
$ rpki-client -vvf rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft
File: 691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft (raw, json)
Hash identifier: AmyPkJCwUDBg/xCU0FPt5+UirZv3oED48wIQA9AxHVg=
Subject key identifier: C0:46:96:DB:6B:77:0B:63:A7:79:46:2B:ED:92:8E:B0:E7:77:57:12
Authority key identifier: 69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC
Certificate issuer: /CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC
Certificate serial: 7C05CDB3A232E825AF71650FB0A3C20269A0659C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft
Manifest number: 6D
Signing time: Thu 23 Jul 2026 07:49:29 +0000
Manifest this update: Thu 23 Jul 2026 07:44:29 +0000
Manifest next update: Fri 24 Jul 2026 09:09:29 +0000
Files and hashes: 1: 691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl (hash: LV3ljo/EhBYJP2NbNrwgUH/2XiBj0oLpY9YHWZme2MQ=)
2: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: KFtuEHm37ul5faThoZcK5kQxOUy32ImJwfhhme8UX4Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl
rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:05:cd:b3:a2:32:e8:25:af:71:65:0f:b0:a3:c2:02:69:a0:65:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC
Validity
Not Before: Jul 23 07:44:29 2026 GMT
Not After : Jul 24 09:09:29 2026 GMT
Subject: CN=C04696DB6B770B63A779462BED928EB0E7775712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5e:9d:fd:58:7a:dc:be:df:2e:d8:a3:9e:28:
5c:f8:94:dc:d3:ea:3a:c3:83:33:52:b9:28:37:fd:
95:e6:be:f4:8c:00:9d:c5:64:dc:e2:52:82:5d:37:
fb:21:a0:74:e5:52:f6:e8:90:29:50:b8:64:5f:88:
81:59:0a:7c:60:e5:b3:6e:f7:d1:da:a3:7d:d6:b3:
5d:db:86:f7:21:03:7d:4b:95:d6:4e:17:50:f5:7b:
09:24:7b:33:52:47:36:c7:9d:8b:a7:d0:b9:62:f0:
9b:67:b3:c9:a0:35:b8:2e:ac:ef:20:64:f1:e1:b8:
75:4d:c5:59:5f:d3:35:a0:61:42:03:a0:0f:4f:62:
db:0c:f0:6b:d7:ec:93:2a:a5:9e:10:a3:53:e8:84:
63:b9:82:a4:42:90:d8:d7:3f:f7:d0:ab:68:04:7e:
bb:d3:13:e2:62:66:2b:33:e5:ef:5d:73:8a:c2:41:
f2:7a:a2:99:4a:e5:db:ae:73:cd:db:e2:bb:1d:fc:
4b:52:fd:4a:d2:f8:df:ab:4c:94:1b:d6:76:58:2d:
7d:77:02:93:2d:e7:e2:71:a3:08:1d:b6:4a:36:66:
9e:d1:c4:7a:c5:a6:16:e7:38:59:74:e2:b0:90:f1:
d7:7b:dc:6d:6c:b2:a7:8e:af:d5:c7:19:6f:d0:a0:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:46:96:DB:6B:77:0B:63:A7:79:46:2B:ED:92:8E:B0:E7:77:57:12
X509v3 Authority Key Identifier:
keyid:69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a9:fd:8a:f5:59:3f:55:0e:b6:c0:40:82:a9:ab:94:2a:d5:
03:0b:89:a3:9d:82:9c:71:a0:70:36:ec:5f:ec:68:c6:b7:a3:
d1:cc:dc:ca:52:ac:91:d0:76:c6:27:68:68:77:e6:27:d8:8d:
74:07:01:b3:81:6d:dc:3d:88:2e:5c:8e:fd:af:d5:f0:10:17:
fc:34:2a:f1:10:f6:1d:bd:d8:79:55:bc:1c:56:e0:02:b7:96:
2c:8b:0d:16:d9:0c:b7:37:db:ef:69:22:d7:56:23:a6:0b:b8:
2c:ee:d2:5e:8b:bf:b8:e3:a8:c8:d9:d4:25:81:cc:f2:f1:32:
d4:2c:56:2d:ce:cb:24:05:8c:26:c7:1b:db:3b:c1:d4:43:1d:
83:54:9b:12:bc:e5:ae:1c:7e:40:ae:8b:d8:85:0c:0d:97:e9:
20:d1:fb:e1:f9:97:b6:a0:74:f0:c9:2c:f6:fa:df:0f:ce:c5:
60:2e:80:f5:6b:84:bd:c9:ed:6f:f1:5c:db:b4:7c:7a:f5:2e:
b4:8a:10:6f:ba:1b:a5:35:48:d4:ca:b3:9d:2c:a5:48:15:83:
5f:5a:d6:37:36:23:9a:54:09:42:1e:7d:19:9a:37:11:6e:34:
58:8f:86:8b:fe:b8:0d:d9:1d:dd:e5:eb:77:e2:69:85:b4:6e:
9d:14:bf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:53 2026 by rpki-client