
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft
File: 2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft (raw, json)
Hash identifier: KG+k3eMca4pmELKze7jntIxSxqksrG4xogFLMvzIYVk=
Subject key identifier: C3:E4:24:65:B1:4D:5C:9E:02:3B:2D:26:1C:64:59:AA:8F:F2:66:9B
Authority key identifier: 26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70
Certificate issuer: /CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870
Certificate serial: 35E8C2781BA23348A16D9D43BF24A8B53371B770
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 11:18:58 +0000
Manifest this update: Thu 23 Jul 2026 11:13:58 +0000
Manifest next update: Fri 24 Jul 2026 12:08:58 +0000
Files and hashes: 1: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: 2FI3DRw6poz7+/6DZetNhGhzUS2lCGKW4XFdtiSijVE=)
2: 2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl (hash: LXjvhgjAAx9OByW51Ct54lIyrbSaE3nHH6en9Le1VpY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl
rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 12:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e8:c2:78:1b:a2:33:48:a1:6d:9d:43:bf:24:a8:b5:33:71:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870
Validity
Not Before: Jul 23 11:13:58 2026 GMT
Not After : Jul 24 12:08:58 2026 GMT
Subject: CN=C3E42465B14D5C9E023B2D261C6459AA8FF2669B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:3b:80:1b:50:0d:94:0a:e0:fa:4f:3e:43:
ab:93:07:c8:db:13:00:15:ce:f2:1a:30:5f:fe:31:
f8:08:f3:b0:85:78:f8:14:34:93:0e:55:35:2f:30:
6b:97:13:33:8b:cb:47:e8:fa:9a:17:ec:15:b8:cd:
f2:3f:da:29:05:da:92:3e:a0:73:2c:d7:fa:c9:f4:
a1:4d:b8:5b:b8:0e:63:20:ee:25:f4:96:73:73:1d:
d1:3c:27:18:b1:77:2f:9f:fc:7b:c7:dd:d1:3b:bd:
03:55:0b:94:25:6c:5a:0a:1f:e8:58:52:98:51:35:
74:f1:e0:ea:0c:0c:8a:a7:45:4d:ef:74:aa:dc:f7:
1e:67:9a:30:65:86:e6:6f:70:f0:45:0f:75:83:31:
87:5f:e0:93:0c:64:4a:5a:72:ca:35:b4:52:76:de:
7b:b7:ac:0e:7a:67:9e:ba:1f:1a:ff:c7:56:0d:f4:
a6:0e:4c:fc:a4:c7:85:92:42:f0:e2:93:4e:d6:b2:
b1:fb:dc:4b:8a:3f:88:76:50:b2:35:54:41:2e:5e:
cd:04:24:43:70:44:3a:41:ab:e7:e4:6f:80:a5:38:
79:d3:11:44:cd:3b:89:26:6e:65:58:f5:1d:67:65:
d7:b4:13:d9:b1:96:a4:1c:bf:0e:3c:87:fa:7f:e0:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:24:65:B1:4D:5C:9E:02:3B:2D:26:1C:64:59:AA:8F:F2:66:9B
X509v3 Authority Key Identifier:
keyid:26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c9:f9:bc:29:dd:d3:a4:0e:ba:86:3b:60:f3:7f:a4:d9:43:
e9:11:d5:77:84:e9:a9:af:41:60:82:85:b8:20:63:74:56:ee:
e2:ec:63:c8:b6:e5:94:35:ca:b1:b6:85:06:68:c6:f0:81:1d:
b5:82:ed:50:d3:88:8c:b2:5c:52:0f:f9:37:cf:a4:34:3e:3c:
12:58:a0:ba:6c:89:97:45:e4:88:8c:29:ca:e5:00:55:f1:d9:
21:9d:a9:18:21:83:b4:33:e0:a1:dd:cd:64:3b:07:f7:3a:1f:
a4:3a:02:15:b2:13:8e:f4:e5:a8:2e:99:33:f1:ba:3f:96:b9:
eb:99:d8:36:c3:45:2a:b0:0a:ef:ff:8f:bb:f1:c5:c3:25:8e:
de:4f:d0:83:f0:ee:50:49:98:41:da:99:36:a2:f6:7f:5d:87:
46:18:96:63:0e:e5:8a:5f:03:44:19:8f:55:be:5f:b4:a6:53:
a3:46:bb:08:5a:b9:89:8c:19:f4:5d:67:76:07:67:f4:b3:60:
31:4d:88:fa:86:f7:d3:fe:d2:cf:77:83:b6:18:33:f5:7e:83:
94:86:c8:ba:1d:c9:fe:bd:0f:f6:2e:ec:ab:e8:03:e5:c2:b6:
03:97:88:fd:b6:0d:b2:16:4d:56:2b:f9:0c:39:fb:4b:4f:7b:
fb:ea:73:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:56 2026 by rpki-client