
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft
File: 583609807E4BA80D0B54C99C333B7590A6907BD4.mft (raw, json)
Hash identifier: bkoNjG1Qj3PpHUDaa0+lzX3OH/HjzSGZFHwoMhNvNFI=
Subject key identifier: 7A:2B:1C:4B:6D:50:29:92:B2:3E:EF:0A:7C:65:0C:93:1B:91:84:25
Authority key identifier: 58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4
Certificate issuer: /CN=583609807E4BA80D0B54C99C333B7590A6907BD4
Certificate serial: 49753E92E36BCCF7D5D2C767B5C2AC964539DF23
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 21:31:20 +0000
Manifest this update: Thu 23 Jul 2026 21:26:20 +0000
Manifest next update: Sat 25 Jul 2026 00:51:20 +0000
Files and hashes: 1: 583609807E4BA80D0B54C99C333B7590A6907BD4.crl (hash: JleuX9zrylMcVUZO0lCKIMVCTSPxsvrpAfue2UaKhVE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.crl
rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:75:3e:92:e3:6b:cc:f7:d5:d2:c7:67:b5:c2:ac:96:45:39:df:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583609807E4BA80D0B54C99C333B7590A6907BD4
Validity
Not Before: Jul 23 21:26:20 2026 GMT
Not After : Jul 25 00:51:20 2026 GMT
Subject: CN=7A2B1C4B6D502992B23EEF0A7C650C931B918425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c8:15:d5:72:70:fd:40:62:a1:ed:8f:42:4f:
4f:fb:1f:fc:98:7e:fd:fa:c4:78:75:30:72:d7:55:
cd:a9:32:d3:cc:cd:a8:3b:5b:37:3e:a4:d2:b2:af:
37:dc:e6:d6:6f:69:5c:9f:97:95:a4:83:ac:e8:1a:
4d:d8:ee:ad:6d:7e:d0:59:20:41:0f:cc:45:8b:44:
20:eb:98:84:4b:0c:a0:39:1c:80:4a:b9:41:89:fd:
b1:89:28:aa:37:64:16:83:cf:28:c6:e3:11:11:9f:
9b:19:43:94:2b:c8:59:32:dd:b6:b5:69:0b:e5:47:
df:e9:18:e2:5a:be:c2:3d:fe:9c:a6:df:e0:2f:d2:
f1:1d:b3:3a:b3:42:8b:ba:c1:c7:b3:6f:90:d2:e8:
1a:ce:2f:1c:6b:86:5b:91:a6:e7:e8:e8:27:ba:10:
db:dc:a2:4c:d7:5b:61:79:ed:80:a8:9d:09:32:d4:
bb:a3:81:8a:22:0b:dd:d2:2e:d9:62:b4:2c:2a:1c:
7d:50:66:c5:c9:e4:38:0f:72:2c:17:59:3c:b7:9d:
39:09:80:56:27:b7:a2:11:70:82:7a:90:52:05:84:
e4:a3:a6:d0:98:fd:2b:cb:9a:91:c6:2d:7c:85:8a:
a9:00:ff:b5:50:48:fd:71:0e:99:e6:e1:c8:9e:21:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2B:1C:4B:6D:50:29:92:B2:3E:EF:0A:7C:65:0C:93:1B:91:84:25
X509v3 Authority Key Identifier:
keyid:58:36:09:80:7E:4B:A8:0D:0B:54:C9:9C:33:3B:75:90:A6:90:7B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/583609807E4BA80D0B54C99C333B7590A6907BD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/583609807E4BA80D0B54C99C333B7590A6907BD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c6:18:61:b4:35:70:2e:32:fd:6d:b8:86:69:8c:79:4f:3e:
7d:29:af:9f:aa:90:f1:d1:7e:07:09:79:39:f5:7d:9e:17:1f:
10:6b:50:8d:a5:4a:d6:3f:67:7b:c7:82:a9:5d:5f:80:ca:f5:
06:8c:04:47:d9:22:cb:b0:82:96:f2:e2:b5:7a:d6:91:5a:0f:
4b:72:18:8f:1d:e1:89:14:ff:9a:4a:9c:7f:f7:8f:a6:38:4c:
61:36:1b:3c:7f:04:04:cc:ba:8e:d7:b3:c1:04:ce:0f:57:7d:
88:d9:b2:3c:20:7f:c2:87:84:06:e4:fd:45:f5:09:f9:ab:7d:
17:9c:eb:f5:e4:1f:ec:9e:6b:1f:74:af:62:54:fa:a8:47:43:
32:d0:e1:b6:8c:58:12:c3:fd:2e:b0:e1:e1:bd:15:c6:9a:e1:
ec:74:3d:59:cc:8f:5b:43:d6:88:95:cb:52:f1:c4:e1:7c:bd:
c4:30:91:7b:b7:ed:91:a0:c7:2f:8b:7c:ad:da:db:17:b5:f0:
6a:dc:e8:4e:b5:f4:42:b1:83:24:9b:f2:65:cd:02:15:f2:77:
88:fa:55:c7:2c:51:7b:a7:46:9f:4b:8c:66:d3:cc:7c:0e:d6:
06:14:fb:66:b7:ea:e3:1a:58:d0:22:57:b0:ba:ea:3a:de:68:
88:eb:17:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:04 2026 by rpki-client