
$ rpki-client -vvf rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
File: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft (raw, json)
Hash identifier: ZsFaY1FUheIlU+sJdg+9SVEgEsLCP3eLKsDB2rkxYmY=
Subject key identifier: 74:82:91:5B:76:45:E0:CB:CC:9E:57:7D:36:90:B1:BB:99:3A:FC:63
Authority key identifier: DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27
Certificate issuer: /CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027
Certificate serial: 61C7E8CE7981FAFB7434CFF3989C0E0C3002F082
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 00:50:03 +0000
Manifest this update: Fri 24 Jul 2026 00:45:03 +0000
Manifest next update: Sat 25 Jul 2026 04:45:03 +0000
Files and hashes: 1: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: 7auAs3JZetQc2Zih3zy94WvlM7s/oo6N4QlMSA+A3AA=)
2: DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl (hash: iIXyGDBoV+KnNTv+inUYqD8svN/cMbAEzUr03ZDge10=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl
rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c7:e8:ce:79:81:fa:fb:74:34:cf:f3:98:9c:0e:0c:30:02:f0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027
Validity
Not Before: Jul 24 00:45:03 2026 GMT
Not After : Jul 25 04:45:03 2026 GMT
Subject: CN=7482915B7645E0CBCC9E577D3690B1BB993AFC63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:e8:fe:70:e7:c8:6c:94:aa:4e:83:4f:e2:
0d:17:3f:94:b1:f8:f0:24:cf:a4:00:fa:40:7f:0f:
e6:1a:69:c7:05:ae:d1:c0:5e:1a:2e:e1:9b:b2:3c:
8f:c4:2b:37:e3:df:b8:42:08:85:16:f0:e8:b9:21:
b7:61:76:cf:ff:d9:81:5f:b7:ad:da:a4:05:2d:df:
4c:78:2f:76:9c:8f:90:90:e5:d8:4b:88:f6:6f:22:
10:88:b7:2e:70:20:35:79:7d:f9:69:7f:1c:3b:6f:
12:4a:c5:4b:b2:f1:55:02:35:65:8a:46:75:fd:34:
4e:ec:43:bd:00:cd:c2:7b:f4:07:06:1d:e3:13:62:
bb:11:05:05:30:fd:75:e7:2d:bb:e4:ae:f3:71:09:
90:8a:b2:1d:ac:5d:a0:7d:ab:6c:d3:65:2f:fc:90:
54:6c:b4:b4:0b:c9:48:6f:87:5a:ca:ec:62:5c:04:
3d:e1:ee:42:7d:50:c3:f0:d5:5b:8c:78:83:3d:f5:
9a:4d:fc:03:9a:6b:10:15:63:4f:5b:e7:2e:cf:35:
65:18:43:47:21:3f:58:ff:64:5d:40:24:14:f0:81:
8f:24:f8:58:30:fe:f4:f8:93:21:52:cb:9d:16:d5:
c1:cc:cb:6e:63:96:86:42:98:18:54:3e:82:47:e0:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:82:91:5B:76:45:E0:CB:CC:9E:57:7D:36:90:B1:BB:99:3A:FC:63
X509v3 Authority Key Identifier:
keyid:DD:DD:B3:9C:4F:26:5C:9D:4C:FC:C3:CB:FF:83:4B:12:F4:92:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/DDDDB39C4F265C9D4CFCC3CBFF834B12F4928027.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:59:1b:73:e9:7a:3b:0f:c6:bd:d9:f0:54:07:47:da:b0:13:
90:7e:16:5f:1e:04:04:13:e2:d9:78:e2:b7:88:4e:c7:40:e4:
8c:37:0e:16:2b:03:09:a0:bc:20:a8:f2:70:63:95:86:c9:a6:
57:2e:dc:de:8e:dd:e2:63:ce:31:dc:62:0c:56:df:08:f6:0e:
fc:29:48:70:34:04:ae:26:e8:00:8b:b8:41:a5:cd:73:18:be:
c2:56:d1:11:0d:9e:f7:52:69:e3:86:63:b8:3b:a3:e6:93:88:
22:f8:ee:56:a2:3c:a3:2f:2d:74:9a:a6:41:ed:0c:f4:d8:96:
cb:80:7d:4e:d2:e8:48:32:08:8a:b1:8e:4c:79:09:b0:95:73:
88:99:50:66:e9:cb:b9:c7:62:39:af:70:2a:91:92:f6:96:73:
e6:77:6a:2f:34:c0:18:c0:02:7b:fb:89:af:db:fa:8d:c9:3a:
4e:d5:46:bb:dd:53:e1:38:5a:31:26:1e:22:a6:be:b0:ee:89:
16:9b:36:c3:29:f8:16:e7:0d:c8:ea:29:db:4f:53:dd:29:f4:
bc:b1:7e:2d:56:4d:e9:36:71:b3:8d:6d:a5:96:6a:82:1a:a7:
d1:22:9c:f9:da:db:33:81:f7:b4:65:08:03:70:75:98:10:80:
90:f4:aa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:05:21 2026 by rpki-client