
$ rpki-client -vvf rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft
File: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft (raw, json)
Hash identifier: eg8lB7vnqlUvOFOlUedg8md9jNMcl4VBT9hafDEvNIo=
Subject key identifier: D6:AB:AF:20:28:B2:51:7A:24:C1:52:8C:53:B3:A6:D3:7B:A0:0F:B0
Authority key identifier: 11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1
Certificate issuer: /CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1
Certificate serial: 2A6A777F7DA75189A9B23823D9D177D9EE3B67F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 19:54:26 +0000
Manifest this update: Thu 23 Jul 2026 19:49:26 +0000
Manifest next update: Fri 24 Jul 2026 21:11:26 +0000
Files and hashes: 1: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: Zk2C8S3MwM5h7vXomg1WGWoihsk+uAiRDgp6DvLkrYk=)
2: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl (hash: UQD6ypDkTslX5na4yq9hczU0cXPT/WoGTjavfAaSg7I=)
3: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: oHCuH/wfD5uofyH9qDQzuSNonMRnW2BjZEpAbHvRcj0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl
rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:6a:77:7f:7d:a7:51:89:a9:b2:38:23:d9:d1:77:d9:ee:3b:67:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1
Validity
Not Before: Jul 23 19:49:26 2026 GMT
Not After : Jul 24 21:11:26 2026 GMT
Subject: CN=D6ABAF2028B2517A24C1528C53B3A6D37BA00FB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:33:32:2c:bd:0f:85:66:0b:b7:97:61:b4:
c4:01:44:ec:e7:b8:2f:55:b3:71:76:05:26:bf:9f:
d7:03:0b:8d:f3:2d:2c:f5:0d:c4:5f:c8:72:0b:be:
55:e2:a6:77:5a:06:c5:96:59:f6:68:e2:76:85:d5:
e4:47:e6:0d:dd:bf:93:8d:51:53:dc:c5:bb:42:a2:
12:a8:19:70:e2:5b:ab:9f:c5:0b:47:a1:ec:26:bf:
a5:2c:0a:a7:92:75:bc:3c:5b:cb:ed:1e:82:52:29:
e4:0d:d1:ed:39:6f:d6:c5:73:ff:79:da:c9:a5:4b:
d1:bc:c5:fe:19:94:89:cb:d3:f3:37:78:50:39:7c:
10:8f:3f:f0:3c:c2:af:60:90:ea:b4:b6:e2:4b:54:
69:fc:cf:57:fb:e1:8e:6b:32:9c:d1:9f:66:33:9d:
3c:f9:06:f0:15:26:9a:fb:21:36:79:39:62:84:c0:
5d:4a:1d:ae:4e:64:bd:08:02:1b:9d:a6:21:97:04:
2f:59:aa:6f:8d:7f:2a:7f:25:39:8a:fa:a4:68:c2:
db:6e:94:e8:27:e8:44:57:6f:30:00:a8:84:cf:62:
b5:67:f1:f8:63:b2:39:19:f4:0a:d6:7f:f9:74:26:
8a:8a:7a:da:af:b1:a5:2d:b0:38:93:04:f7:bb:69:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AB:AF:20:28:B2:51:7A:24:C1:52:8C:53:B3:A6:D3:7B:A0:0F:B0
X509v3 Authority Key Identifier:
keyid:11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e6:2a:0a:4d:d6:26:bd:d9:93:c5:0d:98:85:91:14:7b:1e:
d0:67:9f:c1:f4:f3:ff:8c:8c:de:5b:de:b8:1f:0e:0d:2d:35:
8a:8e:d6:20:5e:62:20:97:13:6b:2e:bb:10:c1:03:1b:96:c3:
71:58:e0:94:e2:db:15:37:11:a6:f3:0c:99:08:66:fe:71:39:
63:ac:ee:48:1e:34:78:42:e7:a2:2a:82:e0:d9:b0:b8:23:4b:
a6:aa:c6:ad:20:38:9e:c5:83:0e:61:e6:0a:79:a1:68:81:78:
07:0b:b8:52:06:9b:6b:ce:79:4d:84:1c:d6:15:19:45:65:0e:
4f:11:c6:aa:50:2c:65:1b:b1:f9:2f:3e:cb:8d:bb:bb:34:24:
7f:72:61:b4:f3:d8:d6:d6:49:a2:c7:c5:44:b1:d3:7f:74:0d:
9b:6c:e8:f0:8c:8d:b0:4f:f2:bf:12:71:a2:ec:91:e1:f5:dd:
4c:71:09:6f:ad:69:16:47:fe:1e:b2:b9:bd:b0:32:55:de:74:
ec:b4:37:8d:7d:64:94:1a:e2:8c:31:10:f1:a6:35:4b:09:da:
d0:6e:5e:06:13:bc:50:3f:18:d9:1d:a0:de:2d:65:78:11:30:
cd:dd:01:2d:65:a3:0b:12:45:f2:a1:4f:1b:44:a3:ca:91:f4:
9d:7e:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:17 2026 by rpki-client