
$ rpki-client -vvf rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft
File: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft (raw, json)
Hash identifier: pqkB9EAz9Xp4StjsQTQC1yBkBotaR2TD3JIM+7gARLY=
Subject key identifier: 8D:66:BA:61:14:14:56:31:84:4A:71:13:4B:59:25:85:D4:A8:27:46
Authority key identifier: DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B
Certificate issuer: /CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B
Certificate serial: 011CB704001D952C0FF0E066CC4B5007544503A6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 01:56:38 +0000
Manifest this update: Fri 24 Jul 2026 01:51:38 +0000
Manifest next update: Sat 25 Jul 2026 04:58:38 +0000
Files and hashes: 1: DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl (hash: r/DNHK0KUIA40u2wqwcTa+pzIBEVL8IKxWgSjHDj0ks=)
2: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: Je+1Z3JPlfN1SueLjZhyMHWstp3IWlu0F41bg1IrLNI=)
3: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: DmsqerRTCfleWC17bgPmpGYVL2XXTPf5hE4dywrXO3g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl
rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:1c:b7:04:00:1d:95:2c:0f:f0:e0:66:cc:4b:50:07:54:45:03:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B
Validity
Not Before: Jul 24 01:51:38 2026 GMT
Not After : Jul 25 04:58:38 2026 GMT
Subject: CN=8D66BA6114145631844A71134B592585D4A82746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:c0:b2:f8:17:fe:ca:a3:5c:df:0a:a6:6c:
ed:63:ec:38:ab:5c:aa:fc:6e:bc:ea:ac:54:a8:3b:
51:e0:9b:ae:a2:c6:28:01:8c:be:a7:6f:9a:4b:4f:
bd:7b:f3:e2:a2:e0:11:52:3c:91:37:55:29:07:e7:
35:9d:5e:00:af:8a:f0:a2:74:16:83:2c:6f:d6:08:
a7:06:b9:e5:21:47:dc:85:55:74:a4:52:67:a6:eb:
36:bd:2c:19:2c:e7:ad:08:0d:71:c5:d4:cd:7e:ff:
82:48:f7:e0:64:fc:dc:a0:85:b0:bf:35:a5:77:76:
6c:7a:ad:52:12:89:34:29:e0:ed:f5:ac:61:18:fd:
ca:db:2c:64:91:d6:7b:1d:e2:e4:bd:f1:84:04:18:
41:68:f7:35:5f:47:0d:8f:c6:69:8b:c6:4b:a4:83:
55:f5:85:6e:12:27:c1:bc:5c:b7:03:0a:4d:b8:0c:
4d:ab:f8:43:12:78:b5:a6:3a:e9:14:4f:85:c0:46:
3d:1d:09:d9:4e:a4:56:16:6a:00:9e:3d:4b:6e:d4:
09:f1:dc:52:fd:8b:cc:c4:51:e0:32:1a:19:19:d3:
6c:79:52:48:8c:97:e3:60:d5:58:5b:be:02:34:b2:
3b:bb:a4:55:0f:56:c6:5f:2e:2a:68:66:71:bb:77:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:66:BA:61:14:14:56:31:84:4A:71:13:4B:59:25:85:D4:A8:27:46
X509v3 Authority Key Identifier:
keyid:DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:44:87:fe:b3:75:47:89:b2:5c:75:aa:38:9a:06:a9:3d:4d:
7d:14:d0:48:5a:23:07:9f:a7:57:bf:84:66:f2:cb:8a:e0:80:
4f:0b:79:2b:72:0f:b7:57:54:4e:39:2a:7f:9c:48:01:a4:b7:
f7:93:02:27:1a:08:46:8e:62:95:4d:dc:3a:74:b9:8a:db:61:
f8:fd:33:da:71:c8:31:a7:9c:88:79:fe:ab:b5:ca:4f:32:16:
35:4d:11:14:32:0f:58:ba:e8:28:b4:74:03:b0:f3:d3:8d:68:
f9:5d:26:bf:92:e0:47:ac:f9:1b:28:53:41:15:e9:03:82:18:
fd:09:b1:0a:4f:20:3d:d1:33:a4:c6:69:a6:b4:30:50:35:9b:
b2:18:2d:2a:ab:e3:71:3c:12:ac:4e:9a:48:3a:1d:36:13:e8:
e1:5e:7d:48:2e:39:df:be:20:41:e6:be:fd:4b:b8:24:a7:0e:
ff:91:27:19:a3:20:51:7c:45:7d:14:09:17:15:96:91:98:10:
1f:e1:c2:f1:c6:bb:b2:1f:4a:af:c0:c8:bf:c8:86:63:cc:9c:
66:87:f9:b7:88:7a:c3:7b:21:9b:99:b7:2d:95:9e:21:80:1c:
a3:d9:6e:21:70:51:10:4d:44:c4:6e:c4:56:1b:a6:fc:73:92:
78:a8:de:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:51 2026 by rpki-client