
$ rpki-client -vvf rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft
File: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft (raw, json)
Hash identifier: uo6Ml5hTaojh7lyIAjFwlt7quusriPst4kiccLoblVU=
Subject key identifier: 2E:58:D3:06:3F:B9:3A:66:24:F3:FB:5B:57:55:6A:62:B6:86:39:B7
Authority key identifier: 1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9
Certificate issuer: /CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9
Certificate serial: 65ECBAE804C9D0FE9A68C390F993E3005E91E88F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 11:54:44 +0000
Manifest this update: Thu 23 Jul 2026 11:49:44 +0000
Manifest next update: Fri 24 Jul 2026 15:40:44 +0000
Files and hashes: 1: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: zhUAsPQU+LACnP7Ok3rWyU2O9s5oA5N+R3I26q0xz80=)
2: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl (hash: 2EoKqDaOWXWxd1ixbXPmRjp58WsgekUX3FF6aq9GvR4=)
3: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: KV+jDI5u7NDFg1jUUu5ndk8c7SwXpZDQJflp05ARGsU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl
rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 15:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ec:ba:e8:04:c9:d0:fe:9a:68:c3:90:f9:93:e3:00:5e:91:e8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9
Validity
Not Before: Jul 23 11:49:44 2026 GMT
Not After : Jul 24 15:40:44 2026 GMT
Subject: CN=2E58D3063FB93A6624F3FB5B57556A62B68639B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:d6:6c:a4:3e:c8:39:bc:0a:f3:18:0f:ef:
38:28:70:e6:29:cd:e4:b6:af:8d:07:80:03:e6:a4:
fa:4d:6d:52:1e:8d:9a:35:12:3d:fa:f6:4b:34:c7:
ab:ab:d2:8a:91:00:b1:24:b9:64:59:ab:77:b6:11:
f7:7e:51:58:61:4c:2d:2d:6d:8d:91:28:85:38:01:
a3:c0:65:d4:79:cb:38:fa:fc:6c:0e:5c:95:a7:3b:
ab:18:4e:28:64:b3:34:7e:4e:92:05:3d:b6:51:e1:
fb:0f:14:da:a7:07:a0:ad:d1:bd:d9:15:45:b9:86:
ee:c2:41:d3:85:8c:60:8c:fc:b1:8c:37:f0:e2:cb:
67:15:db:3d:15:2f:47:a4:3e:72:a9:d8:32:e0:58:
f1:8f:14:e4:4a:e0:42:a7:e5:6b:de:04:dc:3a:ea:
06:3d:89:02:ec:3d:e0:da:4b:f0:b5:2b:64:f6:5c:
56:9b:87:8d:fb:82:55:f5:91:0f:b2:8e:0f:8c:2b:
9c:d1:65:c8:3c:7a:3d:d4:12:37:10:a4:04:04:20:
3d:88:42:c4:3f:dd:9d:6e:77:3c:96:50:26:e9:b6:
80:fa:59:31:b3:3f:10:a6:54:d7:a4:82:51:b1:8e:
31:f5:e5:d0:75:a2:d1:1d:3b:e1:52:bd:16:87:a2:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:58:D3:06:3F:B9:3A:66:24:F3:FB:5B:57:55:6A:62:B6:86:39:B7
X509v3 Authority Key Identifier:
keyid:1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:44:66:e9:20:f2:64:59:15:fb:20:49:8e:67:c8:eb:24:c2:
f7:eb:bd:5c:3c:17:08:d1:b3:52:16:33:8f:dc:0d:5e:cf:bd:
5a:45:f6:94:41:aa:8d:e0:21:22:fe:bf:a1:65:12:ac:c9:8f:
79:21:2d:6e:3c:46:eb:6d:16:bf:99:92:e9:70:de:bc:af:5d:
f4:57:75:d4:bd:d5:47:60:4c:01:c8:15:3d:e8:c8:e5:32:1f:
d7:59:9a:0f:2b:24:ff:60:7c:3a:0c:20:31:c3:b9:de:82:76:
4e:3a:f2:20:5b:da:e4:6c:62:39:1f:70:49:68:97:b6:de:77:
a1:06:b2:a7:2d:6f:91:cf:56:ce:ef:35:6d:21:e0:ee:bc:78:
b0:24:b8:9b:fa:19:0f:a1:0e:23:13:ab:a4:a1:88:21:20:9f:
33:ca:52:06:36:e1:ba:8f:7a:bf:4f:9e:5c:19:46:c0:bd:75:
8e:0b:2a:72:78:b3:c6:4d:ca:57:ce:a1:84:5d:0d:a8:5f:c0:
86:f3:9a:e8:7e:72:59:c0:69:fc:fe:62:42:3c:f9:31:31:ba:
1b:26:22:3a:58:d8:f2:5a:29:95:03:80:bf:81:2b:b2:bf:50:
9f:39:9e:6b:b9:95:00:d3:45:c3:87:b2:c8:5c:dd:b5:03:3e:
fe:8f:37:ff
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZey66ATJ0P6aaMOQ+ZPjAF6R6I8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVCQjJD
RDZGQjlCOTAeFw0yNjA3MjMxMTQ5NDRaFw0yNjA3MjQxNTQwNDRaMDMxMTAvBgNV
BAMTKDJFNThEMzA2M0ZCOTNBNjYyNEYzRkI1QjU3NTU2QTYyQjY4NjM5QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4D9ZspD7IObwK8xgP7zgocOYp
zeS2r40HgAPmpPpNbVIejZo1Ej369ks0x6ur0oqRALEkuWRZq3e2Efd+UVhhTC0t
bY2RKIU4AaPAZdR5yzj6/GwOXJWnO6sYTihkszR+TpIFPbZR4fsPFNqnB6Ct0b3Z
FUW5hu7CQdOFjGCM/LGMN/Diy2cV2z0VL0ekPnKp2DLgWPGPFORK4EKn5WveBNw6
6gY9iQLsPeDaS/C1K2T2XFabh437glX1kQ+yjg+MK5zRZcg8ej3UEjcQpAQEID2I
QsQ/3Z1udzyWUCbptoD6WTGzPxCmVNekglGxjjH15dB1otEdO+FSvRaHoqk7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULljTBj+5OmYk8/tbV1VqYraGObcwHwYDVR0j
BBgwFoAUHW39BPjbIo2ng4dGu2Zbss1vubkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Mzk4ZWViMzgtNzc0Ni00ODk5LTlhMTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRG
OERCMjI4REE3ODM4NzQ2QkI2NjVCQjJDRDZGQjlCOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xRDZERkQwNEY4REIyMjhEQTc4Mzg3NDZCQjY2NUJCMkNENkZC
OUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh
MTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVC
QjJDRDZGQjlCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGBEZukg8mRZFfsgSY5nyOskwvfrvVw8FwjR
s1IWM4/cDV7PvVpF9pRBqo3gISL+v6FlEqzJj3khLW48RuttFr+Zkulw3ryvXfRX
ddS91UdgTAHIFT3oyOUyH9dZmg8rJP9gfDoMIDHDud6Cdk468iBb2uRsYjkfcElo
l7bed6EGsqctb5HPVs7vNW0h4O68eLAkuJv6GQ+hDiMTq6ShiCEgnzPKUgY24bqP
er9PnlwZRsC9dY4LKnJ4s8ZNylfOoYRdDahfwIbzmuh+clnAafz+YkI8+TExuhsm
IjpY2PJaKZUDgL+BK7K/UJ85nmu5lQDTRcOHsshc3bUDPv6PN/8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:53 2026 by rpki-client