
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft
File: 399FBE55CFD957C1E3849C75FE378403E394BB45.mft (raw, json)
Hash identifier: JPCLUDbkalHAtkUJ7Hcxpmsof8gzvIOBMGyezhxr0cc=
Subject key identifier: C1:65:C5:9B:85:24:FC:54:E5:C5:41:00:B4:2E:98:B8:E5:97:A4:33
Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45
Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45
Certificate serial: 3BDDA9D05EF31F5B97BE150E1CE3A1318010F8E4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 11:02:57 +0000
Manifest this update: Fri 24 Jul 2026 10:57:57 +0000
Manifest next update: Sat 25 Jul 2026 11:47:57 +0000
Files and hashes: 1: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: rqJDuuQFB9Ir08Xt+9/dUd2pRxC5DTIO9a28+O4McDo=)
2: 399FBE55CFD957C1E3849C75FE378403E394BB45.crl (hash: 131YAKpDLzEIr/gUTRLucb2MXtYWGGckvBubsWvNie8=)
3: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: NrcqksrmsSbHeL16ugEy8PBgZElc8n2NevcNzHFW6Sc=)
4: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: qood+9S8zNU9X/jpjUZIu26OXyUnDxyv/AsytcFufXA=)
5: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: gmPxQm5NcqK3BCfFQb7w+dLmFYWZ/DthSfb9I0IYOOQ=)
6: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: uojxwHiaMR8PO5h26JWS2B444u+QQh72ookAa5uFqSs=)
7: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: Nda6FqqHwv307lkTxH+b0mWevIjFxVsW+c3rWmYY64U=)
8: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: /vRQ0F5lBxm5YccSzuUARECi1VFqg7FRoH3qOHTCFHs=)
9: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: zSazRb0IpJJ4cBgKA2+8jgm7s2YnWXUiU+1QnaQiN1g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl
rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:dd:a9:d0:5e:f3:1f:5b:97:be:15:0e:1c:e3:a1:31:80:10:f8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45
Validity
Not Before: Jul 24 10:57:57 2026 GMT
Not After : Jul 25 11:47:57 2026 GMT
Subject: CN=C165C59B8524FC54E5C54100B42E98B8E597A433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:2f:1d:e7:0c:fa:03:ac:96:22:57:06:55:
ef:14:aa:99:52:31:d2:cc:e5:cf:83:93:4d:fa:b2:
cd:40:46:a2:a1:34:c8:32:39:8e:04:dd:d2:82:30:
c7:99:b1:f0:d5:8a:07:e4:9d:63:83:68:f6:8a:23:
51:b9:68:03:ab:bd:27:14:1d:be:9f:60:3d:85:3a:
07:d0:ac:b6:48:18:76:22:6d:b1:7d:7e:f8:59:a4:
61:a8:45:8c:6d:fa:2a:79:19:99:44:1e:61:bd:d7:
2c:51:5e:f2:cd:03:c4:aa:95:4f:9b:80:70:8a:fe:
d2:06:8d:4d:eb:ad:8a:a0:0e:40:e9:eb:78:3b:74:
88:71:ae:28:f1:26:45:ea:8c:1b:15:37:7b:65:33:
1b:09:80:8a:84:0d:02:91:4e:53:36:f3:87:67:d9:
cb:64:b5:da:c8:4f:e5:f2:f2:41:33:df:2d:1f:45:
0b:02:67:50:ca:dc:9d:73:29:8f:fd:79:31:e9:1b:
96:4d:86:01:da:ce:b6:65:e8:6e:1a:de:11:11:6c:
a5:e6:eb:ae:e5:8d:25:a0:bc:cb:64:47:e8:37:74:
a9:e7:52:9d:c5:3a:8f:70:fe:98:b5:ae:d8:18:e3:
f9:4c:64:08:1c:ba:83:96:ba:c8:0b:97:c4:ab:69:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:65:C5:9B:85:24:FC:54:E5:C5:41:00:B4:2E:98:B8:E5:97:A4:33
X509v3 Authority Key Identifier:
keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ad:97:99:03:d9:f1:f0:b6:ac:33:48:fb:9d:f2:ad:7f:2e:
aa:73:86:51:99:a0:7b:57:a0:23:fc:0f:ea:e1:a0:03:5f:e7:
9e:55:4b:9e:f2:d1:87:61:e5:4f:fa:55:dc:43:75:ba:de:9f:
95:45:2d:7f:ab:a2:37:2c:18:a6:7b:02:e3:50:e9:b3:56:70:
6a:2d:e3:ab:8c:6a:d7:21:af:19:a0:53:4a:66:7b:70:33:02:
75:68:1c:5a:4d:80:59:31:94:48:47:59:a5:01:a3:a7:90:e8:
f4:43:24:4d:e1:b7:f7:8b:6e:43:8a:43:68:65:62:9a:f9:e6:
b4:af:80:1b:db:78:98:4b:e3:95:d7:d3:52:fc:7a:94:c8:99:
dd:2a:f7:fc:f5:fa:f1:ee:33:c3:13:98:2e:a5:60:51:fb:80:
f9:46:a2:05:e5:b9:ad:19:ab:07:02:ea:cb:ea:86:48:7b:91:
20:9b:63:ec:ec:48:33:58:d2:7a:52:36:79:e3:c9:88:c9:e2:
d0:c7:33:f9:44:f4:1a:23:2d:ca:5a:c1:71:b2:10:6a:91:9c:
54:04:41:0e:69:a0:30:6a:0b:b1:2a:4c:89:2a:e6:47:86:bd:
43:22:e7:2e:8f:86:81:e7:cd:b6:1c:20:7b:bd:55:1e:cb:3b:
be:3c:d7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:00 2026 by rpki-client