
$ rpki-client -vvf rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
File: 064B9E28C1AE598921210EB5E94CAE9E89533533.mft (raw, json)
Hash identifier: IxBhOL1RnC8uDxY2vM7LGajs2h8pqj3BhuZm5rpr1Dc=
Subject key identifier: 76:91:4E:9D:70:19:96:F3:A0:9A:85:F4:1C:B2:C4:AD:D7:D4:C0:10
Authority key identifier: 06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33
Certificate issuer: /CN=064B9E28C1AE598921210EB5E94CAE9E89533533
Certificate serial: 7BFDC6DBFEE2EE3BAFE00DF6701B80C3F95765A2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
Manifest number: 10
Signing time: Wed 13 May 2026 05:48:57 +0000
Manifest this update: Wed 13 May 2026 05:43:57 +0000
Manifest next update: Thu 14 May 2026 09:34:57 +0000
Files and hashes: 1: 064B9E28C1AE598921210EB5E94CAE9E89533533.crl (hash: zneUvlz0m1/7M6CrEkzlq6lPtKrFiCrP5AHct3vInBs=)
2: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (hash: rh0sBxj81btPPODPu5P0eEgRgLm8ewf9kn1GsH7FYgE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl
rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:fd:c6:db:fe:e2:ee:3b:af:e0:0d:f6:70:1b:80:c3:f9:57:65:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064B9E28C1AE598921210EB5E94CAE9E89533533
Validity
Not Before: May 13 05:43:57 2026 GMT
Not After : May 14 09:34:57 2026 GMT
Subject: CN=76914E9D701996F3A09A85F41CB2C4ADD7D4C010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:98:cd:8f:84:c4:ce:85:87:b5:79:08:c2:ec:
86:6e:89:d8:d2:01:da:c8:a2:1f:51:98:dc:14:cb:
0a:4d:74:5a:98:5f:f9:85:11:dc:4d:67:87:39:3f:
24:42:9d:3a:91:f8:a1:1c:62:29:d6:08:b4:e2:88:
b0:22:27:02:bd:8e:5e:df:a1:59:45:31:3f:fc:45:
a4:17:5b:df:33:99:0a:74:73:96:9e:b5:52:71:51:
6b:31:0f:64:7e:2f:0c:5a:0a:3c:34:27:e8:46:98:
0c:ee:25:3b:b2:7e:0e:bb:c7:b0:d1:a8:00:2b:fe:
04:c8:f1:e2:9f:60:ba:7f:0c:a2:10:f6:e1:1f:ae:
f5:fd:9b:cb:a8:12:8b:aa:b0:f5:9c:ac:17:22:fd:
e5:b9:03:fa:f1:91:85:85:bc:9e:1f:6f:1b:0a:98:
cc:45:ab:da:af:48:de:09:1f:e1:d7:c4:d8:aa:9f:
87:82:8a:eb:e8:e6:f0:ca:7f:16:11:fe:e7:66:5e:
49:3d:1d:be:b1:6a:4f:9d:19:51:a7:0d:41:22:93:
d8:16:83:6e:3f:ec:10:e0:a6:f5:10:4c:20:ee:c0:
05:89:5e:1d:1e:5e:35:30:9c:fc:c9:f0:44:31:c6:
ed:22:e6:51:34:85:f5:ca:fe:d3:0f:44:11:bd:e2:
91:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:91:4E:9D:70:19:96:F3:A0:9A:85:F4:1C:B2:C4:AD:D7:D4:C0:10
X509v3 Authority Key Identifier:
keyid:06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8d:9f:3b:2a:6c:7c:f2:1a:17:b9:2d:02:35:68:36:36:6d:
6f:38:11:2d:9e:ad:dc:5c:07:5a:7c:84:e9:8d:9f:24:58:ed:
8b:1f:53:f9:ff:7e:af:00:cd:c1:6b:49:e5:1e:f1:39:6e:64:
45:1c:ea:40:e0:55:a0:49:3d:99:12:83:09:03:4a:3d:bc:07:
28:0f:34:71:fa:77:30:a7:07:29:bd:96:12:55:aa:2b:d0:38:
ae:a5:2e:1b:5c:c2:42:69:f7:b6:a0:40:1a:a3:be:68:6d:a1:
d3:01:cd:e7:5f:75:f3:69:0f:db:c0:30:3e:00:87:f1:c5:9c:
00:a2:5c:db:be:53:2e:5b:74:18:46:20:1a:c2:80:73:4b:f6:
b4:03:35:ab:f5:c5:52:87:f1:2b:02:49:26:b7:7f:08:35:8a:
a4:9a:b2:d2:6c:8a:55:66:60:6d:98:16:3f:bc:5a:4f:8d:85:
de:7c:e9:fe:b0:8e:fa:2a:d5:e4:de:a4:10:db:3f:cb:31:51:
3a:7b:18:18:cb:95:9a:ab:4e:7c:92:c7:5d:a2:93:fb:f2:cd:
0b:b2:54:a2:3d:82:10:60:26:77:f8:38:86:8a:49:6b:6c:32:
cd:52:09:30:59:92:4f:c2:69:9f:fc:de:20:e1:5b:36:2a:e6:
94:92:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:49 2026 by rpki-client