
$ rpki-client -vvf rpki-rsync.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.mft
File: C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.mft (raw, json)
Hash identifier: P+JWISnapuMROom3AV3soVjnnhpiAC1Q/ydEpqjC7WE=
Subject key identifier: 96:F0:43:FA:03:7C:70:48:A3:BE:F7:82:BB:C6:65:E4:A9:2B:3B:36
Authority key identifier: C6:1D:93:8B:5D:87:EB:E0:E6:27:EE:07:FC:45:03:6B:2B:BA:4F:39
Certificate issuer: /CN=C61D938B5D87EBE0E627EE07FC45036B2BBA4F39
Certificate serial: 2180EA234D6C0EA68D07BBB16790FA0B62E6912B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 07:08:42 +0000
Manifest this update: Thu 23 Jul 2026 07:03:42 +0000
Manifest next update: Fri 24 Jul 2026 08:17:42 +0000
Files and hashes: 1: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: 0xOHl6zogrJ/obuZkR90hNTz1cxwOXlWuGkSveuKIyE=)
2: C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.crl (hash: APu0/lFcTYtGi4/qRTLlaSynGCPTbqhM0R8dU1/sPZc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.crl
rsync://rpki-rsync.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:80:ea:23:4d:6c:0e:a6:8d:07:bb:b1:67:90:fa:0b:62:e6:91:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C61D938B5D87EBE0E627EE07FC45036B2BBA4F39
Validity
Not Before: Jul 23 07:03:42 2026 GMT
Not After : Jul 24 08:17:42 2026 GMT
Subject: CN=96F043FA037C7048A3BEF782BBC665E4A92B3B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:f6:ac:6d:e2:04:09:19:de:3a:ae:83:0f:
d8:f1:1c:47:57:c5:a4:b8:0b:45:49:14:ab:d1:75:
f5:b9:32:40:1d:13:23:bd:6b:37:f0:ca:aa:16:d5:
92:0e:e2:5a:73:ee:50:4f:d9:31:c7:bf:f5:e7:ff:
40:73:a7:88:91:ec:ce:f1:26:cb:21:45:41:28:f1:
a5:ed:12:52:f9:9f:09:ef:85:78:3e:8c:57:db:36:
50:a4:88:8a:be:d4:22:59:96:99:3e:92:b7:df:b7:
93:fc:05:f6:02:ae:aa:34:0a:80:30:e9:51:21:2f:
37:43:04:43:07:d2:fe:bd:85:ab:c3:2c:8b:73:70:
fc:bc:13:11:95:ff:07:9a:7c:17:1f:4a:9e:07:2b:
5f:1c:a3:71:c2:4c:fe:7a:dc:56:74:c5:1d:9f:0d:
ca:d1:36:1a:37:09:74:93:8d:35:68:12:d4:3d:3b:
d5:59:51:19:c0:1e:19:8b:82:a9:92:02:99:5a:19:
41:32:87:8a:35:7f:94:5c:3c:c7:e8:da:7e:3a:7b:
dc:fe:58:91:d8:9c:28:84:e7:7d:6b:1b:c8:50:c4:
a6:3f:9c:00:de:67:39:b7:cb:a1:f8:95:06:70:0a:
bc:8b:45:b8:de:da:62:9f:12:ab:44:47:8b:d8:4f:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:43:FA:03:7C:70:48:A3:BE:F7:82:BB:C6:65:E4:A9:2B:3B:36
X509v3 Authority Key Identifier:
keyid:C6:1D:93:8B:5D:87:EB:E0:E6:27:EE:07:FC:45:03:6B:2B:BA:4F:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/C61D938B5D87EBE0E627EE07FC45036B2BBA4F39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e1:82:67:7c:07:20:7f:2a:02:b9:2a:41:02:e4:34:0c:d4:
cd:07:37:fa:ab:8f:23:dd:30:2f:f5:91:18:3f:fb:c8:f3:a2:
b7:a1:d2:28:65:f7:86:7e:e5:b7:de:20:03:75:66:72:57:d1:
fb:4a:5b:cd:6f:3a:6d:03:8f:f1:f0:da:ba:d1:26:03:74:cb:
a5:35:7f:a9:99:9c:fb:ed:4b:f0:7a:00:d6:ea:3f:8f:e9:b1:
dd:34:13:e9:e0:b1:34:5e:93:ef:8c:b3:f6:45:5d:a4:3e:3d:
9f:0c:7c:5d:3e:fe:f4:b3:ab:fb:da:7f:7d:7c:68:59:9c:c5:
80:73:59:77:da:3b:75:79:d3:d8:97:31:91:6d:2c:58:85:10:
f8:7a:7d:95:9a:0f:f5:fd:db:6c:a7:5b:36:d2:6f:d3:68:71:
e3:b4:93:79:3e:e7:c8:7b:db:89:c7:70:07:a7:f0:6a:3d:78:
c3:dd:5e:98:41:6e:3b:b5:15:96:b2:41:29:69:11:00:9a:db:
b3:81:64:86:32:48:f3:30:87:e8:dc:66:3d:8f:60:37:18:e2:
0b:d3:12:be:18:bd:88:d9:75:36:d0:f1:84:5d:07:af:bf:fd:
60:99:a3:45:17:c2:eb:fb:1d:de:24:f4:4b:80:7a:73:da:45:
82:8f:c1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:55 2026 by rpki-client