
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft
File: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft (raw, json)
Hash identifier: 8H+FDjCzu+fIAo5WNtypfshk32Q2Xbtzfi4Lf0KXFpM=
Subject key identifier: 4F:A9:78:25:8C:31:35:A5:B4:32:3A:88:76:C9:E7:CA:27:BF:36:96
Authority key identifier: A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77
Certificate issuer: /CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977
Certificate serial: 17B3B5ED48D01BDC94241C7E6F5ACF587D984D26
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 03:49:03 +0000
Manifest this update: Fri 24 Jul 2026 03:44:03 +0000
Manifest next update: Sat 25 Jul 2026 05:52:03 +0000
Files and hashes: 1: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TlXm5FUEfPUbwvDslESvInZ7QzJfvEoxUutevfTlhzM=)
2: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl (hash: 4jRf4lKcWv+sQwzCd+Yh2vHoqBANJnp8cy7MMyapBfA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl
rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b3:b5:ed:48:d0:1b:dc:94:24:1c:7e:6f:5a:cf:58:7d:98:4d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977
Validity
Not Before: Jul 24 03:44:03 2026 GMT
Not After : Jul 25 05:52:03 2026 GMT
Subject: CN=4FA978258C3135A5B4323A8876C9E7CA27BF3696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ba:66:a1:ca:b6:37:f2:85:1c:3e:18:21:4b:
66:1b:af:de:d5:88:16:1e:d9:8f:e9:ef:91:b6:98:
23:43:e7:bb:77:8f:30:d9:a9:bf:7e:54:8f:00:d2:
a9:5d:0b:65:67:51:4b:d3:16:d2:52:c2:88:f8:ab:
32:8e:97:cb:1d:3e:59:6b:dc:00:1c:3e:d8:60:fb:
1f:e6:db:f7:ee:bd:ed:31:de:18:ee:cb:96:0f:e4:
dc:24:22:2b:b8:bb:e3:7d:05:74:7f:07:7f:40:e7:
01:bd:85:b7:ac:2c:4c:66:b9:56:40:ee:d5:dc:71:
68:77:8d:c7:04:32:8d:02:b1:46:16:44:60:9f:64:
89:51:6f:11:51:2a:8b:86:5f:f3:01:70:91:e6:99:
1f:c2:d0:30:f4:33:3c:a6:a7:58:25:f4:fd:64:30:
56:ad:ff:33:9f:83:79:8b:69:c3:bf:f2:5f:85:01:
fa:99:35:ea:bf:e0:dc:6a:90:2a:8f:a3:fa:51:b0:
40:39:30:dd:63:30:3b:70:7c:e4:b2:c8:6b:4e:7f:
59:17:cd:f0:9e:fa:85:95:72:f8:4b:cc:1d:c7:99:
f2:72:c7:ef:59:c6:4f:b4:c2:47:8b:6a:66:af:6c:
8f:bb:21:d1:3e:03:c8:0f:77:7a:01:af:83:8b:e5:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A9:78:25:8C:31:35:A5:B4:32:3A:88:76:C9:E7:CA:27:BF:36:96
X509v3 Authority Key Identifier:
keyid:A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:64:96:b1:b3:83:3e:76:a8:2b:23:29:40:1f:c0:b3:7b:68:
4e:ac:7b:c1:42:4a:53:c3:90:c2:1a:32:a8:9c:61:3b:03:39:
a2:e6:43:1b:50:bb:08:40:cf:8d:c9:09:0d:01:db:9e:b6:e1:
93:9d:29:31:2f:32:0e:0d:c0:5f:f1:0c:9c:84:fc:4e:ac:ee:
27:bf:0e:68:e3:9f:cd:0c:0f:44:50:15:c1:6b:ee:d2:f6:cc:
43:12:31:bf:ff:d4:1d:22:ef:a8:8f:e3:01:a6:81:b0:8e:36:
f8:68:03:2a:85:c5:b0:33:55:16:8d:02:c8:23:95:bc:92:41:
5d:b5:87:d2:41:3a:2b:93:db:8b:7e:9c:dc:84:a2:77:dd:5e:
5d:27:f7:08:9b:d5:7c:49:58:7b:84:84:5b:05:13:d8:97:39:
07:93:a5:72:f3:10:9f:5c:4e:11:23:ea:32:c9:f1:83:ec:0b:
d9:11:0e:8a:50:2c:6e:0f:c4:bf:5b:bf:a6:7e:b8:eb:23:2e:
7e:44:9c:80:06:fe:30:47:1d:32:b5:33:fc:d8:7c:9e:69:55:
05:2b:e8:da:89:13:bf:77:f1:6b:47:bf:96:9d:a6:fd:d0:71:
65:a7:6b:1b:3d:39:08:20:ed:51:e5:e8:36:50:e2:3d:42:49:
2c:05:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:19 2026 by rpki-client