
$ rpki-client -vvf rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft
File: CC4A3B86531912A00DCFBF94884369F58244CFCD.mft (raw, json)
Hash identifier: THcWI1/7jPMbx3MEEGeZvLZo+XPIb+ladD/xyrnCfvs=
Subject key identifier: 0B:60:A9:BA:0F:CB:A9:D0:5E:50:3C:BF:B1:61:ED:FC:58:79:3C:11
Authority key identifier: CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD
Certificate issuer: /CN=CC4A3B86531912A00DCFBF94884369F58244CFCD
Certificate serial: 737451605396260723B55C83B073F092602546FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 21:56:45 +0000
Manifest this update: Thu 23 Jul 2026 21:51:45 +0000
Manifest next update: Fri 24 Jul 2026 22:15:45 +0000
Files and hashes: 1: CC4A3B86531912A00DCFBF94884369F58244CFCD.crl (hash: 7ZPXvPsrqJUwc0GhdfddfYHS8tv+vcstGjqCNhtDy6Q=)
2: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: 6EcU8NSCnoNhvC4s40Zznvtp988+13OVsM3urPI8O18=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl
rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:74:51:60:53:96:26:07:23:b5:5c:83:b0:73:f0:92:60:25:46:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC4A3B86531912A00DCFBF94884369F58244CFCD
Validity
Not Before: Jul 23 21:51:45 2026 GMT
Not After : Jul 24 22:15:45 2026 GMT
Subject: CN=0B60A9BA0FCBA9D05E503CBFB161EDFC58793C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:bf:8e:7c:21:43:d1:16:fe:e9:d1:d8:a1:
99:0b:e7:ce:2e:54:46:c8:a9:10:82:1b:ce:72:89:
17:3e:2a:82:5b:33:55:0b:90:5e:06:ff:ea:3e:08:
1c:65:6d:6b:9d:af:b0:b8:83:10:95:1f:35:b5:25:
95:ce:24:ce:2c:a9:61:33:5d:0c:72:f9:a3:19:05:
a2:82:12:4f:3b:f5:c8:c1:94:df:17:ab:a8:75:0f:
15:58:e4:a8:43:2b:b9:69:7e:63:64:8d:c7:65:76:
c3:23:c6:e7:95:81:d7:66:5a:e9:1f:3e:b6:4e:8f:
e2:2f:cf:85:c4:db:18:d3:88:b3:c9:2f:5c:d8:5e:
a0:36:02:14:5f:83:24:38:f2:7c:38:86:1f:fd:c1:
36:a2:5d:7f:ae:3b:78:36:f1:0d:e7:3b:3e:b0:06:
68:19:2c:5b:54:37:a2:5c:06:ff:8b:66:bf:7f:06:
1e:99:05:ed:c4:ac:c0:52:3f:4f:32:82:9f:5e:f6:
c5:e1:ca:7b:a4:9e:3d:aa:1e:4c:fb:5b:52:66:e7:
ec:91:52:5c:0f:49:a0:58:af:fb:54:9b:e9:62:20:
e2:b1:07:c4:6f:82:14:7c:17:bb:3f:2f:d1:70:43:
4d:17:88:82:37:47:5d:8c:2d:1f:55:ce:7e:25:45:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:60:A9:BA:0F:CB:A9:D0:5E:50:3C:BF:B1:61:ED:FC:58:79:3C:11
X509v3 Authority Key Identifier:
keyid:CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:19:89:47:7e:7f:6c:ce:95:6c:2f:a4:6b:23:13:7c:d2:5c:
20:07:15:a7:81:a4:49:14:81:0e:0a:e6:eb:34:9e:df:e2:f0:
ca:28:60:7b:52:10:e7:e7:86:22:a3:54:b0:dc:2e:d7:6c:c3:
c5:a7:ce:7e:03:89:7d:db:06:6f:3b:63:9c:9b:79:25:8d:41:
d3:f2:d8:dc:5b:8c:57:dd:7a:c6:4c:69:c6:73:1d:6a:03:18:
a0:cd:60:c9:5a:38:b5:f6:ae:88:80:a7:a9:fb:ad:fb:ba:cc:
e7:34:6a:64:13:95:9e:bf:64:15:69:8e:9b:70:c9:88:8f:9a:
f5:f1:11:cc:37:5f:d5:54:55:bb:3f:07:c6:64:52:f8:a8:7b:
99:a3:4f:2c:f3:6d:9d:8e:d0:bd:67:63:08:52:57:f9:12:73:
72:7f:6d:f4:18:07:97:31:51:af:6f:2e:af:ac:db:fa:51:df:
69:f7:7b:74:d3:21:81:4f:2c:6c:f7:e8:ae:6d:49:46:c8:d4:
f2:71:1f:56:47:0f:84:fe:57:ec:7e:31:83:8e:ce:76:59:71:
d5:66:55:e8:3d:f4:94:9d:8e:47:67:5f:df:ef:0c:0f:46:c7:
52:4e:9a:a7:8d:61:2a:53:4a:0f:ed:87:e5:b5:91:6e:d2:84:
70:ae:4c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:20 2026 by rpki-client