
$ rpki-client -vvf rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft
File: DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft (raw, json)
Hash identifier: pfH6d2PYtkWioNB+/mcLi2rVshCy+4K73moyMf9vtmU=
Subject key identifier: 16:3D:69:92:62:A4:DC:59:F6:62:4A:F8:EE:4F:00:19:F1:A1:47:6A
Authority key identifier: DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA
Certificate issuer: /CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA
Certificate serial: 40812EC101600F20958A01C504E92438EC856BBA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 19:13:41 +0000
Manifest this update: Thu 23 Jul 2026 19:08:41 +0000
Manifest next update: Fri 24 Jul 2026 19:25:41 +0000
Files and hashes: 1: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: /I/1xW7rsK7gJcZw8w0G3A5/hDeO0oqDDXrZo6p7Qtc=)
2: DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl (hash: QHYrF76eS0WLbF79CUgURLG5nGhvUv0D9tOUsnM1/Xw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl
rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:81:2e:c1:01:60:0f:20:95:8a:01:c5:04:e9:24:38:ec:85:6b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA
Validity
Not Before: Jul 23 19:08:41 2026 GMT
Not After : Jul 24 19:25:41 2026 GMT
Subject: CN=163D699262A4DC59F6624AF8EE4F0019F1A1476A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:c9:9c:8c:07:c9:ef:3e:d2:85:a4:59:9c:
f5:73:97:02:75:f7:0b:4b:d3:09:ff:f6:74:be:20:
f8:1a:1a:64:b9:1a:86:e3:07:13:d4:b1:e1:80:51:
f0:18:7b:e5:51:de:8a:7e:3d:78:a5:67:f7:a0:76:
55:e2:01:76:64:0f:c8:3d:49:d6:dd:6e:b4:b7:2a:
05:df:bf:da:5f:54:3b:9a:79:8b:05:a3:df:14:c9:
14:09:e3:f0:14:c7:73:c2:9f:d7:58:d3:e5:e5:d0:
b4:43:91:3c:17:55:6b:79:ab:80:bf:b3:dd:68:f6:
60:52:a9:65:52:42:54:ae:f7:57:c9:c1:c0:0a:df:
ca:a8:8f:76:e8:68:32:61:e6:e0:5f:f3:e6:de:9a:
bd:30:3d:60:07:92:58:8a:24:99:e3:3c:bb:99:20:
39:5b:31:6e:cc:d5:9e:dc:e8:76:ae:d2:40:4e:fc:
96:a5:42:df:71:ae:3b:23:d6:32:be:74:99:90:2e:
13:9b:f4:61:2d:e4:da:f9:88:ce:06:91:12:c0:91:
da:71:62:ee:2e:fb:a6:73:85:14:f7:07:37:5e:96:
6d:bd:37:2f:72:b9:fd:2b:5f:33:bb:c8:38:17:99:
a4:cc:be:7a:2a:ba:62:02:68:7d:3d:55:53:fc:02:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3D:69:92:62:A4:DC:59:F6:62:4A:F8:EE:4F:00:19:F1:A1:47:6A
X509v3 Authority Key Identifier:
keyid:DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:dc:1e:67:ea:95:ed:79:40:0a:86:91:6c:c5:63:0a:be:27:
ed:16:c8:b5:cc:0b:22:02:c0:ed:3b:df:f5:5e:92:ad:d9:f5:
9c:9b:23:84:d6:70:01:8e:68:43:cb:62:49:b5:ab:af:a8:a5:
06:63:46:ac:4b:82:4d:4d:84:06:5c:dc:d4:d2:50:cc:fa:2f:
9b:87:91:70:64:eb:a6:2c:16:2e:eb:5b:88:d6:60:31:6c:a0:
17:a0:f3:02:01:8f:a0:9c:2c:19:f7:f3:b1:0b:4c:91:0e:51:
9d:52:f2:00:b4:a3:08:6a:b1:3e:22:79:cd:3b:66:cb:3c:e9:
d1:57:c8:48:d7:1d:53:cc:ca:8e:ca:20:f2:c3:e6:8b:e2:27:
05:cb:e0:7c:0b:5b:08:93:dc:aa:8b:6d:50:4a:cf:33:93:5f:
c8:e2:e7:7d:7a:e1:18:f9:2e:50:56:18:8d:a9:0d:26:c4:17:
ee:50:d8:e8:0c:34:eb:0f:7a:6a:9e:f2:be:dd:cd:67:ec:a0:
6b:dd:85:69:63:54:c4:14:32:c3:9c:6a:03:a8:81:9e:1c:b2:
6e:a0:38:8e:db:0e:3d:a4:b2:49:96:54:a3:cc:cb:c0:44:75:
b9:c8:3e:26:5d:78:7c:6c:a6:ee:d8:a0:24:03:ee:10:cb:67:
e4:0e:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:45 2026 by rpki-client