
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft
File: 951C84D9FEAF87E2196BBF71DC0326053CC04478.mft (raw, json)
Hash identifier: xaIMoSmolXo1bkQhIKLFMUPHKUwOUzYVENP21E0YkV0=
Subject key identifier: CB:CB:F2:12:F2:4C:C3:62:62:79:8B:42:53:28:50:62:3A:ED:9F:2A
Authority key identifier: 95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78
Certificate issuer: /CN=951C84D9FEAF87E2196BBF71DC0326053CC04478
Certificate serial: 64C913CA5F00DC3D87C7D2655808E597817BD87F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 22:32:19 +0000
Manifest this update: Thu 23 Jul 2026 22:27:19 +0000
Manifest next update: Sat 25 Jul 2026 00:58:19 +0000
Files and hashes: 1: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: /2R+nfFCxhyBUh1PRuVIBZMYLiYNSMPmjUD3SxKwk4w=)
2: 951C84D9FEAF87E2196BBF71DC0326053CC04478.crl (hash: Q98875B0i+k1QTGUJhUoH514c4wv8eeq2wLhWCl64xY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl
rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c9:13:ca:5f:00:dc:3d:87:c7:d2:65:58:08:e5:97:81:7b:d8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951C84D9FEAF87E2196BBF71DC0326053CC04478
Validity
Not Before: Jul 23 22:27:19 2026 GMT
Not After : Jul 25 00:58:19 2026 GMT
Subject: CN=CBCBF212F24CC36262798B42532850623AED9F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:18:f5:27:68:64:f0:4c:6f:a5:60:4e:90:
ed:73:65:d2:a4:9e:47:89:3a:91:93:a9:4f:55:11:
bc:a6:99:d4:b1:59:9a:b7:86:cc:29:30:31:8e:ff:
f2:e7:06:6a:6c:62:88:cb:05:02:8f:0a:04:2b:b9:
c8:35:c4:7d:5d:00:09:db:64:15:35:d3:2c:82:4e:
6e:ed:bd:d8:e8:58:85:fb:99:3f:c6:9c:5e:db:ae:
a5:60:8d:3d:7b:4c:76:a0:d4:da:2b:c8:23:e8:e4:
43:40:a7:cf:8d:dc:8b:bb:a7:92:75:51:c3:e6:e2:
50:d9:79:6f:4d:00:c4:77:b6:82:34:43:b3:7f:d6:
a3:04:22:af:a5:34:db:7e:c0:fe:cc:b3:28:0f:a9:
18:5b:bb:31:bb:82:ed:ef:be:9d:37:13:ac:9b:45:
32:55:71:d2:f9:7f:a9:48:4b:3b:3b:15:08:95:51:
3d:fb:50:9f:a0:cd:ad:62:78:f8:aa:e4:bb:a4:e3:
51:77:6c:64:8d:2b:86:46:84:93:b1:45:ba:b6:8b:
55:32:77:e7:b8:aa:c0:e4:f1:cd:3f:69:e0:50:e8:
ca:d8:f5:5e:a6:13:03:b6:18:d4:b2:fb:5b:95:64:
c2:ff:3b:09:ca:2a:fc:b7:7c:ed:45:7d:1a:9a:0a:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CB:F2:12:F2:4C:C3:62:62:79:8B:42:53:28:50:62:3A:ED:9F:2A
X509v3 Authority Key Identifier:
keyid:95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:26:e8:02:c4:26:e0:59:ce:1e:bc:a2:4a:e3:70:65:60:76:
f3:54:16:20:79:e3:cf:1c:9d:30:60:cd:26:f6:57:b7:75:72:
cb:36:b7:4e:29:1d:65:12:0b:80:20:b4:02:2a:ce:c1:b2:e4:
31:64:7a:2b:58:77:46:77:b8:13:cb:87:f7:69:f9:79:d0:83:
b1:0c:9b:68:ec:b2:72:ec:d7:fe:c5:27:a1:7e:15:34:00:6c:
b9:70:6c:37:5f:7b:3e:6a:39:48:f1:46:3c:61:19:c2:79:1b:
c8:cc:8d:0a:5f:ed:b5:93:48:e5:30:6b:9c:b8:4e:0a:52:f0:
67:33:06:be:2a:e1:63:74:39:64:8f:5b:08:d5:f2:01:c4:40:
42:4e:c2:3c:2b:5e:99:6b:f1:0d:b2:cf:d7:52:84:f0:81:2a:
89:36:cd:59:e0:9e:ea:7e:ae:99:ea:ec:bd:56:87:b6:d7:7f:
fa:98:0a:36:15:92:3c:d3:96:29:67:2c:c3:0e:2f:87:3f:04:
09:25:12:82:36:e7:39:24:e8:3d:91:b3:30:35:80:86:26:9b:
cb:51:c7:08:c8:46:3c:78:5f:b3:3c:f3:40:6c:81:6b:64:25:
91:8e:b9:8d:fd:25:36:0f:bb:6a:0b:49:75:a9:44:ce:16:17:
a5:90:44:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:22 2026 by rpki-client