
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft
File: 63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft (raw, json)
Hash identifier: SSzbe5oObFYfvIM4+J2HsD7z+QKy3N5/ncBIuf5QGF8=
Subject key identifier: FA:11:63:6B:EB:09:0F:15:C1:40:78:55:79:F9:15:1A:B0:D8:73:BB
Authority key identifier: 63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42
Certificate issuer: /CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42
Certificate serial: 69D1B966B8CC6F367169312054D1EBA11FEA930B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 14:42:56 +0000
Manifest this update: Thu 23 Jul 2026 14:37:56 +0000
Manifest next update: Fri 24 Jul 2026 16:20:56 +0000
Files and hashes: 1: 3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa (hash: SBuezJoeFSmiJFbpK3vYJJG/KYxSwTomdhAqA9qmqSc=)
2: 63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl (hash: b/es4N3rZ5Wi6kmYQ+xvo4Cg3ZOfj+CzUQrw2C/zYpA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl
rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 16:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d1:b9:66:b8:cc:6f:36:71:69:31:20:54:d1:eb:a1:1f:ea:93:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42
Validity
Not Before: Jul 23 14:37:56 2026 GMT
Not After : Jul 24 16:20:56 2026 GMT
Subject: CN=FA11636BEB090F15C140785579F9151AB0D873BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:81:07:17:7a:41:2b:75:fb:aa:7b:48:68:
80:2a:06:67:db:e8:e3:47:b3:e7:75:cc:3c:08:29:
76:fd:18:d9:91:ec:c9:bd:d2:b1:7a:4d:b2:21:aa:
15:4f:21:b6:38:d9:8e:ad:66:8a:7e:5d:f2:99:24:
2a:c7:82:c5:83:3f:4d:5a:e2:29:eb:ae:af:2e:5d:
84:75:91:d6:6d:4f:0b:01:5d:a6:f5:d2:c4:d2:44:
6a:1b:8a:63:1a:1e:0f:2d:4b:8f:01:1d:04:68:9e:
d4:e5:21:cb:67:19:0f:99:52:cc:e6:59:fa:b8:ba:
fd:8e:2b:70:c2:97:5d:af:57:7f:46:f0:61:ee:24:
d0:cc:f8:33:9d:98:85:53:56:03:04:97:d7:ea:76:
bf:d1:ed:f3:fa:77:cb:b4:8e:5f:83:fd:f7:ed:e1:
80:3d:18:1f:47:44:43:d9:59:4f:1b:71:a2:93:dc:
9e:ab:24:30:6b:d4:ff:a7:29:3d:7c:77:6b:02:20:
e7:a2:9f:67:0f:9d:b3:bd:6a:64:60:4b:9a:dd:e5:
bc:80:00:7c:80:f3:13:a8:eb:73:2f:a6:f8:65:66:
70:08:fa:78:26:fe:a1:2a:20:68:48:c2:94:52:fa:
1d:db:08:3d:75:b9:80:24:88:fb:8d:ee:29:dc:ba:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:63:6B:EB:09:0F:15:C1:40:78:55:79:F9:15:1A:B0:D8:73:BB
X509v3 Authority Key Identifier:
keyid:63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7e:3b:5e:0b:dd:23:50:13:8e:31:eb:78:49:8a:45:cf:f0:
b1:52:2f:4b:47:7e:a7:ce:39:ba:9c:dc:92:ab:4f:5e:6f:93:
af:9f:a7:dc:8d:8b:2c:8a:9d:9e:c2:da:56:12:9f:25:c8:66:
39:ee:1a:ea:2d:fa:59:e6:fb:03:ae:6b:58:72:0c:3a:75:9b:
b4:9d:c4:dd:a2:aa:ac:a3:3a:a8:f8:69:dc:b3:7c:4a:6b:b3:
4c:a1:a8:6d:66:d7:84:c4:46:c0:a1:30:1c:e7:f6:4c:cc:21:
7f:c2:40:15:8d:8a:22:a0:cb:cf:e1:61:a6:ef:a7:4d:cd:af:
5a:c2:75:ef:15:bd:3e:b9:9b:49:9d:3a:53:99:50:cd:69:8c:
72:63:0f:40:ee:bc:8c:96:7f:20:13:79:ee:38:0a:9d:4e:b2:
8d:35:94:3d:93:5b:d6:6f:6d:ad:61:18:ce:d8:2c:cc:4a:61:
69:cd:9f:5a:39:15:4d:5f:63:a6:60:eb:e2:a4:de:43:b7:3a:
a7:cb:6f:6a:8e:ec:97:b5:55:5c:e6:eb:13:4e:79:3a:ca:db:
9f:98:cf:2e:2b:80:cb:fd:c7:33:b5:14:59:48:b3:b6:ac:ec:
4e:53:87:fc:3d:d7:21:79:5d:02:85:ef:77:41:24:da:19:84:
0d:ba:49:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:27 2026 by rpki-client