
$ rpki-client -vvf rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft
File: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft (raw, json)
Hash identifier: hwJkgfnbTrC7iHJ5puxdkbma3E27H/K4lXuvKFnKL+g=
Subject key identifier: 4B:0F:9F:45:73:AD:83:65:CE:C0:9E:F9:6F:40:CE:E5:C4:13:A0:36
Authority key identifier: DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C
Certificate issuer: /CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C
Certificate serial: 57DC4D0B8D6F916B35152EE58191F3CC754E5711
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 00:39:55 +0000
Manifest this update: Fri 24 Jul 2026 00:34:55 +0000
Manifest next update: Sat 25 Jul 2026 03:21:55 +0000
Files and hashes: 1: DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl (hash: MyzNTiljfssqfyPMNf19syPyxJ1QbGKQrNqpq/PE7kY=)
2: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: hKLPAhro/Jq1h6DXfB80L/ei9CiaAI4MnHiXFKHH4tE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl
rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:dc:4d:0b:8d:6f:91:6b:35:15:2e:e5:81:91:f3:cc:75:4e:57:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA12343BBD9F479182273A9F7B7D6DD0298D5B1C
Validity
Not Before: Jul 24 00:34:55 2026 GMT
Not After : Jul 25 03:21:55 2026 GMT
Subject: CN=4B0F9F4573AD8365CEC09EF96F40CEE5C413A036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:9a:4c:6e:74:e3:5a:08:7f:42:e7:ff:46:
b3:59:52:dc:51:23:92:30:b2:60:9e:9c:f1:47:0c:
48:4e:47:5a:80:b7:5a:9e:6c:39:68:12:a6:63:40:
14:72:a3:1f:33:66:12:b1:0d:c0:c8:da:12:ef:ed:
69:63:20:68:fb:22:80:1f:3c:78:3d:4c:8e:54:35:
f6:59:02:bc:41:f1:1d:52:6c:d0:98:1f:70:74:10:
fc:e3:2c:3b:0a:31:20:45:eb:7b:69:b6:18:f5:f5:
70:bc:9a:14:c7:6c:61:68:fc:d2:24:a9:ef:88:e8:
be:49:f0:f2:fb:2c:a7:96:5d:2b:94:d3:52:ea:69:
ee:26:fa:be:33:20:29:2e:80:79:ed:9a:f4:4f:40:
62:86:10:aa:dd:05:c0:e8:55:a2:75:78:97:76:51:
d5:93:1f:58:6d:27:e7:fe:38:2b:f2:bd:0f:0f:ec:
4d:c0:c6:9f:96:e1:7c:38:9e:d1:b4:4e:db:64:5d:
ca:13:a7:af:ea:7c:1d:03:49:cd:8b:f9:f2:b3:d3:
37:ca:29:93:6b:80:20:06:97:81:6a:e7:86:11:39:
a5:76:91:9e:44:17:66:36:64:96:92:05:42:75:7c:
bb:92:64:72:2b:4b:e5:e4:e6:6c:e5:02:6c:b2:2c:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0F:9F:45:73:AD:83:65:CE:C0:9E:F9:6F:40:CE:E5:C4:13:A0:36
X509v3 Authority Key Identifier:
keyid:DA:12:34:3B:BD:9F:47:91:82:27:3A:9F:7B:7D:6D:D0:29:8D:5B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/DA12343BBD9F479182273A9F7B7D6DD0298D5B1C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9e:f4:a0:68:b9:96:af:ec:ad:24:5b:c5:9d:5e:ac:7a:68:
40:46:6a:24:b9:4f:92:8a:16:ab:8e:11:78:d9:fe:c9:f0:7a:
17:be:1f:7f:2e:27:4c:18:76:c4:5b:5f:9d:00:26:cb:fd:42:
3d:de:7b:49:91:71:7f:55:27:c4:ed:cd:e7:1f:15:8d:15:a7:
66:ad:ac:3e:89:2d:79:28:08:f5:3a:81:d5:74:d3:c1:4e:b8:
00:f9:26:35:0a:35:76:37:61:0b:53:a6:c3:43:e8:26:b0:c1:
d9:c0:f3:7c:b0:fc:ce:ef:89:fc:3a:2f:3f:d7:ba:3f:d3:37:
f4:84:0d:1a:e0:f8:45:e8:81:6c:c0:d3:7b:d3:26:4d:77:34:
02:0b:14:15:5f:c4:35:19:d9:33:fd:7f:2c:5e:c3:97:0b:90:
3f:a7:63:b9:d7:09:b6:d3:7b:47:c9:0c:e0:ef:56:5b:6a:91:
fa:62:cc:5f:00:3f:ba:5e:23:30:7a:75:8e:13:aa:3c:75:da:
39:da:b9:eb:e9:08:b3:69:ca:ac:d9:ae:02:8d:fc:db:11:3c:
b3:03:49:a2:65:55:28:87:d3:81:04:ac:8e:3a:52:16:dc:a6:
a3:3b:19:c7:d4:4a:4f:8c:03:9b:1b:4b:cc:4d:c3:fa:4b:23:
0f:4f:c2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:09 2026 by rpki-client