
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft
File: 88505636AC2C683A0A15AF1041DEF625BB5D7643.mft (raw, json)
Hash identifier: 5GC0FSHy/tX97Qyrq0TAm3/L05epaSIL/2NnFZn5awE=
Subject key identifier: 8B:46:84:F1:C8:6E:D0:24:65:66:40:A7:CF:83:F7:D9:0D:27:66:34
Authority key identifier: 88:50:56:36:AC:2C:68:3A:0A:15:AF:10:41:DE:F6:25:BB:5D:76:43
Certificate issuer: /CN=88505636AC2C683A0A15AF1041DEF625BB5D7643
Certificate serial: 067D44F50EE8F0C84FFEC2A7CCBE0534B573A116
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 22:01:52 +0000
Manifest this update: Thu 23 Jul 2026 21:56:52 +0000
Manifest next update: Sat 25 Jul 2026 00:22:52 +0000
Files and hashes: 1: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: EBf2wSQkajGGPJlM2meU3WwUz7lzn4ofe8fel+KfemQ=)
2: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: dgjaOdjpIeK7j+dAUIzTx198JF2memFCrb9q8a6+v0c=)
3: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: ev2m6+xbvR7mwpXdtEeo7OjxoqRgr494Tm2SeygBLMQ=)
4: 88505636AC2C683A0A15AF1041DEF625BB5D7643.crl (hash: KrRAAyKTG6HIm7iZFJdRmhh/yuT3kcCZT9AI1vzAsg8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.crl
rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7d:44:f5:0e:e8:f0:c8:4f:fe:c2:a7:cc:be:05:34:b5:73:a1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88505636AC2C683A0A15AF1041DEF625BB5D7643
Validity
Not Before: Jul 23 21:56:52 2026 GMT
Not After : Jul 25 00:22:52 2026 GMT
Subject: CN=8B4684F1C86ED024656640A7CF83F7D90D276634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:83:c7:eb:49:98:09:27:a3:8e:25:80:aa:
21:4d:fb:81:24:ba:58:d2:c3:25:af:f2:db:a9:f2:
a5:95:74:6d:98:f5:be:14:ae:32:ba:bf:1f:da:de:
b2:7a:d2:1b:39:6f:8c:74:e2:a0:17:40:62:46:40:
24:86:0d:c3:39:89:d8:d9:58:99:ef:98:46:86:b7:
67:f2:b8:d5:8c:41:c1:b6:7f:ca:64:8d:75:d3:bd:
e7:4f:ee:57:27:41:28:20:30:b7:17:b2:23:f8:df:
66:d8:a3:a5:9e:55:35:56:d0:27:c9:2e:ce:c3:2e:
d0:e9:c3:0f:b0:75:13:6d:28:8f:9e:3a:de:5d:d8:
41:b9:bb:d3:bb:cb:20:65:e0:61:8a:08:6a:74:f2:
5e:10:84:21:8c:63:ba:b7:d7:e4:c3:63:19:5b:50:
d3:c0:22:76:6c:e2:f1:30:cf:d6:62:91:eb:07:a3:
b2:72:6a:d0:91:d8:30:99:82:67:39:e3:2f:98:d7:
d0:d2:e3:92:6a:6f:44:65:cc:e1:f2:6e:64:01:61:
0a:1a:e4:c0:ca:81:42:97:71:9d:c3:1c:66:1b:cb:
d0:a4:33:6c:3f:a5:7e:ed:76:1c:27:76:6e:ba:df:
5e:f8:08:7e:2e:bf:7c:22:98:76:6b:55:c2:f2:71:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:46:84:F1:C8:6E:D0:24:65:66:40:A7:CF:83:F7:D9:0D:27:66:34
X509v3 Authority Key Identifier:
