
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft
File: DB23849BCF63AE719E7BE4FE89385D166773A883.mft (raw, json)
Hash identifier: re2jpSaARQB1oRsRTNpUA2ZXc6xapc0TxFrMrNTrF2E=
Subject key identifier: 40:8B:DE:41:E5:8C:06:10:5F:C8:20:2E:E0:07:C0:65:F4:35:97:80
Authority key identifier: DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83
Certificate issuer: /CN=DB23849BCF63AE719E7BE4FE89385D166773A883
Certificate serial: 61CAEF284961E35B99FFCB9EA41C4B696F45AD19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 08:40:29 +0000
Manifest this update: Thu 23 Jul 2026 08:35:29 +0000
Manifest next update: Fri 24 Jul 2026 11:46:29 +0000
Files and hashes: 1: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: g3WbWI1q18vac55oq8gdpUXBjsp4Aidv1FzJgM9YpdM=)
2: DB23849BCF63AE719E7BE4FE89385D166773A883.crl (hash: oXXhg0dx8XLxFOAYoc0G4KJIjmiuz3fU8GP97pRJki8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl
rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 11:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ca:ef:28:49:61:e3:5b:99:ff:cb:9e:a4:1c:4b:69:6f:45:ad:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB23849BCF63AE719E7BE4FE89385D166773A883
Validity
Not Before: Jul 23 08:35:29 2026 GMT
Not After : Jul 24 11:46:29 2026 GMT
Subject: CN=408BDE41E58C06105FC8202EE007C065F4359780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:fc:59:9a:65:6e:04:60:c3:00:2e:35:48:
b4:b8:7c:9c:43:f6:1e:f5:89:1f:1d:98:55:72:f0:
54:a2:5d:4d:f0:63:08:c8:ea:83:19:36:cb:70:e6:
ca:44:1e:d1:78:0b:c6:6d:b2:e0:7f:31:a2:fe:04:
f7:bd:b7:ad:d2:f0:dd:7d:56:7a:d5:ef:79:c7:d3:
9d:b4:52:80:b7:37:31:dd:24:de:d6:9c:42:d8:f9:
cb:7d:58:19:f6:a8:fa:52:1f:15:28:dd:6d:22:e9:
f6:81:9a:c1:46:e7:3a:41:0c:0f:95:f3:92:cc:5a:
e5:ac:09:8e:68:22:70:e5:3f:65:9e:bf:f6:e0:4e:
47:53:8c:83:cb:63:04:f9:3b:63:4f:ed:97:95:33:
6e:bc:d5:da:65:81:1c:b7:7a:02:43:f2:5b:89:a1:
f0:24:ae:e8:b7:67:0b:c0:18:a0:cf:7d:af:fb:07:
aa:19:ff:d5:e9:d6:0b:60:be:21:4b:e6:ba:7d:f8:
44:ac:1e:9e:c6:fd:9a:4d:7b:da:dc:f3:80:ae:ba:
15:f8:3a:95:c4:d3:a7:76:5b:b0:c7:49:13:35:14:
48:69:de:a7:3a:e8:2c:d1:b1:f2:c5:a9:bf:da:c5:
75:e9:fd:38:3c:6e:07:26:23:c7:b3:09:9a:b8:58:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8B:DE:41:E5:8C:06:10:5F:C8:20:2E:E0:07:C0:65:F4:35:97:80
X509v3 Authority Key Identifier:
keyid:DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:37:f4:ea:77:a6:60:70:0d:c1:ef:c3:1c:cb:bb:01:d1:dd:
fb:24:f5:4b:bf:36:4c:98:79:1e:b1:27:6f:88:4f:c8:3c:d5:
09:69:5e:93:d1:4e:a7:e4:b8:ab:86:2b:49:17:b2:87:b4:2c:
19:02:40:58:eb:5f:8e:21:0a:77:cf:f2:49:20:2e:c4:27:64:
74:e9:8b:b8:85:83:f3:57:74:f4:37:91:7c:8b:47:7a:eb:88:
85:62:9b:1d:88:fa:c7:d7:4e:95:08:95:c7:0d:24:1c:c0:c9:
02:8d:3f:24:d9:86:8d:96:29:4f:92:d3:91:c6:44:b0:da:f7:
d4:11:96:20:47:82:16:d1:98:31:58:50:de:0e:d0:69:66:5d:
95:c8:a8:3b:b7:ea:18:c3:27:87:ba:f7:e3:61:8e:61:b0:ae:
74:81:5a:d0:03:e2:d5:07:ad:91:17:3e:18:67:f7:04:d3:e0:
71:e0:1e:3e:0d:ac:a8:21:7f:29:e9:d9:c8:6f:0a:87:ee:37:
63:f9:36:27:7a:fe:b6:a4:16:98:ed:77:72:4f:92:1d:ca:84:
06:b3:92:87:a6:cc:e4:90:54:31:8b:af:0e:3d:b5:e6:21:0a:
17:8f:25:7a:11:72:8b:b0:1e:88:dc:68:9e:7f:e7:7b:f8:72:
04:fd:df:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:49 2026 by rpki-client