
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
File: 63C9C3AAF95A607F8365E51C375621EF611B029E.mft (raw, json)
Hash identifier: 6ka/AxaV0hOnLMsYJItxG8vQHRTfPSN+YwKUUoYhLaY=
Subject key identifier: DC:D5:B3:CC:E2:E3:96:24:94:78:52:66:2D:11:57:E5:E6:38:B3:92
Authority key identifier: 63:C9:C3:AA:F9:5A:60:7F:83:65:E5:1C:37:56:21:EF:61:1B:02:9E
Certificate issuer: /CN=63C9C3AAF95A607F8365E51C375621EF611B029E
Certificate serial: 01EFFFD89597A85E7EE7AEE0EC995D6285F18F9E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
Manifest number: 10
Signing time: Wed 13 May 2026 08:35:51 +0000
Manifest this update: Wed 13 May 2026 08:30:51 +0000
Manifest next update: Thu 14 May 2026 09:06:51 +0000
Files and hashes: 1: 63C9C3AAF95A607F8365E51C375621EF611B029E.crl (hash: bqei8utZYJZemWBcd2B/qTNvcVxOj9HhaLMhjiCEh3I=)
2: 3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (hash: Gj72PKyTW4uThzHAv98WsY3O2r0uo97/yFBA+Iq7xgw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.crl
rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ef:ff:d8:95:97:a8:5e:7e:e7:ae:e0:ec:99:5d:62:85:f1:8f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C9C3AAF95A607F8365E51C375621EF611B029E
Validity
Not Before: May 13 08:30:51 2026 GMT
Not After : May 14 09:06:51 2026 GMT
Subject: CN=DCD5B3CCE2E39624947852662D1157E5E638B392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:9f:ee:be:5c:13:6d:3e:a4:9d:2f:6c:47:
8b:ff:8b:5c:c7:1c:59:e8:1e:f5:50:06:00:77:1f:
aa:ac:8e:9f:b6:9a:d5:98:25:0d:75:a5:f6:87:31:
c5:51:1f:b7:22:e7:06:b7:2c:02:08:3d:f5:fb:4a:
a2:72:97:e5:57:c9:02:c5:b7:da:4c:61:35:61:7a:
e4:69:5c:ad:16:b3:92:66:6f:bb:25:7c:a2:f3:62:
e0:a9:4c:3f:82:78:a2:d9:f2:85:59:b9:eb:b7:fc:
28:44:2b:82:7c:22:28:c5:50:b2:d9:28:e7:d4:03:
cf:68:15:d6:b0:a8:22:e2:13:54:47:02:29:8d:ce:
68:64:ae:6c:c7:5d:85:ab:f7:8e:04:11:cf:5d:f4:
15:80:2b:78:0f:6b:0e:ca:a3:80:42:26:b0:e8:58:
6e:3b:43:3b:d8:9e:ca:2d:51:15:90:3b:e0:45:0b:
ef:bc:20:dc:75:da:46:de:19:58:a6:dc:e5:8d:42:
0d:4b:c7:04:3c:94:12:36:fa:70:c1:b4:c9:ec:fa:
4e:93:42:a4:36:48:b5:c6:8a:72:46:06:27:81:74:
b4:6b:76:d9:58:55:f0:89:9c:78:a2:64:a4:f3:86:
82:b0:9f:6c:77:7c:86:6f:14:2d:6f:d4:e0:63:b7:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D5:B3:CC:E2:E3:96:24:94:78:52:66:2D:11:57:E5:E6:38:B3:92
X509v3 Authority Key Identifier:
keyid:63:C9:C3:AA:F9:5A:60:7F:83:65:E5:1C:37:56:21:EF:61:1B:02:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:76:16:74:d5:27:26:d1:76:59:a4:e1:84:d2:34:9c:84:52:
74:c3:08:6c:c0:1b:55:6c:6b:41:f5:80:cc:be:12:1d:87:0f:
85:d0:2c:80:68:71:8b:d3:3f:72:84:c1:ef:de:b5:d0:a5:7a:
b3:ee:ce:2c:25:b0:dc:bb:e8:79:40:b1:b9:05:a2:07:a0:12:
16:bf:48:55:5b:8a:d6:70:cd:e3:38:a8:b5:30:3a:8f:c5:48:
ab:3a:df:a5:ab:ec:6c:96:d6:24:79:39:6f:08:65:66:86:0b:
73:8a:2e:0b:d3:9f:e4:64:37:40:bf:27:5c:94:86:de:ed:87:
81:b2:70:94:e1:89:c6:6c:2f:ce:06:01:42:1b:d8:bf:b9:7e:
09:b8:50:5a:cc:e7:54:0e:ae:e1:1a:5a:bb:09:60:88:40:d5:
2a:c3:b5:da:ef:6f:6c:18:db:f1:71:68:19:e4:49:bd:0c:5e:
45:4a:e4:41:26:37:85:e3:f6:a6:7f:c0:93:17:04:c9:ef:d9:
a3:c3:8f:33:e6:28:80:37:39:53:0e:bb:ab:4c:b3:27:d3:df:
42:95:bd:09:aa:5a:47:a5:16:6c:d1:17:a8:ad:c2:c1:19:a3:
7f:e2:4f:0c:e6:85:8c:88:88:a8:4f:94:a3:be:a5:3f:7f:04:
86:9a:8b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:03:08 2026 by rpki-client