keyid:88:50:56:36:AC:2C:68:3A:0A:15:AF:10:41:DE:F6:25:BB:5D:76:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:82:1c:0a:6a:c1:01:86:8d:b3:2c:3b:3b:2c:16:02:3f:61:
0c:2d:12:b8:72:f1:99:b1:b8:b9:94:f3:16:54:73:9e:8a:ce:
02:3a:0c:cb:dc:01:f0:c9:e3:de:4b:30:63:9b:f7:eb:d1:2b:
f4:ac:df:ff:43:9e:f3:c1:5e:a4:41:a4:6b:27:4b:24:2f:8c:
25:3e:51:dd:08:cd:f4:18:3d:80:a2:61:ba:dd:75:bb:d3:37:
61:92:6e:59:1f:38:aa:d0:bd:21:0d:e9:e9:bd:3c:1a:fb:98:
40:b0:ec:47:23:2c:44:90:90:9a:a5:cd:25:1d:b2:aa:ea:04:
84:15:c7:6c:e6:cd:ab:55:b3:b1:29:a1:11:68:a1:29:1a:39:
bd:7b:ad:de:f3:d8:96:f0:02:2e:cb:e9:ca:84:b0:3e:7d:12:
b6:0e:5d:62:2d:9a:89:a7:ed:03:aa:14:e7:0c:f8:d1:50:d3:
44:32:39:f0:b1:ce:c7:53:9e:8c:5a:92:36:a9:d8:fe:d9:41:
1d:b3:00:99:c7:1c:0d:7f:7a:0d:e9:09:3f:8d:19:70:71:68:
a3:50:55:5e:4d:bc:1f:18:45:cd:96:db:da:e1:69:1a:b0:c2:
12:41:de:41:f7:d5:4a:e0:fa:dc:6d:4a:76:e2:3c:36:31:b4:
83:4e:33:ea
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBn1E9Q7o8MhP/sKnzL4FNLVzoRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg1MDU2MzZBQzJDNjgzQTBBMTVBRjEwNDFERUY2MjVC
QjVENzY0MzAeFw0yNjA3MjMyMTU2NTJaFw0yNjA3MjUwMDIyNTJaMDMxMTAvBgNV
BAMTKDhCNDY4NEYxQzg2RUQwMjQ2NTY2NDBBN0NGODNGN0Q5MEQyNzY2MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Q4PH60mYCSejjiWAqiFN+4Ek
uljSwyWv8tup8qWVdG2Y9b4UrjK6vx/a3rJ60hs5b4x04qAXQGJGQCSGDcM5idjZ
WJnvmEaGt2fyuNWMQcG2f8pkjXXTvedP7lcnQSggMLcXsiP432bYo6WeVTVW0CfJ
Ls7DLtDpww+wdRNtKI+eOt5d2EG5u9O7yyBl4GGKCGp08l4QhCGMY7q31+TDYxlb
UNPAInZs4vEwz9ZikesHo7JyatCR2DCZgmc54y+Y19DS45Jqb0RlzOHybmQBYQoa
5MDKgUKXcZ3DHGYby9CkM2w/pX7tdhwndm663174CH4uv3wimHZrVcLycfXHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUi0aE8chu0CRlZkCnz4P32Q0nZjQwHwYDVR0j
BBgwFoAUiFBWNqwsaDoKFa8QQd72JbtddkMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmU1ZmRmNmMtMGQwMS00OTJiLTgwMDQtYTQ4ZWU1YTEyNDc0LzAvODg1MDU2MzZB
QzJDNjgzQTBBMTVBRjEwNDFERUY2MjVCQjVENzY0My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84ODUwNTYzNkFDMkM2ODNBMEExNUFGMTA0MURFRjYyNUJCNUQ3
NjQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw
MDQtYTQ4ZWU1YTEyNDc0LzAvODg1MDU2MzZBQzJDNjgzQTBBMTVBRjEwNDFERUY2
MjVCQjVENzY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAKCHApqwQGGjbMsOzssFgI/YQwtErhy8Zmx
uLmU8xZUc56KzgI6DMvcAfDJ495LMGOb9+vRK/Ss3/9DnvPBXqRBpGsnSyQvjCU+
Ud0IzfQYPYCiYbrddbvTN2GSblkfOKrQvSEN6em9PBr7mECw7EcjLESQkJqlzSUd
sqrqBIQVx2zmzatVs7EpoRFooSkaOb17rd7z2JbwAi7L6cqEsD59ErYOXWItmomn
7QOqFOcM+NFQ00QyOfCxzsdTnoxakjap2P7ZQR2zAJnHHA1/eg3pCT+NGXBxaKNQ
VV5NvB8YRc2W29rhaRqwwhJB3kH31Urg+txtSnbiPDYxtINOM+o=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:14 2026 by rpki-client