
$ rpki-client -vvf rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft
File: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft (raw, json)
Hash identifier: j0PwbAL9gZ3nKHG8KWyqsiwExcO7lVFgdQOT8a3C3/M=
Subject key identifier: 1C:6D:20:57:6F:11:DE:23:A7:EB:0E:46:BD:9A:E8:39:06:8F:5C:66
Authority key identifier: C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C
Certificate issuer: /CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C
Certificate serial: 6C99358AE958C2690890FACC6EF5C71EF7436546
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 13:31:38 +0000
Manifest this update: Thu 23 Jul 2026 13:26:38 +0000
Manifest next update: Fri 24 Jul 2026 15:46:38 +0000
Files and hashes: 1: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: hbxsy5rYM2ui/y8kSQK8vRtJw5Os4ztQgliynYBu9Sg=)
2: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl (hash: 7FCU7wlLr/cO50b2UCmvPGlndFmwwAg0TPro2n90e9U=)
3: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: +rxATWvogOmG58QtPOl3t5ZnCAWvuClI+FAmj6pibBE=)
4: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 67eHKrfnUV+o5bdh8AJ2qRePKkWRvK0EPB7qFbO8S2g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl
rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 15:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:99:35:8a:e9:58:c2:69:08:90:fa:cc:6e:f5:c7:1e:f7:43:65:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C
Validity
Not Before: Jul 23 13:26:38 2026 GMT
Not After : Jul 24 15:46:38 2026 GMT
Subject: CN=1C6D20576F11DE23A7EB0E46BD9AE839068F5C66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:a4:34:a8:c1:52:99:aa:52:0b:17:e2:97:
5d:d9:24:dd:4c:a4:da:a5:af:77:b1:46:bc:26:38:
4c:59:e7:68:47:46:8a:11:45:28:bd:e2:7e:a4:c0:
71:b1:17:c4:f7:6c:5b:3f:31:1f:a4:82:0b:cd:ec:
df:a8:ff:85:0b:73:a5:45:5e:d9:2c:03:77:1f:9b:
6e:a8:0f:53:e4:d7:51:33:b0:d5:19:21:da:90:f3:
c7:e5:98:67:3d:3a:08:95:3c:39:08:d9:15:1c:5f:
cd:fa:66:1e:c3:c7:19:ba:bf:53:85:11:c8:94:e7:
72:7c:d7:09:43:44:78:a9:33:1a:92:ba:97:cd:9f:
62:f8:b7:47:48:a1:b3:89:ed:91:e9:7a:d9:fb:54:
69:41:2c:75:66:a8:f4:65:2f:26:8f:5e:ec:64:2d:
7d:99:61:9d:8f:0c:4f:fd:d3:4b:5e:53:a0:1e:3f:
70:bf:d4:91:0d:92:a4:38:a1:57:8f:dd:73:92:45:
55:27:ec:f0:c0:e0:3e:b3:56:70:4f:75:a5:fd:49:
9c:27:71:eb:b7:58:04:a7:f0:0a:c3:df:7a:51:5a:
d5:74:4f:d8:e9:06:37:a4:f5:6e:46:24:2b:5d:d4:
74:be:b6:c6:ec:68:e0:af:12:6d:c8:af:b9:07:46:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6D:20:57:6F:11:DE:23:A7:EB:0E:46:BD:9A:E8:39:06:8F:5C:66
X509v3 Authority Key Identifier:
keyid:C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7e:f1:3e:fb:d6:ed:ac:bc:0c:65:10:a1:0c:fc:cd:34:e8:
94:e1:26:a0:ad:fd:00:fb:d0:52:cb:a8:14:dd:88:e9:b7:0e:
44:96:23:98:d1:6e:54:09:d7:36:b1:ff:2d:c0:53:e9:ac:11:
5d:1a:c4:b2:83:55:70:c9:69:ba:95:a1:93:1d:72:5d:e6:49:
98:cb:e0:c9:f4:cd:26:fa:6d:c2:30:f7:bb:2b:e0:a1:ee:eb:
84:d5:7e:50:4e:fe:f3:ef:8d:d0:c1:f2:a9:b2:4f:e3:7a:68:
6f:07:b6:1f:a3:11:9b:bd:95:2b:04:4d:ab:60:ca:7a:a0:ac:
51:3e:99:74:51:d3:bd:99:2f:53:ea:46:60:c0:a6:23:f5:6d:
49:13:87:15:0d:35:a7:76:af:48:52:ed:c9:41:f2:b7:fc:86:
7e:95:0a:ff:82:cc:96:10:17:d6:e6:b2:55:4d:26:df:9c:a0:
8c:d7:86:ff:59:6b:6e:58:45:5c:13:7a:dd:f3:e5:20:41:74:
f5:ab:c5:e3:1a:bd:54:b1:32:ad:ac:a1:75:5c:27:55:c4:ad:
3e:b5:15:ea:6e:14:01:bb:13:e9:b4:68:b1:f5:47:8a:24:e3:
f0:2a:30:61:e5:00:cf:11:b0:7b:b4:37:4b:57:85:3a:ca:9b:
4b:01:b4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:14 2026 by rpki-client