
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft
File: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft (raw, json)
Hash identifier: ZoNihue/2bnj9y9r1DHYHsSX6rV1N4vE8SuRZjeEfis=
Subject key identifier: 67:94:DF:91:C9:40:D4:2A:17:1B:01:E9:C5:48:2E:A1:B7:9F:28:A5
Authority key identifier: 4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7
Certificate issuer: /CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7
Certificate serial: 72BCDB2F63BBC24BE3C460C58B4BAAF2ED286347
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 22:32:26 +0000
Manifest this update: Thu 23 Jul 2026 22:27:26 +0000
Manifest next update: Sat 25 Jul 2026 01:35:26 +0000
Files and hashes: 1: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: 889d8hZgsoEONtwHkfZfmAhOTIvpzaLSt/rrvU4dZ6Y=)
2: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl (hash: Wjwt9oRzv2qMNsZtGszkq1+hrC9bQ1tBTl6xfEab1hs=)
3: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: ZJlUpKOWZJT4nAWuCuBDhZRS/ZCGAJEy+RmXu9xZXqc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl
rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:bc:db:2f:63:bb:c2:4b:e3:c4:60:c5:8b:4b:aa:f2:ed:28:63:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7
Validity
Not Before: Jul 23 22:27:26 2026 GMT
Not After : Jul 25 01:35:26 2026 GMT
Subject: CN=6794DF91C940D42A171B01E9C5482EA1B79F28A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:b9:cb:6f:5d:e0:07:bc:b5:29:3c:3d:a9:
41:b6:f1:6a:9b:b1:c9:3f:b3:cb:7c:1b:37:65:88:
39:31:26:5e:a7:ab:3d:d5:75:51:de:19:f2:43:3b:
5a:79:c9:cc:8e:6f:94:81:79:03:18:41:e1:34:b4:
04:85:2d:c9:2b:6b:69:c8:37:10:26:f7:49:2e:9c:
a3:5f:81:3c:88:ea:c6:61:22:68:0d:c7:d5:af:0f:
f8:46:ce:8e:cb:6c:eb:59:73:88:e0:54:86:f4:0c:
10:70:a2:5f:82:aa:f1:cf:80:ab:7e:66:34:66:7c:
fe:34:3a:8d:43:49:f1:ba:c5:7e:cc:71:b5:a4:21:
36:3a:6a:78:ac:a0:c3:ab:a8:23:b6:8b:dc:f8:86:
51:bf:94:4b:dd:30:72:ef:d0:7d:d9:a8:a9:04:72:
a3:25:b5:5b:b5:67:22:e3:15:88:5d:e8:67:96:99:
f3:50:1e:aa:88:3c:1c:56:85:86:95:83:52:36:26:
eb:f7:cf:4a:61:00:42:39:f3:71:ad:03:43:5b:d7:
1e:ff:41:30:45:d0:96:b5:2e:5a:e2:fc:7b:24:78:
a5:6b:8b:d8:10:ea:99:39:22:dd:f3:97:8d:b9:03:
f2:79:6e:7b:a0:95:e2:e3:aa:66:ac:af:28:a2:62:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:94:DF:91:C9:40:D4:2A:17:1B:01:E9:C5:48:2E:A1:B7:9F:28:A5
X509v3 Authority Key Identifier:
keyid:4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fb:6d:1e:e9:57:67:1f:4d:71:f3:b0:e0:12:fc:80:ff:c8:
bd:ec:8b:82:6e:d3:62:48:e5:b0:8f:7a:eb:f4:86:2a:3e:9a:
e5:25:a9:30:db:be:34:ee:09:8f:4e:86:e6:09:5c:d1:24:df:
9f:8e:b7:fb:f8:f4:b2:6c:0c:d0:b9:e3:ec:ee:2d:c1:e9:62:
e3:0c:46:1b:20:dc:e8:a6:96:cb:43:5c:3c:01:10:ff:de:b8:
b6:9a:43:ab:c4:84:aa:0b:bf:2c:9c:38:8e:0f:76:11:ab:90:
57:70:9f:9d:81:34:c3:99:f0:c8:e2:63:42:16:aa:a0:53:48:
8e:40:57:8d:a7:c8:ba:32:8a:18:61:b2:6b:a2:e8:67:6e:8e:
bc:18:ca:00:57:5b:ff:ac:2d:0a:ec:27:18:06:4a:a2:44:85:
8b:ab:75:71:bd:2a:e0:06:64:6b:5a:2d:3a:b3:81:8f:46:98:
f9:a5:ba:65:fe:23:5b:7b:f5:fe:05:db:9c:b6:40:c5:c5:89:
e9:40:23:90:f1:a5:98:fc:db:90:e2:3a:02:e4:02:3d:db:5f:
f9:f1:e7:a8:67:3f:7e:69:e9:16:ce:1f:3b:2f:90:d0:04:36:
72:53:62:86:86:e3:f5:2f:52:05:a2:b5:ff:63:d9:ab:7f:bf:
20:1c:4c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:43:18 2026 by rpki-client