
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
File: C771ADE0100457DC61EB95A71BB4E63885DC542F.mft (raw, json)
Hash identifier: sd4p8Qm8NMJzeDC16v1rmIe/r1C5VGEeP6W/POD11d4=
Subject key identifier: 1F:4C:33:A6:C1:42:08:97:85:B2:32:2C:23:70:F7:B5:0A:BF:0D:C8
Authority key identifier: C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F
Certificate issuer: /CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
Certificate serial: 343BBBF0CAC4A479689114A65D4C4F061F037B77
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 19:08:32 +0000
Manifest this update: Thu 23 Jul 2026 19:03:32 +0000
Manifest next update: Fri 24 Jul 2026 20:49:32 +0000
Files and hashes: 1: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: cnrnucshQjB1HR7ilM8foFskZiCRkLLcdgQGq/I0/j4=)
2: C771ADE0100457DC61EB95A71BB4E63885DC542F.crl (hash: EFC/MPxNHT+PylrI9HvY5tzmmUf7HAqyud6iSGd/CDQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl
rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 20:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:3b:bb:f0:ca:c4:a4:79:68:91:14:a6:5d:4c:4f:06:1f:03:7b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
Validity
Not Before: Jul 23 19:03:32 2026 GMT
Not After : Jul 24 20:49:32 2026 GMT
Subject: CN=1F4C33A6C142089785B2322C2370F7B50ABF0DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:1c:95:83:c8:b5:21:f0:ff:61:4c:22:b0:
56:2f:1b:d4:2a:bf:fd:a6:c7:0e:bb:eb:af:73:cd:
b5:cd:37:03:d7:02:b0:bf:38:36:8e:85:63:6b:34:
96:4b:3c:a7:e4:bd:30:8b:cf:d6:2d:c6:e6:ee:01:
56:eb:71:fb:ec:b1:c9:bb:f2:57:95:84:a6:5f:f4:
40:98:97:9b:c4:b5:63:e4:bc:0b:90:c6:70:9d:a9:
2a:ac:0a:84:a2:66:f4:f4:de:a4:90:f7:ff:02:d4:
26:02:84:32:c4:06:86:b1:ba:f7:92:2d:c3:7f:ca:
06:57:73:3e:ad:3c:71:cb:04:c0:43:d7:f0:d9:57:
d3:58:bf:75:18:bb:86:17:7a:9f:7a:ab:e4:1b:33:
5c:af:df:47:82:7f:51:3a:d1:cf:11:fa:38:02:22:
5b:c4:e7:3e:7d:f8:51:36:90:db:6d:d7:86:cb:c0:
c9:e2:41:b4:b1:83:55:11:1e:01:de:65:a5:2a:6c:
a2:c6:9f:bf:60:3a:e8:8e:a0:7e:50:ff:e5:c9:60:
f3:ca:99:45:30:ca:f3:b6:2d:1e:d2:ee:d7:38:0a:
8a:19:f5:87:73:0e:4f:a1:5f:80:e0:19:b4:91:e8:
95:e0:aa:9a:c0:2f:f5:3f:64:80:08:b8:04:92:94:
0a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4C:33:A6:C1:42:08:97:85:B2:32:2C:23:70:F7:B5:0A:BF:0D:C8
X509v3 Authority Key Identifier:
keyid:C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:72:7c:b5:3f:0e:de:50:ca:91:d8:b7:54:28:18:37:b5:2c:
0a:12:68:3f:86:c3:55:4c:17:17:7c:3b:25:09:24:26:1e:f7:
7b:ad:44:a0:8d:2a:d6:1e:08:0e:d2:36:68:b7:22:f6:19:df:
ea:e6:f1:19:e3:5d:6c:d9:dc:58:fd:f3:dc:92:71:55:6c:d5:
d3:60:1d:aa:51:df:7a:f7:5a:dd:0f:77:37:23:25:78:ea:f2:
f6:30:e9:fc:ad:f9:7d:83:c4:9e:4d:f5:80:f9:aa:e6:e7:42:
a2:46:33:fb:5d:62:0f:af:35:00:3e:2e:0a:b1:94:97:63:c9:
9e:0c:1a:da:26:f9:84:ab:27:84:c8:2d:58:20:ce:24:b3:15:
07:4b:53:4b:8f:a9:1b:d7:7d:c0:ed:40:15:a9:af:65:ee:78:
d1:ea:34:c9:18:42:94:ca:d1:9d:6e:d1:4e:4d:34:79:54:7b:
07:91:2d:d1:18:2f:63:18:c9:33:7b:5a:2f:7d:ed:ac:3a:06:
f0:4c:bb:0d:af:64:b6:5c:f7:62:6d:a3:92:de:d5:04:f1:16:
18:ae:56:44:76:b2:aa:a4:13:2a:87:d2:8f:1d:a8:a2:0e:47:
e6:4d:f1:d1:ca:3f:e8:ab:4a:86:77:77:38:3a:ce:5e:53:ae:
28:04:e4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:36 2026 by rpki-client