
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
File: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft (raw, json)
Hash identifier: cbMMZg+7/E59PDrc+yGg0o/qtF3aZQRhQhbnJ/aW+Xw=
Subject key identifier: 42:BF:2E:D3:34:43:6C:6F:0C:F5:18:7A:C7:F8:41:20:02:64:63:37
Authority key identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58
Certificate issuer: /CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
Certificate serial: 5DBAA972D8897C08382963E4AE924E4D77DABC20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 15:39:01 +0000
Manifest this update: Thu 23 Jul 2026 15:34:01 +0000
Manifest next update: Fri 24 Jul 2026 16:16:01 +0000
Files and hashes: 1: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 6Vy3iy991tbMeWN8XgwIw7kSD92akdQ0AseMbxbKJxY=)
2: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl (hash: 9Ohs2uG1fG9M2dJ/e67GI1NPClD8OCve8BJg2cJcYNU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl
rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 16:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ba:a9:72:d8:89:7c:08:38:29:63:e4:ae:92:4e:4d:77:da:bc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
Validity
Not Before: Jul 23 15:34:01 2026 GMT
Not After : Jul 24 16:16:01 2026 GMT
Subject: CN=42BF2ED334436C6F0CF5187AC7F8412002646337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:64:31:48:54:f6:36:a9:0d:a9:48:ed:d4:
39:d9:e4:fc:2a:44:d1:49:cd:e0:8f:7d:5e:90:77:
47:ad:50:2d:d1:98:47:b5:fb:3a:dc:24:16:71:8b:
b8:bc:b3:0d:a8:64:35:36:c9:40:63:a0:4c:13:15:
b2:ab:44:fc:aa:e8:a5:5e:c8:dc:e0:09:cb:ea:02:
a0:22:9c:5d:8e:d3:c3:27:67:c3:3a:f1:21:1c:36:
a8:5a:0f:1b:ed:82:da:ed:9c:43:22:2d:01:ef:0b:
42:c4:ee:24:4f:03:b9:57:ca:f8:a5:31:17:16:65:
86:6e:da:b7:e8:65:a8:07:aa:4d:9b:c3:90:f2:c2:
74:2f:8e:1c:56:cc:96:cb:3f:7e:46:ba:ba:e1:7a:
33:78:98:62:ee:c0:40:34:aa:ae:a7:81:fd:4f:ee:
c5:5d:88:ed:7d:bf:21:d0:5e:d2:09:a5:c5:77:92:
11:30:40:8c:e1:c9:71:b6:1b:28:fd:8a:99:3a:77:
ce:6f:cf:63:0b:1f:af:14:27:71:b6:2a:42:d0:53:
25:29:48:56:b5:cc:01:aa:28:14:a9:28:cd:8b:b8:
27:3c:85:ad:0d:07:6c:31:48:41:3c:96:d2:75:23:
6b:89:d8:c2:c2:32:ed:9c:03:70:ae:58:06:29:08:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BF:2E:D3:34:43:6C:6F:0C:F5:18:7A:C7:F8:41:20:02:64:63:37
X509v3 Authority Key Identifier:
keyid:4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:47:37:c2:46:d5:fc:1d:26:61:6d:1c:1d:c4:a6:ba:7e:5e:
e1:fb:45:dc:02:b7:54:69:60:72:56:aa:21:b1:07:6c:b3:aa:
77:3b:dc:bd:01:d8:21:7a:57:81:42:49:8b:44:a3:21:10:e4:
6a:3a:be:e0:37:2f:f1:d6:7f:cf:d4:6e:2e:f9:61:9d:f3:d7:
4c:66:38:80:bf:87:b0:6e:7c:8c:19:38:94:7a:dd:45:7e:f2:
c5:d4:64:04:28:31:59:a2:33:f2:33:5a:2f:b2:9a:b8:32:15:
71:3d:6c:8a:f2:c5:6c:6d:c9:71:dd:83:c8:09:4b:3d:19:4f:
5e:56:9f:da:5d:81:19:49:db:87:0f:be:da:76:7a:a4:bc:2f:
39:eb:82:76:24:61:4b:e9:1d:6a:60:31:e9:48:7f:3e:9a:46:
8c:56:7c:d0:42:0f:46:6e:16:c1:7c:24:fe:ff:5d:47:83:06:
56:ac:61:19:9a:20:29:3a:1b:c1:2b:7c:09:65:e1:09:2e:08:
e3:27:21:96:90:39:18:77:a1:84:8c:31:0e:43:f2:99:de:14:
55:81:93:c8:fa:a8:fb:e3:19:37:c2:17:a2:ff:d4:88:9e:0d:
5e:1e:7c:7c:a9:74:48:ca:38:e8:38:bb:e9:54:4c:a7:7f:7b:
65:87:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:28 2026 by rpki-client