
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
File: D61B761F0598B8998BF802A069F51103270C6CC0.mft (raw, json)
Hash identifier: x9EUHikCy3AR31wPcpuWpRabPNZcKzEWeiFfLuwNkuc=
Subject key identifier: 3A:01:16:15:2C:D8:5B:FB:E0:86:A1:F9:8C:3B:B6:5E:AE:D9:C6:71
Authority key identifier: D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0
Certificate issuer: /CN=D61B761F0598B8998BF802A069F51103270C6CC0
Certificate serial: 5FA34A0AB787C72D6FCCBD620858226455458726
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 01:05:25 +0000
Manifest this update: Fri 24 Jul 2026 01:00:25 +0000
Manifest next update: Sat 25 Jul 2026 04:30:25 +0000
Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: JV7kYNU81vIjUMbIQ9WaFlRn0Vf3tZeMtDHyZF3sYe4=)
2: D61B761F0598B8998BF802A069F51103270C6CC0.crl (hash: zwn0h3uBL/z0X9pnJHVz4z+huvjR0cfH5e+CkFyG80c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl
rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a3:4a:0a:b7:87:c7:2d:6f:cc:bd:62:08:58:22:64:55:45:87:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D61B761F0598B8998BF802A069F51103270C6CC0
Validity
Not Before: Jul 24 01:00:25 2026 GMT
Not After : Jul 25 04:30:25 2026 GMT
Subject: CN=3A0116152CD85BFBE086A1F98C3BB65EAED9C671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:3d:f7:03:fa:85:68:48:27:f5:25:03:57:
f0:b1:f4:ad:57:9b:a7:79:e3:f1:c2:6d:07:1b:6e:
12:48:12:c0:a0:b7:d5:c3:9e:35:b5:a2:ac:25:fb:
f4:68:51:dc:7b:ae:c9:b8:af:ec:65:83:e0:2f:5c:
10:1f:a6:51:33:c2:7f:5e:da:f9:e8:38:46:1b:fd:
43:31:19:6f:5f:b7:d1:da:ff:33:d7:4d:f4:15:4b:
52:9d:02:93:9b:c9:b4:fe:00:0c:07:c5:f7:b9:cc:
92:44:b8:79:19:a2:3e:7b:b3:a0:1d:0f:68:f5:7e:
45:17:29:c8:82:63:21:7c:eb:9a:44:95:f5:e1:7e:
b0:50:d5:f7:b8:34:3a:46:cf:fa:51:69:05:cb:5d:
b0:60:3c:2b:8c:63:b7:d7:9d:65:71:ac:80:90:b1:
b5:2e:1d:b1:f5:60:33:42:42:37:1d:75:31:fb:0b:
58:6c:e7:ab:c1:6b:fb:4f:0e:52:8b:50:89:9d:90:
50:d1:f7:c9:63:62:8f:0c:fc:bf:0f:e3:69:1c:fe:
40:dd:8c:25:77:aa:04:87:bc:aa:34:16:9a:e8:7f:
91:ff:41:7b:7d:81:cb:82:b1:fc:8a:c5:c1:3d:8a:
0d:b7:ae:7a:8f:02:1e:4c:b0:6d:03:43:cf:e1:f1:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:01:16:15:2C:D8:5B:FB:E0:86:A1:F9:8C:3B:B6:5E:AE:D9:C6:71
X509v3 Authority Key Identifier:
keyid:D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a2:a5:34:0e:9d:2b:ae:73:02:25:2d:df:6d:b7:0b:0a:3e:
83:2f:24:67:d3:cd:a2:0c:b0:3f:35:29:80:24:fd:2e:e6:ee:
af:13:ac:d1:fd:84:47:1d:e0:7b:31:cd:58:63:98:d1:39:1b:
b5:48:49:0e:8f:b9:bd:26:07:63:46:11:3b:2c:04:b4:02:1b:
2a:0d:6c:bb:c8:47:1d:95:df:96:94:0c:ec:80:85:b7:fd:fc:
a2:28:41:ca:50:b7:70:2b:6c:19:50:f9:eb:cc:e7:fe:77:40:
c0:c7:b6:2b:cb:f4:5d:a5:8e:db:4d:df:02:06:2f:42:d3:b8:
e4:4c:26:49:f0:8e:3d:70:be:70:bb:25:bb:58:44:01:a0:6c:
b9:05:6a:1a:d1:7b:9c:04:2c:cf:59:81:9b:f0:db:a8:b3:a4:
42:b8:fd:5a:96:67:15:75:ae:97:cb:9d:96:79:7e:c8:84:42:
27:ce:39:52:5c:9a:24:b6:62:ac:80:61:59:2b:b7:b4:48:2f:
08:3e:6f:7c:b7:08:85:b4:88:a4:cb:11:ef:ec:49:f9:42:10:
4b:e3:01:6c:a4:02:d9:cf:10:13:60:17:5b:1c:f6:b6:ef:1b:
c3:00:3b:9a:b7:81:3e:ed:14:6c:bd:c9:f3:7d:27:10:f5:84:
55:29:fb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:11 2026 by rpki-client