
$ rpki-client -vvf rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft
File: 00095019ECFE138568A45C973E2550DDCDFE24F9.mft (raw, json)
Hash identifier: qenjKe4BqwOw8F/pyz0KKIJT0WRnXhAlKeZwV6n98mg=
Subject key identifier: 8A:BD:CC:B9:6B:19:71:EF:8C:8B:B8:02:AA:60:7F:27:9A:8B:DB:CD
Authority key identifier: 00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9
Certificate issuer: /CN=00095019ECFE138568A45C973E2550DDCDFE24F9
Certificate serial: 3704E73E6D94E203C97CCA5F79DF83B140BBACB4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 20:24:59 +0000
Manifest this update: Thu 23 Jul 2026 20:19:59 +0000
Manifest next update: Sat 25 Jul 2026 00:16:59 +0000
Files and hashes: 1: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: 9NjGQraMtFt8WFleFmys2JeiEGfDbejk4iig/XaEVZ4=)
2: 00095019ECFE138568A45C973E2550DDCDFE24F9.crl (hash: VYMlLJ91pQyLmgwteiiQG7qlQwh4peqM7LoHMhrVzE0=)
3: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: QD46OeSAEEYRUHA+p9YKqowoXvSQlWoPfMsfotiNmwI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl
rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:04:e7:3e:6d:94:e2:03:c9:7c:ca:5f:79:df:83:b1:40:bb:ac:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00095019ECFE138568A45C973E2550DDCDFE24F9
Validity
Not Before: Jul 23 20:19:59 2026 GMT
Not After : Jul 25 00:16:59 2026 GMT
Subject: CN=8ABDCCB96B1971EF8C8BB802AA607F279A8BDBCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:5a:d3:b4:a1:00:9d:b0:76:81:55:f8:93:
bb:80:a9:e3:04:4f:8b:7e:9a:bc:bd:45:2b:29:b3:
34:d2:90:39:f0:85:b9:d7:c1:89:e7:c3:0e:fb:28:
60:b2:fe:5a:39:31:62:87:0f:e8:17:55:20:71:9c:
6f:65:98:61:05:df:73:89:50:0a:a4:03:92:77:87:
85:d5:a0:5e:ab:55:79:7f:5c:1e:25:b8:76:1a:f6:
de:4f:73:27:4e:21:4f:83:a7:a9:98:ea:70:1c:ad:
5f:6d:50:1e:e4:32:39:62:25:ec:87:c9:d0:1b:a8:
ba:1a:a2:ac:d9:36:9b:b1:da:a0:f8:20:1c:f4:ee:
49:c2:96:89:1d:af:61:81:8f:e3:f8:14:c4:00:57:
81:dd:6c:ac:b6:49:3a:16:ab:e6:02:e5:e4:78:59:
41:b0:56:7f:3e:8d:b2:12:c9:ce:59:21:2c:a8:13:
ca:f1:c4:ae:4b:c0:cb:12:89:ff:30:6d:6a:40:ba:
7c:3f:63:fc:60:9f:60:3c:b3:ac:23:55:cf:60:9b:
36:5a:e2:23:3a:29:d0:e2:6f:14:a1:b3:b9:f0:c3:
87:88:28:24:b7:5b:57:82:7b:d2:ef:c7:a8:61:97:
bd:f2:36:f7:17:5a:a0:66:8c:d8:97:c5:59:cc:78:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BD:CC:B9:6B:19:71:EF:8C:8B:B8:02:AA:60:7F:27:9A:8B:DB:CD
X509v3 Authority Key Identifier:
keyid:00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:35:52:c0:cd:4c:b8:25:71:c6:a0:84:3b:8d:31:8c:1b:85:
27:d6:9c:60:ed:f8:ea:40:f0:62:01:68:94:06:38:7f:fb:96:
2e:1f:21:b2:cb:fc:9b:d1:c7:35:38:34:65:4f:9e:45:ac:1e:
c8:8b:d9:51:8a:1a:11:51:0d:0f:e5:81:6d:0b:59:8c:9a:75:
f2:25:ac:2c:45:e6:b1:93:50:1e:d7:30:54:04:f9:97:1d:83:
06:de:23:0c:e7:f7:e7:a3:16:ab:99:3d:24:64:50:a8:ba:b7:
e4:96:e1:0a:f8:03:5e:a9:b6:44:70:90:6a:ab:40:2f:22:e2:
0e:e6:65:2c:22:00:af:02:57:96:17:09:ab:25:20:1f:c4:42:
36:dd:6d:f8:bf:99:44:3b:95:fd:72:46:0e:95:44:8b:ef:b8:
50:3a:64:34:75:81:00:75:10:4e:09:21:7c:45:9b:72:aa:15:
52:8d:36:45:06:44:72:da:d4:19:51:45:45:d2:32:6d:d6:d4:
0c:e6:eb:45:27:1d:ea:f1:ee:c5:14:7d:cb:0d:a7:2e:cf:ca:
6e:2b:84:e4:9f:66:06:32:0b:c3:0f:5d:b5:4b:75:dc:ba:bb:
ed:dc:fb:b9:9a:4c:08:fe:0c:c7:0c:d2:02:40:66:f3:e0:5d:
a8:8c:28:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:03 2026 by rpki-client