
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft
File: B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft (raw, json)
Hash identifier: /SZjPmIzY8azBQ0Ej2w8nJYlCF75+8xL9RlmICMf58Y=
Subject key identifier: 4C:05:0E:44:B6:B4:C0:0F:E6:EF:C3:49:48:95:D7:1C:4D:2C:11:15
Authority key identifier: B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05
Certificate issuer: /CN=B32620A4DF4196D2A3CEBA2CCC7873549AAC6105
Certificate serial: 08033B676C72F2DF0C46D2B6282A625137A5D787
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 08:45:05 +0000
Manifest this update: Fri 24 Jul 2026 08:40:05 +0000
Manifest next update: Sat 25 Jul 2026 09:47:05 +0000
Files and hashes: 1: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: nGCzx9GztVX9RTrYIz2qrQucEQnhRI7SlGCvxpc25Jk=)
2: B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl (hash: v5rIi3T1eQUVQtqpqLXO0XZ4k0RUmg01DbweUBUp6E4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl
rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:03:3b:67:6c:72:f2:df:0c:46:d2:b6:28:2a:62:51:37:a5:d7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B32620A4DF4196D2A3CEBA2CCC7873549AAC6105
Validity
Not Before: Jul 24 08:40:05 2026 GMT
Not After : Jul 25 09:47:05 2026 GMT
Subject: CN=4C050E44B6B4C00FE6EFC3494895D71C4D2C1115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:6c:03:2a:2b:ac:cd:0c:2f:81:24:d0:bc:
42:ad:c2:44:bd:17:95:6e:80:44:24:3e:4e:f4:25:
04:39:80:0e:04:61:e4:e2:c7:a9:d9:c5:a9:7c:c4:
fc:37:ce:2c:dc:af:6c:a9:18:37:97:ba:57:7a:a6:
49:93:c8:de:4e:39:db:8f:25:24:ac:47:98:85:c0:
fb:1e:c5:29:a9:40:8e:fa:d2:0b:eb:2b:e8:3a:43:
90:04:73:74:cc:54:0d:50:ea:df:df:fd:60:63:c2:
b2:f6:ea:a0:a1:62:f6:96:44:40:0f:cf:16:2b:98:
fd:93:70:c3:e9:0a:4f:f8:66:82:a5:fa:1a:7b:69:
da:ab:77:c3:b4:cb:b1:c3:4f:67:ec:87:df:89:20:
83:c4:47:ff:88:a2:0c:94:d8:cb:59:8e:04:c8:c8:
91:e8:6e:3d:ea:cc:4a:19:a0:f1:4c:42:6f:6f:f2:
58:6a:44:7c:cb:97:7c:ca:61:5e:b8:40:fc:2d:f6:
d8:9e:40:8d:41:7e:e7:70:8d:5f:62:1a:63:fd:23:
9e:63:c8:30:39:4b:38:06:18:3d:47:7a:da:ed:3e:
f4:77:97:d9:8a:ba:74:30:70:03:f1:0f:2f:eb:7d:
91:b8:bb:59:71:49:8b:4a:a6:0a:91:12:64:7b:f2:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:05:0E:44:B6:B4:C0:0F:E6:EF:C3:49:48:95:D7:1C:4D:2C:11:15
X509v3 Authority Key Identifier:
keyid:B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a9:1f:af:ce:63:79:f9:c7:b2:75:49:d7:bf:fe:18:85:9d:
a1:ea:f5:0a:d8:26:aa:51:0f:5f:84:58:46:91:ca:48:d1:e6:
63:ab:70:31:69:1d:5c:32:82:6e:de:b9:09:f5:d8:7e:c1:10:
b4:93:5e:14:55:8d:3a:74:c8:09:7a:bc:b9:db:77:2b:86:56:
27:b6:c0:c5:57:71:2c:8e:a1:2f:00:06:26:da:d1:84:60:68:
19:36:81:72:01:8d:09:54:cc:17:6f:c1:2e:6b:3b:ec:c9:83:
15:af:24:c8:fb:b4:4c:16:fa:26:0b:40:39:86:3a:bc:4b:26:
a8:db:97:ad:ee:1d:e2:ac:20:5d:35:aa:c6:5a:18:5e:68:b7:
0c:1e:78:dd:e3:b8:c2:8c:9b:92:9f:a4:7e:bc:60:3c:44:ea:
6a:cc:be:e1:36:e7:b5:56:1c:73:37:3c:3e:e6:67:7c:a1:91:
c1:2a:16:1b:74:69:5e:92:35:a9:7b:f4:45:5e:cd:5a:c7:14:
3d:c2:35:9c:6f:0b:66:37:b9:83:be:21:1d:ab:02:1a:6f:07:
e5:b4:58:26:07:81:24:e5:57:26:42:c1:6d:5e:ea:83:2f:91:
b8:0d:f7:8a:2e:89:c1:62:73:1d:88:cd:4f:14:82:e7:d2:c8:
89:fa:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:06:19 2026 by rpki-client