
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft
File: CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft (raw, json)
Hash identifier: 6dYV9dMaABLv4uwim9W5ZAsTuyhtCKB2PWlcrmkeTDI=
Subject key identifier: 23:37:96:98:0D:54:5C:24:6A:44:AD:87:17:79:93:95:67:73:57:BE
Authority key identifier: CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6
Certificate issuer: /CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6
Certificate serial: 0551675E2F1A2AAB99E4B8E0384A07DF3A6CFFD3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 18:58:21 +0000
Manifest this update: Thu 23 Jul 2026 18:53:21 +0000
Manifest next update: Fri 24 Jul 2026 21:50:21 +0000
Files and hashes: 1: CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl (hash: pkHyaloNlT2jFfO2l56nBVlR91VynXt9J34iJY/hqk8=)
2: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: mS9PRPKBDmGv104t2c/uWFhRF9qgpc8OIooHFMXaEg4=)
3: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: 12S1HOzE8Rs4umiuV1n2mL1hqQ5ALMTa7jdnK3K0btU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl
rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:51:67:5e:2f:1a:2a:ab:99:e4:b8:e0:38:4a:07:df:3a:6c:ff:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6
Validity
Not Before: Jul 23 18:53:21 2026 GMT
Not After : Jul 24 21:50:21 2026 GMT
Subject: CN=233796980D545C246A44AD8717799395677357BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:d2:ef:64:cc:93:08:09:98:03:50:95:dd:
25:28:cb:1b:e4:1c:1f:0b:89:ce:ca:d4:54:d9:b8:
2e:88:23:6b:4e:60:f3:3a:34:83:d4:39:78:7c:63:
f9:74:05:0c:a4:e3:50:4d:f1:0f:03:8d:0c:1e:e3:
a5:ff:5d:7c:5e:3b:73:38:6d:8a:96:df:07:43:68:
d5:00:8e:14:8a:01:7e:9f:9a:5f:28:7a:1f:7c:f6:
92:d5:7a:ca:b5:f0:1c:9a:61:4e:9a:a5:2e:38:ca:
9c:07:e5:2a:bc:5f:74:6a:2b:36:3a:d9:b6:48:ba:
80:1a:ed:86:07:cc:c7:29:fa:25:b8:bf:ba:17:42:
25:fc:b5:f7:1b:04:8b:2c:09:ac:76:e9:a9:4a:7b:
ed:3a:0e:b5:7a:4c:4a:81:b3:60:88:93:b0:bb:0c:
57:8a:a8:f8:f4:21:30:6e:4a:c2:4b:e8:90:fc:95:
16:08:6d:88:1a:85:04:36:9c:51:82:00:e7:f0:2f:
ef:f5:4b:d5:e7:51:7c:e6:c6:de:1e:b1:88:28:81:
f1:74:c7:11:6d:3d:2d:5e:ca:bc:bc:40:1a:22:27:
67:68:f4:c8:d3:80:70:21:3d:6b:e8:20:c3:5d:f9:
57:55:65:bb:b4:c4:3c:48:c3:0d:30:ce:b2:69:72:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:37:96:98:0D:54:5C:24:6A:44:AD:87:17:79:93:95:67:73:57:BE
X509v3 Authority Key Identifier:
keyid:CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:af:f7:bf:45:c1:1e:78:84:24:19:96:aa:6e:86:6b:23:29:
fa:2d:d0:e2:0c:66:23:00:55:d1:86:47:5f:7d:64:bd:15:5f:
4f:62:2e:ed:71:ff:d2:44:76:0d:cd:c1:d6:cb:88:9f:c8:9c:
d2:7f:03:41:e8:56:be:46:46:0b:02:f9:63:e2:26:53:e9:d3:
96:6b:02:66:4b:48:8a:dc:9c:92:9a:b3:3d:c9:d9:66:35:50:
b3:cd:8c:a1:4a:c3:25:9a:f6:56:42:65:c8:c6:09:18:cf:76:
33:79:75:b8:50:da:5a:4d:ed:07:9d:ee:3e:71:07:c5:8c:fc:
48:7c:56:4b:fc:f9:62:b9:b8:a6:a2:02:a1:23:85:6b:80:fc:
a1:34:e5:e1:7d:d8:67:da:d4:87:c5:a5:b4:d5:32:12:ef:7b:
4e:97:ba:9b:7e:f6:27:8c:fe:c2:f0:79:3f:ef:94:a9:a5:6c:
a5:d5:75:06:6b:f3:4d:37:ad:c1:7a:0c:24:ab:b7:71:f7:b0:
bc:ca:58:2a:65:19:d2:48:17:e5:a3:ba:8b:0b:8c:28:09:8d:
b3:86:69:78:2b:34:1f:10:8f:d8:52:c7:51:4d:46:2e:1d:4d:
6a:8e:7f:41:54:26:e8:99:b8:1e:fe:3d:b8:fe:50:f9:5d:dd:
4d:18:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:17 2026 by rpki-client