
$ rpki-client -vvf rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft
File: F61FC33006E4D563052A74A3344CBDB712A9CE42.mft (raw, json)
Hash identifier: JDAL/qGbjZpHXqLuCdqwl1SQe1DIrf28xmXuqrbmMxs=
Subject key identifier: 0E:3D:4A:C5:5B:ED:4A:51:8D:C5:F2:BF:E1:4F:08:1D:58:CE:C6:64
Authority key identifier: F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42
Certificate issuer: /CN=F61FC33006E4D563052A74A3344CBDB712A9CE42
Certificate serial: 637FB1332C8C16F1C41BE4C99C4AF3B8376A7A1D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 18:42:56 +0000
Manifest this update: Thu 23 Jul 2026 18:37:56 +0000
Manifest next update: Fri 24 Jul 2026 19:47:56 +0000
Files and hashes: 1: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: slYjvzyCrVX4GgCGyd9rvovLqFZzNIshufZkbhVSrC0=)
2: F61FC33006E4D563052A74A3344CBDB712A9CE42.crl (hash: ewrhLiVklBqO0xdxjjWf/nyuWHEUHYXmFox695DnZyM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl
rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:7f:b1:33:2c:8c:16:f1:c4:1b:e4:c9:9c:4a:f3:b8:37:6a:7a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61FC33006E4D563052A74A3344CBDB712A9CE42
Validity
Not Before: Jul 23 18:37:56 2026 GMT
Not After : Jul 24 19:47:56 2026 GMT
Subject: CN=0E3D4AC55BED4A518DC5F2BFE14F081D58CEC664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:9c:a1:10:8a:5b:ff:d5:83:62:38:20:ce:
4f:53:4c:37:d6:8f:03:81:91:c8:60:0b:db:7a:e8:
98:8e:fb:43:16:0b:04:f0:89:7d:7f:f2:44:ab:6c:
0b:ec:af:a3:8e:17:aa:cd:59:26:61:e3:bf:33:c2:
4e:81:b2:a9:17:3e:2a:b9:cc:e0:b0:4b:c0:5d:88:
e1:f5:9b:07:c8:6f:3d:f0:bc:43:3c:1b:0e:76:d4:
af:e9:fb:3f:56:9c:28:f9:1c:d5:93:d6:2b:76:cd:
9f:ac:5e:c4:b8:fc:28:f8:9c:e1:df:4f:5d:7c:40:
41:80:5d:1d:f4:84:02:86:71:57:96:b9:53:be:2e:
94:09:98:f2:49:72:aa:5c:b2:66:5d:8f:44:ee:57:
db:dd:b9:4d:4e:f2:8a:db:6f:c8:14:6e:9f:1b:88:
30:af:66:a8:a3:fd:70:93:64:ca:4d:c2:4f:21:46:
77:3d:5f:54:c2:58:8e:4f:92:85:0c:93:05:f4:6e:
2f:05:c2:e0:c9:56:57:cf:75:85:f8:f8:98:59:03:
44:a8:ef:ab:30:d5:69:c9:ae:76:50:6e:1b:ee:38:
96:21:e9:b8:ed:0c:a6:91:f5:0a:50:0f:b8:0f:d7:
85:5c:7d:af:b3:3d:e5:4f:f2:fd:83:29:1c:d8:b5:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3D:4A:C5:5B:ED:4A:51:8D:C5:F2:BF:E1:4F:08:1D:58:CE:C6:64
X509v3 Authority Key Identifier:
keyid:F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:30:36:ac:7d:2b:cd:b2:be:17:40:fe:a7:ae:f1:ce:00:fb:
01:5b:09:db:26:43:0f:3d:d2:9a:be:50:53:74:65:7d:1e:02:
ca:a6:bf:a2:c6:4d:7f:6e:ee:e1:a9:d3:4c:91:60:4b:38:f9:
22:9a:2e:e5:2d:eb:2c:36:a1:2f:be:24:f5:fa:c3:da:ed:ae:
ec:e5:d3:24:bb:e0:2e:d6:bf:4b:6b:0d:81:68:bb:94:ae:d7:
80:6e:83:9f:3c:16:fd:35:7b:be:0b:74:47:ab:c3:25:37:7d:
6e:c7:0f:e7:8d:e4:eb:c9:f3:ac:ad:95:8c:87:15:08:04:a0:
1d:75:fe:5b:f5:54:cf:88:ac:d3:05:c7:fb:64:56:90:92:4d:
06:b0:dd:36:88:a5:29:d8:e6:db:23:b8:37:72:d5:12:34:c3:
9a:13:b3:50:76:f6:50:ae:86:08:05:81:48:4c:41:24:b3:8c:
a1:b3:a3:20:ba:74:ad:6d:f5:14:2f:b8:9c:e5:d6:f9:64:e8:
5c:10:1e:75:20:b0:d0:65:c3:d6:59:e4:c1:b7:fa:6d:48:51:
dd:09:19:95:ba:07:ab:8f:0c:44:da:3e:2d:df:f3:49:85:18:
02:79:3d:79:e5:55:36:d9:dc:5f:00:9f:0d:f8:39:ab:6d:4a:
67:bc:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:22 2026 by rpki-client