
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
File: 6564F75E34457852F2B66C3764B24E23D7CC229E.mft (raw, json)
Hash identifier: CvtTX0W6kA8BDURpD6QeZlRHfIals/h4+mlNMSCutoo=
Subject key identifier: 87:90:FD:67:12:B7:02:79:28:D2:55:39:49:23:F0:34:8F:82:8F:59
Authority key identifier: 65:64:F7:5E:34:45:78:52:F2:B6:6C:37:64:B2:4E:23:D7:CC:22:9E
Certificate issuer: /CN=6564F75E34457852F2B66C3764B24E23D7CC229E
Certificate serial: 1A2FE47957F45FC6A8B626927C6594099AB070AA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
Manifest number: C9
Signing time: Mon 28 Sep 2026 17:16:01 +0000
Manifest this update: Mon 28 Sep 2026 17:11:01 +0000
Manifest next update: Tue 29 Sep 2026 20:52:01 +0000
Files and hashes: 1: 6564F75E34457852F2B66C3764B24E23D7CC229E.crl (hash: Ebl11iOHFGK8xlypDy5Ww+J+T8p6iDCk2KCMMuaADWo=)
2: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ID4fm5BwuuWYs0CbkPkat6AFzlZ1Ymdn+yuQrCTD+tk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.crl
rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2f:e4:79:57:f4:5f:c6:a8:b6:26:92:7c:65:94:09:9a:b0:70:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6564F75E34457852F2B66C3764B24E23D7CC229E
Validity
Not Before: Sep 28 17:11:01 2026 GMT
Not After : Sep 29 20:52:01 2026 GMT
Subject: CN=8790FD6712B7027928D255394923F0348F828F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:25:35:5b:ec:2c:de:e6:c5:0e:e8:fe:81:
85:42:e2:8b:79:d3:37:92:4c:15:54:02:97:42:4b:
81:57:28:6e:c3:7e:30:a5:99:8c:0d:99:37:e4:57:
cd:7c:34:ac:3f:d0:63:ec:a0:4a:d9:16:8c:5e:7e:
54:50:9e:a7:c5:af:b6:59:b0:74:e1:00:81:30:4b:
4d:ca:fc:76:ef:e2:fd:7f:03:8d:c5:05:dc:ab:03:
34:d2:a1:7c:e2:8d:95:b1:aa:a8:cd:df:7a:99:47:
5c:12:cd:82:7f:68:71:b2:56:d5:4b:ef:ed:41:a6:
8d:03:e7:05:58:7f:84:b5:b8:6d:19:26:7f:14:e1:
c3:53:b3:2a:e0:43:82:15:4b:58:40:98:a1:04:62:
43:a2:f0:51:81:83:52:1a:e8:e9:1a:0b:bf:c1:e8:
1e:ed:5e:30:db:40:26:8c:d1:0d:85:97:53:b6:bf:
a8:90:40:8c:e1:0a:70:07:4f:c1:f5:e8:00:91:2c:
61:07:b1:88:bf:15:b5:33:e1:a6:a6:f4:bf:6d:98:
6a:df:14:50:9c:c4:29:5e:94:1f:b5:0e:45:2c:c4:
4d:f2:a4:64:1f:d9:72:e9:a9:b5:d8:dc:7c:b3:1e:
b9:1d:85:da:1d:7b:5d:4b:83:7d:8a:d5:35:02:33:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:90:FD:67:12:B7:02:79:28:D2:55:39:49:23:F0:34:8F:82:8F:59
X509v3 Authority Key Identifier:
keyid:65:64:F7:5E:34:45:78:52:F2:B6:6C:37:64:B2:4E:23:D7:CC:22:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:66:1d:94:59:83:4d:1d:ca:c5:9b:fa:cd:9c:9f:6a:d8:f6:
b8:5c:ee:6d:49:2c:c4:f9:71:30:f5:da:a5:9c:b4:ed:2c:de:
db:c6:1d:a1:24:39:47:ba:39:1a:27:7b:b0:49:6f:76:39:d7:
f3:fd:51:e0:d2:6a:5d:d5:6a:c4:ba:06:d0:7f:30:3f:6c:3c:
86:81:41:83:2a:69:e4:10:f1:ad:ad:ae:79:be:58:48:ea:a7:
0e:9c:b3:c9:c4:f3:db:5b:17:9a:e0:42:61:f0:2f:96:7e:1c:
23:19:80:7d:9d:52:6e:2b:59:e2:ff:e7:6d:a2:7d:da:30:9c:
ad:4a:32:43:15:92:9e:56:b2:cf:af:09:1f:da:99:cd:cd:96:
19:11:2d:46:8d:b2:e6:df:3d:75:7e:24:ad:da:c7:fe:5f:54:
15:be:fd:6f:02:17:de:5a:37:a6:9a:82:c6:ff:c2:3e:4e:e7:
6b:05:da:a8:a0:28:c7:2d:30:da:de:48:b1:48:0e:ed:e5:81:
72:38:0f:50:00:fa:5b:36:65:9a:f3:23:5e:37:e1:19:07:6c:
ea:b2:32:02:f2:16:e3:96:00:d2:b4:91:a1:83:c8:20:14:3e:
74:5d:78:19:e5:f1:c4:f2:33:ca:3a:f7:84:7f:2b:ca:43:eb:
63:fc:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:48 2026 by rpki-client