
$ rpki-client -vvf rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft
File: 65177A3236E4CDE9DEABA6D24D81798C0342B359.mft (raw, json)
Hash identifier: 5GDeLv0qYkvubbDMTtrkOeLESSQGAjPVkXSE0rPLhew=
Subject key identifier: EE:60:FA:70:0C:4F:6E:7A:85:E3:96:7F:27:0C:35:65:23:1C:6F:0B
Authority key identifier: 65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59
Certificate issuer: /CN=65177A3236E4CDE9DEABA6D24D81798C0342B359
Certificate serial: 5EC751F1C1D6CFC6B9AE0DDE4F234FA4AC3607B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 23:02:59 +0000
Manifest this update: Thu 23 Jul 2026 22:57:59 +0000
Manifest next update: Fri 24 Jul 2026 23:40:59 +0000
Files and hashes: 1: 65177A3236E4CDE9DEABA6D24D81798C0342B359.crl (hash: vunTzF5UpcRIwR7IU7tcQ+DYTm6MoFgded19UAiuOno=)
2: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: dc+32akDqD+whWWKGoW6auMBb4nmyq1TxJGgB+DF/Mw=)
3: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: lVbFef/6mdjInFTMm3cO34cZeIrGM0mKpOLsVw5+rAw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl
rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c7:51:f1:c1:d6:cf:c6:b9:ae:0d:de:4f:23:4f:a4:ac:36:07:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65177A3236E4CDE9DEABA6D24D81798C0342B359
Validity
Not Before: Jul 23 22:57:59 2026 GMT
Not After : Jul 24 23:40:59 2026 GMT
Subject: CN=EE60FA700C4F6E7A85E3967F270C3565231C6F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:48:46:9b:9d:fd:f6:71:39:fa:1f:63:5d:
a8:e3:7a:67:74:e1:50:3b:41:32:55:e5:d6:d3:cc:
1e:15:e2:66:55:b9:ad:7e:ee:c2:74:80:08:54:ea:
02:64:d8:a7:e5:31:24:b8:9a:13:e5:8c:bc:27:20:
73:d8:d3:56:51:f9:41:fb:1f:0a:de:5d:83:e4:f3:
70:0e:62:75:2e:67:89:99:d5:20:90:2c:4b:80:97:
c2:30:ac:6b:10:b8:ab:94:64:7e:42:6a:40:07:a4:
98:a4:6a:63:34:ed:9f:fd:33:2b:de:9b:3e:7a:25:
2e:16:b7:41:ab:c6:28:10:3f:3b:2a:fd:69:eb:cf:
00:7f:ce:d3:f8:45:11:85:60:c2:d3:61:f2:ba:72:
0c:f0:8b:44:c7:70:f0:92:6e:bc:57:a8:33:9a:55:
a9:50:86:60:98:60:fb:54:a1:84:37:da:e8:32:1d:
40:b6:f9:22:31:4a:e6:65:61:89:f4:5f:ce:5a:fc:
a5:0a:b2:c0:af:37:3d:e5:c0:99:3f:68:63:67:da:
86:3c:0f:5b:24:3f:ed:1c:58:c7:32:0f:d4:b7:47:
2e:eb:2c:d9:fd:c2:21:22:b3:9e:89:e1:b5:6f:09:
d9:59:a7:a0:74:3e:2d:cb:e2:01:2d:cc:8d:4a:fd:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:60:FA:70:0C:4F:6E:7A:85:E3:96:7F:27:0C:35:65:23:1C:6F:0B
X509v3 Authority Key Identifier:
keyid:65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0a:2b:72:c3:d8:66:3c:9e:c2:43:88:1f:e7:84:a0:7d:2a:
63:14:e9:1f:c3:b9:6a:a0:b9:83:ab:1b:02:1d:9a:fd:cc:f4:
93:2e:3e:87:90:c5:db:20:c1:74:76:0a:bf:9f:45:1c:a3:f9:
f4:c1:aa:44:a6:1d:ae:4b:bc:89:fd:db:fa:99:a7:eb:9e:16:
19:b4:aa:4d:b7:37:d1:33:23:46:2c:84:bc:96:da:88:39:f7:
0c:f4:2d:0a:0d:9d:ef:3f:4b:8d:0d:cd:e6:e6:80:f7:25:a7:
aa:11:99:6a:37:06:48:b9:a5:ee:c8:77:5c:a6:4d:b1:aa:9d:
ce:ec:18:a3:60:af:f2:c3:cd:99:04:12:77:e9:f5:dc:ed:71:
8f:f2:4e:59:06:9b:45:52:ad:9b:a3:12:32:f2:96:76:fb:6d:
da:01:58:b1:08:0c:f3:fc:4a:c1:2b:d3:80:dd:cf:12:e3:b8:
fe:d2:4b:ec:dc:2d:71:ee:72:f9:61:cc:39:ae:99:86:67:9d:
45:09:b0:dd:9f:2a:ca:ca:6e:e3:08:11:b3:dd:fa:9c:fc:32:
20:d7:3b:65:b0:f5:4b:b5:f1:01:94:2e:77:b1:dc:ec:c3:c1:
96:25:3e:53:cb:2b:18:fe:c4:fc:10:6d:b3:9d:1f:a0:7f:71:
c8:ab:70:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:11 2026 by rpki-client