
$ rpki-client -vvf rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft
File: 677938123D24C0A27D10E007C474D99FC455C86B.mft (raw, json)
Hash identifier: SAy6IJTH4COVCTYnmA37LJjnMOtaf1aKO06AM+s9E4s=
Subject key identifier: 1C:B7:81:BC:0B:68:02:6D:41:E8:1D:B4:CB:06:BA:E1:CE:DB:2A:5E
Authority key identifier: 67:79:38:12:3D:24:C0:A2:7D:10:E0:07:C4:74:D9:9F:C4:55:C8:6B
Certificate issuer: /CN=677938123D24C0A27D10E007C474D99FC455C86B
Certificate serial: 4EBE25AF5C2F9F7E40427BE37995ED2634EF2D1B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 04:14:37 +0000
Manifest this update: Fri 24 Jul 2026 04:09:37 +0000
Manifest next update: Sat 25 Jul 2026 05:22:37 +0000
Files and hashes: 1: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: 4Cc4QPAN4qbF7Ai91llZsgvFRMCExHlGGbgV9qW0tuM=)
2: 677938123D24C0A27D10E007C474D99FC455C86B.crl (hash: SC2KHefyUbIjxcbUqziNLZG4cS5GO5TPFTybMsKvpsM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.crl
rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 05:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:be:25:af:5c:2f:9f:7e:40:42:7b:e3:79:95:ed:26:34:ef:2d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677938123D24C0A27D10E007C474D99FC455C86B
Validity
Not Before: Jul 24 04:09:37 2026 GMT
Not After : Jul 25 05:22:37 2026 GMT
Subject: CN=1CB781BC0B68026D41E81DB4CB06BAE1CEDB2A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:56:f5:e5:3a:b6:4b:86:b0:5a:fe:03:51:
c3:0d:32:ce:68:27:61:ea:58:9b:9f:76:36:46:26:
66:f8:d0:e3:99:9a:ea:c6:69:4c:1d:b1:be:f2:8d:
7a:7b:00:60:e9:6d:80:a0:75:e1:03:9e:6e:f4:19:
96:bc:4b:2e:2d:44:88:45:6e:e2:79:e1:1b:b8:12:
d2:9c:05:91:e1:c9:9c:90:7c:7a:65:ea:5e:8e:5a:
fa:86:bc:8e:6a:78:95:b4:46:27:2e:e5:7f:01:f0:
73:a3:96:ca:6e:71:32:c5:95:76:91:31:09:c7:7f:
f0:7a:c8:05:35:21:d3:22:90:d8:2a:ba:7a:73:9f:
8a:e7:52:69:d9:38:65:8e:14:16:d7:c5:cc:5f:3d:
13:a5:0d:f6:b0:cc:c6:d1:01:4c:f0:86:4e:3a:84:
3c:4d:80:08:0c:8b:64:09:79:a5:9a:a4:16:0c:23:
3c:39:b8:ec:84:96:bd:c4:a6:0a:97:6f:ad:04:74:
4a:2d:50:f4:68:d6:cf:f9:62:9f:54:e6:69:8a:9a:
77:0d:55:b6:26:7d:4d:6e:bc:49:9e:68:f6:bf:99:
56:1f:78:0d:01:15:b1:0a:7b:21:ce:2e:e7:cf:47:
be:50:50:4f:4a:59:59:20:c2:4a:3d:e1:b7:28:96:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:81:BC:0B:68:02:6D:41:E8:1D:B4:CB:06:BA:E1:CE:DB:2A:5E
X509v3 Authority Key Identifier:
keyid:67:79:38:12:3D:24:C0:A2:7D:10:E0:07:C4:74:D9:9F:C4:55:C8:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ff:00:ed:f2:de:64:1c:ce:15:16:9c:cc:bd:84:f6:bb:75:
56:84:8f:9b:35:9c:aa:cc:88:15:e1:5a:1e:31:eb:b8:3d:90:
35:87:1e:17:8d:79:9e:e7:d8:d2:d3:50:7b:61:9c:d2:e2:8c:
40:2a:57:34:00:ac:83:71:a4:e4:59:79:62:9a:f2:3c:2e:22:
92:33:1c:1c:db:ae:fe:fb:f9:c4:be:61:92:31:35:62:3b:a2:
a7:f0:01:95:f2:5f:af:56:a1:39:c4:ee:2b:ab:43:59:80:1e:
b8:e7:42:33:80:bb:43:3f:33:22:6c:93:d3:0b:cd:8c:08:85:
b3:9a:d0:32:e4:4a:09:7b:e2:f2:24:81:54:7b:57:0e:6e:5a:
94:6e:23:ff:6a:b2:16:a3:15:01:e9:e9:d5:28:1c:df:79:93:
f6:cc:7e:af:b3:6c:96:5e:76:72:10:92:28:71:f2:60:d6:af:
89:4e:3c:61:e1:6d:10:d5:bf:c0:3d:ee:14:85:ee:73:1f:a4:
7e:bb:ab:fa:7a:74:b6:03:30:85:d7:b8:ac:9f:89:ed:62:e7:
74:8b:b7:d4:a2:c1:a1:81:e2:6c:13:87:15:9a:92:31:cd:c6:
83:ee:cf:cc:45:c3:61:d5:92:da:0e:3f:9e:e8:b7:7a:de:d3:
76:95:fa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:07:34 2026 by rpki-client