
$ rpki-client -vvf rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft
File: 1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft (raw, json)
Hash identifier: iNlK9sm+z4DWN7wh0tFDnX5M69IFZD6gO366NlNCc/Q=
Subject key identifier: 86:C5:48:65:2C:6C:35:DC:87:9C:AC:2D:15:2B:D7:D3:6F:96:F5:88
Authority key identifier: 17:58:F2:64:EA:08:74:C8:AC:D5:38:FC:B6:1C:E7:DA:90:38:14:EE
Certificate issuer: /CN=1758F264EA0874C8ACD538FCB61CE7DA903814EE
Certificate serial: 4CF665F4E6FDEF66815878A97CCB1D7CF96FB3B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1758F264EA0874C8ACD538FCB61CE7DA903814EE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 19:34:05 +0000
Manifest this update: Thu 23 Jul 2026 19:29:05 +0000
Manifest next update: Fri 24 Jul 2026 21:47:05 +0000
Files and hashes: 1: 3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (hash: BF0A/2Eh0yp8cyXoZ2hAxmpLhKE2MIjrP2QeGtvsEus=)
2: 1758F264EA0874C8ACD538FCB61CE7DA903814EE.crl (hash: ZCOl4D3kdQgc6Em9fr6IIsxawmSSYzIqNFSSz5Oczts=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.crl
rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1758F264EA0874C8ACD538FCB61CE7DA903814EE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f6:65:f4:e6:fd:ef:66:81:58:78:a9:7c:cb:1d:7c:f9:6f:b3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1758F264EA0874C8ACD538FCB61CE7DA903814EE
Validity
Not Before: Jul 23 19:29:05 2026 GMT
Not After : Jul 24 21:47:05 2026 GMT
Subject: CN=86C548652C6C35DC879CAC2D152BD7D36F96F588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:ab:8f:4e:e4:26:27:1f:b1:33:42:f0:65:
90:fc:9b:eb:6f:3a:1f:37:99:67:a6:4c:1a:f6:4e:
86:f1:84:55:1d:3d:df:b1:1a:2a:cf:1d:e9:e3:93:
49:ea:96:72:d1:42:f8:5d:4a:1d:cd:f5:11:a7:66:
af:7d:91:d8:da:9c:aa:76:ae:7d:a1:e4:9d:70:1c:
b6:00:5f:25:6a:9e:c6:8a:11:de:6f:a1:96:16:ac:
a5:97:b4:4a:8d:46:f5:f4:aa:9d:09:34:9b:76:86:
46:97:9b:6d:c8:32:a3:c0:e3:5a:29:42:e0:0b:83:
02:bf:5a:83:d3:d6:ee:d2:37:ed:70:ba:61:07:49:
17:7e:b8:94:ab:47:f9:04:36:12:39:e4:01:1f:a8:
06:02:f3:c3:bb:39:13:c5:1a:41:73:16:cf:ca:cb:
b3:a5:78:64:db:52:fd:ac:ea:c4:47:32:4c:38:04:
c0:dd:d4:46:6c:73:18:e0:82:95:2f:16:da:75:c9:
a0:3c:1c:34:df:ab:1c:5d:e8:83:97:f9:a5:fa:8a:
81:1e:f8:c1:15:00:ba:0f:b1:a2:d7:c1:ad:45:c3:
a3:9e:f3:c1:14:c4:76:ca:d1:2b:d7:17:59:cb:25:
7b:a0:11:7e:d3:10:c1:fd:8d:cc:dc:05:f9:f4:24:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C5:48:65:2C:6C:35:DC:87:9C:AC:2D:15:2B:D7:D3:6F:96:F5:88
X509v3 Authority Key Identifier:
keyid:17:58:F2:64:EA:08:74:C8:AC:D5:38:FC:B6:1C:E7:DA:90:38:14:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1758F264EA0874C8ACD538FCB61CE7DA903814EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dc:bc:34:cb:4b:b2:30:a8:a2:25:ae:f7:74:0d:4d:38:c5:
da:09:bf:ef:89:38:95:f5:a9:72:7a:19:7a:6a:75:c1:10:f3:
c9:c3:a6:23:bb:8a:4a:d0:da:fb:65:54:fd:95:dc:9e:45:64:
2d:6c:97:56:47:70:d2:94:de:34:2c:51:b1:b6:8f:69:1a:96:
26:ab:23:69:38:c8:9b:7f:ba:fa:56:33:db:8d:1d:d6:58:ca:
08:b9:cf:94:49:ce:70:52:e2:ee:ba:76:1c:4a:7b:26:cf:f2:
49:3a:50:14:36:48:cd:ee:a8:26:10:15:fe:69:de:71:7f:56:
6d:91:8f:8f:80:ee:c1:1e:37:f9:8c:f0:9a:fb:b6:14:73:ac:
75:c2:ef:cf:98:9f:50:4e:00:58:ef:26:12:3b:47:2e:78:bc:
cc:ff:d9:7b:ad:34:95:7d:92:cc:e9:3a:90:9d:73:b2:60:be:
19:93:f3:69:79:f8:d7:8e:7f:61:19:47:0d:ec:63:f9:50:e3:
39:53:b3:5b:87:df:ad:fb:5c:1f:f4:8b:62:35:29:d2:65:6a:
c3:02:7d:05:ff:5d:42:d4:5c:ab:4a:64:f4:c1:b6:4b:4c:24:
97:85:ad:d6:32:3d:f6:23:46:fa:fd:75:3d:86:c8:16:7a:a7:
05:7a:4e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:46 2026 by rpki-client