
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
File: C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft (raw, json)
Hash identifier: c+v7zZHo4TY5eernaA2mrzX5MffeqvDeRkfcroe6Tlo=
Subject key identifier: D7:4C:53:0D:C2:19:C8:04:56:07:EC:B2:6E:8A:BD:5D:E3:B9:F4:29
Authority key identifier: C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B
Certificate issuer: /CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B
Certificate serial: 0CFB48B04F133F4E5FAC2C0EC7421DD404DF40A4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 23:38:37 +0000
Manifest this update: Thu 23 Jul 2026 23:33:37 +0000
Manifest next update: Sat 25 Jul 2026 02:23:37 +0000
Files and hashes: 1: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: /TEOvHICrNlzqHKdTSQimWH4eZASaMfqjyKyEfSs2B4=)
2: C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl (hash: sXlHpNjpKz1MywvPp5oBm0ZCcr+EBje5RZtIoKlLMkI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl
rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:fb:48:b0:4f:13:3f:4e:5f:ac:2c:0e:c7:42:1d:d4:04:df:40:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B
Validity
Not Before: Jul 23 23:33:37 2026 GMT
Not After : Jul 25 02:23:37 2026 GMT
Subject: CN=D74C530DC219C8045607ECB26E8ABD5DE3B9F429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:25:05:bf:05:32:92:cb:47:42:e4:e8:a2:
fa:69:98:82:2d:26:08:23:f3:09:f2:67:09:be:0f:
c1:38:f9:32:79:ae:4a:a7:28:0d:c1:66:49:5e:08:
28:85:ec:5d:8c:0a:56:8a:39:00:6d:77:9f:55:61:
b9:92:11:ce:7c:82:fc:70:81:8e:36:c9:f9:a5:c4:
8f:66:01:db:e3:ac:b5:2b:cb:a3:fd:dd:eb:4a:87:
18:29:5b:f8:6e:27:14:62:62:20:91:d3:d5:8c:29:
1c:b0:44:eb:6a:69:92:cd:c5:65:ad:fc:83:c4:de:
a6:6a:09:08:a2:20:59:7b:0d:43:46:5a:f8:35:f6:
77:60:98:bf:d1:18:0a:b3:d6:a5:8a:d2:2c:9c:f0:
16:0d:0e:48:ed:9f:21:f3:fb:c8:70:f7:08:6d:8b:
37:bf:47:c9:2f:da:a5:2d:ac:59:77:4f:9b:9a:66:
eb:36:c1:5d:d0:b7:03:66:60:26:82:2a:d8:51:16:
6a:a4:5f:78:68:cf:51:d0:bc:41:4e:b3:58:70:d4:
b0:29:4d:fe:63:59:63:2f:d3:35:93:01:16:21:4e:
48:b4:36:c9:81:a1:ae:86:56:7b:6c:49:5a:17:4f:
63:a9:d2:bb:9c:5b:97:59:8e:12:60:cf:1f:3c:01:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4C:53:0D:C2:19:C8:04:56:07:EC:B2:6E:8A:BD:5D:E3:B9:F4:29
X509v3 Authority Key Identifier:
keyid:C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:01:ee:48:6c:96:f3:d9:e5:02:07:31:98:56:35:77:51:50:
0e:98:c6:de:18:aa:e5:47:a2:62:86:8d:e2:8f:d0:d8:ca:7c:
7b:70:7b:a6:c5:3f:b1:83:d7:2b:ce:2f:d3:00:3a:47:eb:0a:
e4:bb:fa:95:f7:cf:20:78:fd:b3:02:18:4f:d0:02:e2:7e:62:
1b:c6:a2:bf:79:89:04:8c:74:9a:bd:9e:5c:f3:42:b7:04:f0:
1c:bf:af:b3:19:04:ef:5d:98:f0:82:eb:f4:00:c3:ab:26:50:
b7:6b:dc:6c:18:69:47:74:1b:4c:73:d9:72:3f:9d:1c:4d:a0:
b0:ce:fe:27:f1:99:99:c0:06:54:e5:89:e0:11:8a:27:7b:9d:
37:1c:17:7a:28:15:0c:d5:3f:3b:68:14:10:a6:cd:4a:df:12:
61:37:0c:64:38:29:bb:a8:7c:92:c6:94:c6:8f:bb:23:63:9e:
3e:55:21:f6:e1:18:fe:89:9f:5b:3f:62:98:bc:86:e1:b0:c7:
ce:2f:92:eb:b7:25:d5:48:b1:a1:0f:bf:05:8e:a2:50:76:0c:
7e:8d:a8:32:e2:ab:4c:11:d8:66:5e:9f:3c:60:c6:7b:45:85:
7e:1d:36:40:a3:f4:95:74:a6:6a:53:c0:44:29:8e:d4:e3:44:
ed:5c:e4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:42 2026 by rpki-client