
$ rpki-client -vvf rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft
File: D14C74B06D9A4D3A47662DA76625CD3537D00471.mft (raw, json)
Hash identifier: NeLCcHi4mQoKRDSFR68PnyJ9hGqCJYPHqODcyKRQ61w=
Subject key identifier: C9:ED:4B:4E:E3:62:D3:1E:72:35:52:2E:A9:23:7E:F3:D6:69:7D:A5
Authority key identifier: D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71
Certificate issuer: /CN=D14C74B06D9A4D3A47662DA76625CD3537D00471
Certificate serial: 7DB51A16A8BC2DE26CE53F6E6BB85DB9DD9ACE47
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 03:49:02 +0000
Manifest this update: Fri 24 Jul 2026 03:44:02 +0000
Manifest next update: Sat 25 Jul 2026 07:22:02 +0000
Files and hashes: 1: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: juHK8q2FxwMCfB0XDh4dieyd+WbhEL+tRuypaniEX8M=)
2: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: sR5YvjfokmmdEnTZTCAPYVCi8TZ9C5R9A7CXeqBE8Bo=)
3: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: x+7pzkIkAAYum6CK13j4jNfXi0Fn68V8sWzEUq8++EQ=)
4: D14C74B06D9A4D3A47662DA76625CD3537D00471.crl (hash: L8U8O02QldAOmVahh1ZGerT6P2m5E4pg8S6SWPyof7o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl
rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b5:1a:16:a8:bc:2d:e2:6c:e5:3f:6e:6b:b8:5d:b9:dd:9a:ce:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D14C74B06D9A4D3A47662DA76625CD3537D00471
Validity
Not Before: Jul 24 03:44:02 2026 GMT
Not After : Jul 25 07:22:02 2026 GMT
Subject: CN=C9ED4B4EE362D31E7235522EA9237EF3D6697DA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:60:62:a4:08:40:5a:a2:44:a3:3a:d5:2f:
10:bc:0f:2e:ef:52:a2:de:18:3b:fd:94:6b:ac:75:
f4:80:23:89:bd:21:3e:53:ab:12:0d:2a:3f:ae:d3:
7d:c8:b9:2c:bd:c4:cd:2c:ef:03:ad:59:1d:ba:e6:
fa:80:5e:ad:f1:c9:93:45:03:ce:b9:cc:27:41:c5:
c4:3b:2d:64:30:fb:c1:37:e6:45:31:61:4d:04:e1:
92:62:c6:8e:77:34:ab:67:1c:d0:9c:87:46:9f:c0:
4d:1c:44:7d:fc:bc:79:11:62:83:d5:2f:ea:16:ec:
68:a4:9c:57:90:94:af:53:12:b4:d1:2e:4d:c7:0c:
59:db:0c:cb:90:d9:af:1b:c3:47:e5:34:a1:72:37:
ff:5d:fc:8f:2c:8e:dc:48:cb:12:dc:d4:77:0d:f8:
95:75:4d:bd:e6:36:e7:24:5a:b0:19:96:9f:46:70:
86:bc:a5:ee:d3:32:29:a1:a1:82:6f:9f:37:d7:29:
d1:5f:58:13:fb:8f:06:bf:c1:bb:ed:3b:e5:70:4a:
f6:c0:33:04:9e:95:12:65:df:df:6d:a6:4c:75:ef:
f7:b9:b6:1c:44:60:7c:7d:96:84:54:33:cc:a6:97:
7a:cb:9a:cc:37:d8:d0:26:d6:5d:4a:e7:f2:18:63:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:ED:4B:4E:E3:62:D3:1E:72:35:52:2E:A9:23:7E:F3:D6:69:7D:A5
X509v3 Authority Key Identifier:
keyid:D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b9:15:5e:3c:8e:12:57:2b:21:fc:d3:de:6d:42:da:0b:56:
be:af:b0:3b:e6:4b:a9:11:02:6b:f3:49:d3:66:cf:ce:a1:84:
34:a5:c8:81:e1:eb:11:64:cf:0d:b0:32:d6:a0:a6:d9:2c:52:
6c:5d:eb:e8:ef:c0:19:e0:2a:fb:07:06:2b:46:ab:38:c5:c1:
2c:a4:90:e7:1b:a7:25:6d:9e:98:83:cd:23:dd:f6:e0:93:11:
0b:ef:78:35:12:5b:34:bc:23:5c:d3:b4:88:08:31:f4:6c:2e:
35:50:af:06:b9:4d:41:4c:e9:b2:33:7f:2a:a3:cc:e0:0a:0e:
a2:d2:1e:99:fb:c2:76:76:71:be:1b:90:2e:02:f2:c7:e7:fd:
71:e2:cf:9d:9b:55:76:a0:ec:d2:84:2b:ad:b6:68:1c:e3:22:
0f:54:6f:64:12:db:c1:30:93:fa:f5:1f:76:9b:b7:3e:09:31:
f6:2e:80:3b:45:c5:c4:f7:2e:4b:98:fc:7a:48:33:bd:34:b8:
d5:e3:15:00:08:a8:db:9b:a2:d5:5a:6f:6b:ba:85:94:e8:26:
bf:da:aa:84:4a:2f:d5:c4:b2:7e:eb:51:46:bf:de:cb:aa:12:
0a:57:6b:f2:b3:27:b7:14:d8:53:c6:67:74:f6:6c:f9:c6:13:
ca:26:64:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:59 2026 by rpki-client