c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl
rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 20:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:b7:5e:33:fa:cd:e8:f4:6a:e0:b8:8f:ff:f4:ac:62:ba:d2:1b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064B9E28C1AE598921210EB5E94CAE9E89533533
Validity
Not Before: Jul 23 17:52:01 2026 GMT
Not After : Jul 24 20:37:01 2026 GMT
Subject: CN=DCEFE3B3189856FFF25DBC3A0C33F6C0E03BAECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:04:99:d8:94:d9:dd:48:d7:d2:24:a9:c4:
37:8d:88:16:e9:ea:57:25:29:02:5f:55:f5:4b:e4:
4a:63:db:03:c2:13:db:c3:72:f0:8d:68:80:06:6e:
fb:47:90:5b:89:e7:01:bb:3c:6d:8e:84:5d:59:26:
16:20:c3:53:89:10:67:60:0c:40:d4:7e:7c:c5:df:
79:19:c6:13:43:a8:ea:d6:54:16:18:0f:3c:83:3c:
ca:33:11:0c:4e:dd:e1:ed:6b:ab:2d:43:d7:8b:7b:
1d:2c:99:f4:be:fa:b0:a0:d8:ae:43:14:a1:5b:a1:
1c:8f:4f:c0:c4:30:be:0e:a0:d9:0e:57:e2:4c:9d:
e9:0b:9c:ce:ca:49:81:a4:3c:69:e2:75:9b:9f:74:
cb:9a:8d:0d:e6:0a:c7:9f:7c:d7:39:cf:61:4f:e8:
c9:85:2c:8d:be:2f:ce:40:33:80:4f:71:45:0f:d8:
b0:5f:7a:b3:74:39:ec:2f:bd:ef:4d:a8:58:1e:f1:
0f:0d:63:f5:2f:fa:75:fe:6d:bf:a5:10:f5:ec:32:
07:f4:0e:2f:24:a4:48:bb:2a:29:ee:3a:9f:c1:72:
eb:f5:c3:ab:7b:0c:16:5d:82:6d:3f:3b:2a:56:2b:
ea:1b:2a:dd:5d:76:53:29:a9:e6:27:f8:6b:13:13:
23:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EF:E3:B3:18:98:56:FF:F2:5D:BC:3A:0C:33:F6:C0:E0:3B:AE:CA
X509v3 Authority Key Identifier:
keyid:06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:13:e0:56:74:b0:bf:6b:19:38:de:f7:36:51:ea:79:40:d3:
5f:6d:96:d3:9c:8a:9c:9c:1d:ef:de:6c:38:b0:8d:05:4f:81:
dd:12:73:68:90:39:3f:83:95:c4:08:75:fa:cb:a0:56:fd:22:
04:93:e3:cd:f0:80:84:17:86:db:eb:57:1d:9d:d3:2e:52:c8:
86:08:b3:d7:43:90:cc:cc:8d:9c:90:bf:8b:62:d0:46:2c:9e:
0e:12:d4:10:82:b6:5a:e0:bf:de:df:81:e1:26:50:bc:55:e6:
6f:99:d6:58:92:71:df:d0:ea:1c:54:5e:0b:e0:01:81:7f:3c:
5e:3b:ed:c5:e8:34:4e:c4:b7:18:21:d2:d2:99:69:cc:a0:66:
c4:e2:c1:68:49:46:4f:cb:e9:39:37:47:1a:13:33:45:51:71:
12:1e:cc:f0:e1:2a:1a:41:7d:21:15:6e:dd:af:f6:6b:99:8e:
6e:32:7a:44:00:56:5e:e0:56:91:f4:ee:aa:fa:f3:fa:88:bc:
36:fe:96:78:48:18:6f:ea:ff:fb:fd:ef:bc:23:30:9f:16:95:
87:77:14:e6:f4:3c:63:55:40:ad:a7:c6:05:10:56:f1:48:81:
29:c4:40:88:f1:c7:04:37:9d:67:2b:32:54:00:36:3b:52:fa:
36:45:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:47:41 2026 by rpki-client