
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft
File: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft (raw, json)
Hash identifier: +bO1BcTmbO5VeJZPxYayfTgGbquKIbgfTn7cFKzMDXU=
Subject key identifier: 9C:61:DA:B4:31:64:A6:62:1A:6C:7F:4A:CA:8B:9D:85:64:4A:8E:D7
Authority key identifier: CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A
Certificate issuer: /CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A
Certificate serial: 40841266DABE2594C60FBB1E931986D672CD86A4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 01:56:40 +0000
Manifest this update: Fri 24 Jul 2026 01:51:40 +0000
Manifest next update: Sat 25 Jul 2026 05:43:40 +0000
Files and hashes: 1: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: r6qxzQ/FpP4apM7+bFGMg0MnfLkYQkINU0oxwojw5KA=)
2: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl (hash: JcRg+EVmuSEVZlXifdiW5sF4nbTHJb2SXgcUuPkDrsU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl
rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:84:12:66:da:be:25:94:c6:0f:bb:1e:93:19:86:d6:72:cd:86:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A
Validity
Not Before: Jul 24 01:51:40 2026 GMT
Not After : Jul 25 05:43:40 2026 GMT
Subject: CN=9C61DAB43164A6621A6C7F4ACA8B9D85644A8ED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:e5:3d:86:b0:fb:0a:ee:67:8b:ab:84:97:
36:06:fc:3a:2a:c7:b9:1b:e6:50:51:be:68:f2:0e:
26:7d:16:e2:7a:67:a3:bf:ef:e5:62:31:bd:0b:a8:
db:3a:5c:4e:8a:c9:6b:03:03:ed:18:de:90:b5:47:
b1:42:7d:f2:19:77:a9:46:9b:d8:b0:99:44:a4:47:
38:76:45:33:4e:22:63:e6:39:2d:78:14:5e:1c:1d:
33:72:d6:f4:8e:bc:e4:e8:cf:4d:00:97:01:c1:e1:
5b:02:4a:3b:05:b2:d6:cd:fa:48:7c:b5:2d:17:29:
54:66:c5:c6:1a:3b:56:6d:7a:ad:f6:c8:ca:cf:9d:
af:84:f3:29:b1:a9:f8:91:8d:95:80:8b:07:df:45:
27:f9:a0:f7:56:e7:3c:2e:91:d9:b8:78:37:cf:c5:
5c:b4:76:c6:bf:b0:4b:16:e0:fd:88:f8:5d:36:b2:
cb:f7:ae:ea:11:a3:10:57:ef:90:3c:9a:a2:74:09:
2b:34:58:af:34:fd:cb:01:88:92:e7:9a:63:e4:e4:
75:ba:97:59:81:5f:25:27:ed:17:02:bc:10:39:9c:
fb:56:4b:3e:91:51:a0:01:1f:6a:99:03:11:91:02:
32:39:da:7b:ef:02:f4:5f:89:3f:41:2e:4e:e6:ee:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:61:DA:B4:31:64:A6:62:1A:6C:7F:4A:CA:8B:9D:85:64:4A:8E:D7
X509v3 Authority Key Identifier:
keyid:CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:be:09:90:e2:c5:3c:50:09:af:2d:e9:26:41:5e:1c:99:73:
99:b4:bb:03:b0:5a:2f:fd:ca:78:f1:37:4b:35:04:f2:f9:95:
bb:6f:d9:ce:33:ec:ed:bd:8c:09:90:19:c3:ea:5f:80:09:34:
2c:12:41:85:87:cf:e9:e5:80:00:99:d3:58:08:16:bb:ae:8a:
9b:4d:a5:a1:03:fe:b2:12:66:79:18:6a:4c:61:59:73:bc:0f:
93:7f:a4:78:f4:ae:d6:c9:9f:47:f7:8d:44:87:94:41:9c:e4:
ea:ad:b3:b3:67:68:1f:1e:dd:6c:3e:0d:1b:9f:d7:34:04:4e:
67:6f:07:44:1f:74:1d:24:77:40:1d:fb:34:77:92:21:d6:90:
ce:21:f5:6c:34:20:b7:98:f9:f6:7f:0f:02:65:da:09:4c:1e:
8a:b3:c9:cb:e0:d2:8a:50:24:5f:fa:65:82:25:14:63:37:db:
12:be:98:0b:d4:10:c7:46:10:d5:d6:74:bb:44:5b:94:fb:3c:
51:93:ec:62:a6:fc:a9:59:14:e5:e2:01:70:94:6e:5c:e0:a1:
e9:af:93:d4:b9:f7:10:9e:21:48:a0:be:7d:a7:2a:eb:a2:96:
05:48:a9:fe:af:56:25:62:1f:bf:a6:9f:04:cf:30:82:42:c9:
d4:b2:91:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:02 2026 by rpki-client