
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft
File: 4063368E83B93018DA72EDEB060702A5F8F9269C.mft (raw, json)
Hash identifier: Zh+LGbpZOabJB1FzxkdzHmYzmz5yp4064e2vrtldasM=
Subject key identifier: AD:E6:38:55:AB:68:5D:96:30:82:E4:2B:76:0A:F9:4E:14:3C:E0:C1
Authority key identifier: 40:63:36:8E:83:B9:30:18:DA:72:ED:EB:06:07:02:A5:F8:F9:26:9C
Certificate issuer: /CN=4063368E83B93018DA72EDEB060702A5F8F9269C
Certificate serial: 6D67929F33C29305344E7F8525FF5A3C71A52F0F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4063368E83B93018DA72EDEB060702A5F8F9269C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 12:19:41 +0000
Manifest this update: Fri 24 Jul 2026 12:14:41 +0000
Manifest next update: Sat 25 Jul 2026 14:14:41 +0000
Files and hashes: 1: 4063368E83B93018DA72EDEB060702A5F8F9269C.crl (hash: RbGEeDhTRTL1S2ZP1Ef5pYu/QQ45zx2rvrtlUnaB/Ds=)
2: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: YoPiO/BGRHdiNMspy83HWAqltNlSFq59XV4OA1NunVQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.crl
rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4063368E83B93018DA72EDEB060702A5F8F9269C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:67:92:9f:33:c2:93:05:34:4e:7f:85:25:ff:5a:3c:71:a5:2f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4063368E83B93018DA72EDEB060702A5F8F9269C
Validity
Not Before: Jul 24 12:14:41 2026 GMT
Not After : Jul 25 14:14:41 2026 GMT
Subject: CN=ADE63855AB685D963082E42B760AF94E143CE0C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:20:73:c1:e2:a1:a1:a5:fc:80:d5:fa:57:
de:e3:71:2c:5e:d7:0f:ed:90:9f:fd:81:21:13:35:
47:df:8c:1e:7f:31:12:c9:bf:49:66:53:b8:61:15:
f3:14:e0:f0:15:17:ca:7f:79:e0:fd:c8:77:99:29:
f3:92:61:27:74:13:07:f7:f4:8e:63:82:06:fe:11:
2c:28:7c:b8:55:01:7f:5e:81:0c:ac:2f:c9:6b:30:
45:2a:27:27:4d:0b:65:71:8b:ed:26:e0:52:b5:32:
57:7b:bd:a4:15:19:51:19:83:d9:b1:87:5c:22:2d:
a8:79:77:b9:3c:90:c0:ca:73:ef:cd:ee:d4:b7:24:
1d:78:4e:f7:cf:9b:fe:07:c6:46:e1:53:d9:64:1f:
2a:a8:86:3a:cd:ce:01:8f:df:2c:9f:14:ba:2d:38:
2b:fc:78:cb:1f:44:ed:55:d2:78:0d:7e:72:7c:b0:
64:40:8d:49:e2:95:49:36:aa:62:9d:79:17:60:7d:
db:e7:79:4f:27:3c:18:f5:5a:c0:54:6a:66:92:6e:
33:ed:60:fe:ba:b6:6f:a5:d3:18:59:bf:9e:36:08:
c5:ed:6e:e1:91:c1:b1:78:e4:33:c3:6d:4d:d3:92:
e8:8e:7c:85:62:8f:ac:d1:5e:90:bd:9c:af:3c:33:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E6:38:55:AB:68:5D:96:30:82:E4:2B:76:0A:F9:4E:14:3C:E0:C1
X509v3 Authority Key Identifier:
keyid:40:63:36:8E:83:B9:30:18:DA:72:ED:EB:06:07:02:A5:F8:F9:26:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4063368E83B93018DA72EDEB060702A5F8F9269C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3b:e7:6a:83:58:df:02:a2:d0:82:7a:45:77:db:dd:81:e3:
f3:84:63:05:59:7b:fc:f4:f7:d2:5a:6d:f5:ae:c2:a1:e9:b0:
dd:5d:0f:dd:b9:47:a2:19:9c:12:2d:31:db:85:8d:69:9e:d4:
d8:a1:c9:56:ae:45:3d:cd:37:12:8d:ee:f1:51:03:7c:a9:90:
3e:f4:56:85:43:21:b6:9d:6b:8c:e9:dc:07:29:a2:2a:be:3b:
60:91:0c:03:51:5d:1a:2b:08:2c:0b:a5:46:19:52:0f:2c:c8:
b2:5c:58:2a:41:6a:85:c9:fd:85:cf:32:a4:87:ac:52:d8:76:
69:90:b6:33:5c:a5:c4:9d:35:80:28:14:a1:ae:79:3c:be:05:
3f:11:c5:41:ff:d7:04:27:91:a6:d3:d5:80:c9:21:e2:57:f8:
9a:5c:77:b3:1b:f5:16:80:74:6a:d6:6e:0e:4a:f0:08:ab:4e:
96:80:44:d3:08:a8:56:be:73:05:ac:21:dc:81:35:0f:83:c0:
be:69:bf:07:b2:77:d8:e4:c6:9d:2b:04:7a:3c:98:2a:f8:58:
53:60:95:42:65:1f:01:03:e4:9e:a2:37:c6:3f:f3:c4:8f:b3:
42:6a:bf:a3:02:65:86:a7:cc:8e:84:a3:66:cd:25:4d:96:a7:
34:45:8b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:17:40 2026 by rpki-client