
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
File: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft (raw, json)
Hash identifier: VbnZsZzq9v1kDYhFxWeyuIALz+MTqKfCdHQjxCIaVz8=
Subject key identifier: 1C:69:01:50:6E:4B:DA:23:A2:2C:23:D0:07:82:F4:43:71:7D:58:52
Authority key identifier: 81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B
Certificate issuer: /CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B
Certificate serial: 68F3DB598B0C7944992079E25BD75AF34FA6EADC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 05:00:38 +0000
Manifest this update: Fri 24 Jul 2026 04:55:38 +0000
Manifest next update: Sat 25 Jul 2026 06:35:38 +0000
Files and hashes: 1: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: C4VhfRzKoT9ksZvdL8CPzP9K+3FYQAaDgMeeFvQaFx4=)
2: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: S09DylQ/yldBJCxeAdZuhd1EyaS2Xybcb8te/eWM2dM=)
3: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: +rTucgGLiY8uqL8eF3DTMn/pET3ZcxtiVlAUU6weN/o=)
4: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl (hash: JHowUcUmjo4IFGDnrHCn/pLRbtqcUPF0zvzJpqXOXu8=)
5: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: 33Yh92al19b28Gnrtu4qIdUOBoZECAqIchLAQkEaJ/I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl
rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 06:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f3:db:59:8b:0c:79:44:99:20:79:e2:5b:d7:5a:f3:4f:a6:ea:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B
Validity
Not Before: Jul 24 04:55:38 2026 GMT
Not After : Jul 25 06:35:38 2026 GMT
Subject: CN=1C6901506E4BDA23A22C23D00782F443717D5852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:9b:bd:c9:67:6f:4f:50:91:b7:f0:e5:d8:
7e:26:a0:6d:df:b8:ea:e8:40:ca:e7:ce:fe:57:3e:
33:f9:61:e0:bc:17:46:9d:46:01:a6:66:d0:6d:b5:
a6:15:2f:87:1d:aa:94:4b:8a:6c:6b:74:9a:3f:43:
2e:92:12:5a:8f:ab:ef:e7:c7:e2:db:a8:75:73:04:
f2:c9:1f:75:9c:4a:2b:24:f1:3f:1b:75:2b:d1:23:
56:4e:c6:37:cc:2b:aa:03:ea:d1:f5:76:96:93:cf:
e4:6e:38:ba:aa:35:19:e1:21:9a:54:e5:da:23:1d:
06:c3:2a:a3:5d:5d:d9:24:1f:64:53:34:b0:3d:27:
1d:2f:7d:20:7c:a7:8b:09:f6:37:17:8c:3f:43:75:
24:a1:84:da:f5:b4:08:dd:fb:5a:34:35:8d:38:3c:
7e:3a:b4:36:a6:55:64:8e:87:14:d8:25:0e:76:c7:
8c:45:57:dd:c6:10:ad:4a:0a:0c:20:fa:fe:6a:d6:
4b:81:ff:bc:ac:d7:e7:b2:df:d8:de:ad:2e:81:3a:
9a:e7:ad:bd:0a:dc:d2:5c:2a:c2:3b:54:b6:49:75:
78:61:ea:4e:85:1e:48:69:ad:8c:e7:45:f5:ab:85:
84:a6:56:f0:a2:e9:a3:2b:a1:59:c7:b2:12:ec:e2:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:69:01:50:6E:4B:DA:23:A2:2C:23:D0:07:82:F4:43:71:7D:58:52
X509v3 Authority Key Identifier:
keyid:81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6f:80:e5:29:21:dd:52:fc:0d:87:74:0f:fa:ce:d0:d9:b0:
a5:d6:1f:cf:54:fe:f0:d5:e1:f0:f6:da:a9:3d:38:c5:95:cd:
4c:ce:98:fb:c3:98:58:58:18:14:33:d4:1d:c6:f2:99:8f:a9:
a4:79:7f:dd:31:e2:78:91:b2:63:70:91:a9:db:b0:15:58:ce:
c3:f0:a1:e5:44:50:67:c5:c9:18:d3:e7:10:94:c1:1f:53:4b:
ca:b7:6a:f9:f3:15:12:ad:cf:b4:3a:78:9c:30:f7:08:52:ce:
36:aa:67:47:26:82:8a:a8:a9:1e:fa:81:0e:4e:a7:44:d2:bc:
c1:6c:d2:4f:fc:d0:58:b1:95:cb:1d:9d:33:0d:c2:f4:ab:4f:
9a:93:bb:d8:97:72:79:42:7a:7f:48:09:58:b4:89:37:15:ca:
cc:23:16:e5:5b:33:6e:33:85:0c:44:0f:4e:68:ed:c9:1c:38:
bb:bd:df:30:38:62:7d:f1:fe:09:60:ca:81:8f:db:a4:3e:73:
fe:c9:83:44:a8:6c:7c:ba:e6:5e:4e:7f:eb:55:b8:92:bd:3a:
f1:ae:dc:af:fc:cc:44:ef:97:83:b6:f4:cb:3f:08:af:16:28:
e1:39:42:c5:9b:0f:74:dc:fd:59:b4:a8:e8:0c:ab:17:30:73:
6c:44:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:51 2026 by rpki-client