
$ rpki-client -vvf rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft
File: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft (raw, json)
Hash identifier: 1XdhD4pOQ5TeWlsSGDGP7UNw86t/z68ZViJtcEgjEGg=
Subject key identifier: 19:86:61:DB:E8:3D:65:B3:A8:C1:95:14:86:D5:16:62:00:02:42:FB
Authority key identifier: 54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7
Certificate issuer: /CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7
Certificate serial: 0629734D2F74409F7D2D49539D63EADEDDAA6F44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 18:17:21 +0000
Manifest this update: Thu 23 Jul 2026 18:12:21 +0000
Manifest next update: Fri 24 Jul 2026 21:48:21 +0000
Files and hashes: 1: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: KN9wGn1zXozmZ3RfAUGCtuXPuU4nroC30cpkr7J9mHQ=)
2: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl (hash: q5lpnqIbiuFk6H9utPJfd4gEVeQpN3f7I7cnBCMVXJ8=)
3: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: Tk0zLG1Hphe7t1mTq1IIDbrzYp4b0d3efGQx1H0ipCc=)
4: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: AhYVMQlTuT7zbTcLfZGNm75C7shQlDWThwFiJD95reg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl
rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:29:73:4d:2f:74:40:9f:7d:2d:49:53:9d:63:ea:de:dd:aa:6f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7
Validity
Not Before: Jul 23 18:12:21 2026 GMT
Not After : Jul 24 21:48:21 2026 GMT
Subject: CN=198661DBE83D65B3A8C1951486D51662000242FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c3:89:76:b7:a5:dd:00:8d:de:f6:1d:3d:54:
b6:c9:4d:d6:13:38:50:81:b5:82:a8:2a:9c:0c:40:
b4:75:cf:f0:7f:d1:06:01:8e:91:a2:b0:a3:bd:a2:
64:30:d7:40:89:6a:6b:f2:5f:21:e8:a5:bd:c4:68:
28:55:fe:dc:4e:f1:12:5d:60:f7:b4:aa:b2:34:26:
e7:d1:70:4f:e6:7c:cc:b5:ba:59:ad:45:02:0f:20:
f6:47:e2:cc:dc:a1:fe:31:d7:90:76:f7:75:98:71:
7b:8a:d0:ba:eb:90:81:6b:2c:15:1c:a3:cd:d0:d7:
e2:e3:cb:42:dc:11:ae:0f:a7:f3:ec:d6:b2:1f:68:
18:f8:61:70:e4:c5:41:b7:e3:fa:b8:c1:14:2f:a3:
f8:24:91:70:86:a0:4a:2e:27:9a:0e:b0:ab:a8:fb:
92:00:94:92:e0:38:16:77:85:a6:07:33:7f:86:db:
59:22:1d:29:6c:13:c1:27:02:b0:99:0d:1b:88:b4:
b0:77:31:56:c2:49:0f:ac:99:c6:c8:03:b3:dd:d9:
98:4c:c4:49:85:8f:96:19:cb:03:8f:de:fc:1b:2a:
d3:d7:6d:07:d3:10:63:93:63:8c:89:1f:92:a9:74:
da:9b:28:08:d6:92:54:f4:83:4a:d0:54:95:d7:e0:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:61:DB:E8:3D:65:B3:A8:C1:95:14:86:D5:16:62:00:02:42:FB
X509v3 Authority Key Identifier:
keyid:54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:97:ca:fe:1c:01:d5:90:38:4a:b6:f7:bd:42:34:e7:80:a9:
80:15:f8:32:7f:a0:f6:4a:57:18:fc:65:08:af:08:56:d5:bf:
3c:77:ce:30:2e:05:60:4e:50:d2:75:7f:a6:be:8c:2b:84:ee:
f7:b9:34:99:04:7c:91:19:72:37:33:2b:35:c6:36:d6:50:2d:
95:2d:f4:bd:28:7f:32:46:4e:7a:99:8c:71:81:db:5f:a1:14:
a4:86:d3:13:9c:83:9e:fa:a7:26:87:6b:f3:a9:a5:a7:26:ed:
5b:47:ed:a3:09:9e:44:fe:53:87:4f:4c:70:b5:af:8a:d1:4b:
24:da:66:bb:73:69:d7:7c:2e:be:45:0a:e6:de:f3:b2:1b:0a:
93:e4:dc:af:fb:ce:91:90:0a:ac:5f:ee:77:29:e2:29:86:13:
8a:95:0f:f8:78:82:3e:d0:13:bc:2b:04:9e:df:2c:23:7a:81:
09:80:f6:3e:bc:0d:e5:69:06:20:17:eb:d2:57:03:d9:9c:ce:
10:df:42:f7:cc:89:3d:ef:b2:a4:55:c9:f5:0c:69:c0:52:b7:
bd:77:f7:cb:01:bf:37:79:46:8f:ce:98:8d:4b:c3:0a:a0:c5:
21:78:f8:da:2c:be:18:a2:b8:67:0a:d3:30:54:f1:38:e8:c5:
cf:54:bb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:15 2026 by rpki-client