
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft
File: 637A957BABD264BD486DB1ED9AD344531E09DAA9.mft (raw, json)
Hash identifier: 6ZzbTx/E0FDABbVI9FEISVHgErYVh3BQcYUW3rEw2xw=
Subject key identifier: C4:A4:81:E1:A2:FC:C7:A4:5E:0E:5D:D9:43:BF:C1:F4:C8:92:C6:06
Authority key identifier: 63:7A:95:7B:AB:D2:64:BD:48:6D:B1:ED:9A:D3:44:53:1E:09:DA:A9
Certificate issuer: /CN=637A957BABD264BD486DB1ED9AD344531E09DAA9
Certificate serial: 680CA485BA4BB93E1C22B8D4A7F9C581ECA1377E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 15:23:46 +0000
Manifest this update: Thu 23 Jul 2026 15:18:46 +0000
Manifest next update: Fri 24 Jul 2026 18:46:46 +0000
Files and hashes: 1: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: pBvBGLopvQdoZtJVsgZWZ9wA+Pu9rrcY8EO/1TZFlpo=)
2: 637A957BABD264BD486DB1ED9AD344531E09DAA9.crl (hash: 3Jt0i7g+bRi3zXMakTrkufOHB5vDEW6oeDSTUNFQTyM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.crl
rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:0c:a4:85:ba:4b:b9:3e:1c:22:b8:d4:a7:f9:c5:81:ec:a1:37:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637A957BABD264BD486DB1ED9AD344531E09DAA9
Validity
Not Before: Jul 23 15:18:46 2026 GMT
Not After : Jul 24 18:46:46 2026 GMT
Subject: CN=C4A481E1A2FCC7A45E0E5DD943BFC1F4C892C606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:b7:fb:d8:e3:0f:40:0e:82:b8:a4:1a:f6:
38:48:cb:f2:81:d7:1d:8e:45:66:84:11:bf:51:14:
3b:75:8d:fa:14:d5:10:39:eb:06:2f:fb:4a:76:3b:
bb:4b:b6:de:dd:f7:18:59:d8:37:39:d1:3a:aa:8e:
37:91:b8:25:1c:6f:4c:6a:00:13:59:50:4a:3f:40:
00:cd:1f:c8:51:ed:c8:ec:e0:4d:ba:11:c1:45:aa:
5d:4a:77:68:61:96:e3:be:06:a1:fa:ae:00:2b:89:
f3:bf:30:b6:d3:e6:72:8b:d2:65:5f:30:73:27:b7:
b4:70:a2:0f:98:7a:6d:fc:9a:44:ae:3f:eb:99:fd:
a4:e0:6b:12:13:1b:98:a9:8a:0c:56:9f:d1:25:62:
97:2c:c4:65:b1:78:bc:c2:b5:99:9b:18:5c:60:85:
08:69:65:f8:6d:91:dd:ff:31:17:4e:11:b8:a9:2c:
3c:8a:36:31:0c:b6:46:76:99:49:5c:01:70:18:4c:
00:6d:46:ec:2f:45:8a:1d:95:bd:c7:96:78:94:b5:
a4:c2:f8:3b:2a:06:27:1c:eb:e0:08:8e:b7:de:ba:
87:27:0f:75:9a:83:55:20:5b:dd:00:6f:91:12:77:
8d:e4:d2:6f:69:26:9c:b6:bf:c4:e6:67:60:1a:df:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A4:81:E1:A2:FC:C7:A4:5E:0E:5D:D9:43:BF:C1:F4:C8:92:C6:06
X509v3 Authority Key Identifier:
keyid:63:7A:95:7B:AB:D2:64:BD:48:6D:B1:ED:9A:D3:44:53:1E:09:DA:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:36:59:74:2b:9b:8c:c0:26:a5:3b:44:22:27:56:c2:ec:b5:
d2:f2:26:f3:9b:09:6a:2c:d6:f5:d6:59:01:8d:18:b6:b0:6c:
62:55:5b:07:da:f5:87:ee:3e:c9:cc:d2:07:46:41:b4:74:c8:
db:4d:a4:9a:20:ef:a5:55:54:c5:01:db:fe:33:7f:a5:71:5f:
bb:98:52:79:46:12:dc:da:2d:bb:73:c4:dd:79:2e:d2:3b:53:
36:8b:3a:68:b7:1b:c3:83:f7:4a:50:5a:06:d6:29:fb:17:f3:
84:ac:3f:1a:a5:98:09:06:97:4a:c2:38:cb:20:9e:48:70:22:
a2:c6:fe:ee:f5:09:5b:f3:4d:a5:9a:73:e1:7b:f8:25:94:7a:
18:7c:b5:ee:fe:94:81:bd:6d:de:8e:4b:33:d0:23:08:a2:15:
e2:a4:1a:ac:67:78:44:8d:49:87:79:46:ff:ac:13:a6:d0:90:
02:03:5c:bc:e0:e3:58:bc:af:f6:11:96:92:80:29:00:a2:e9:
c1:2d:5a:55:fc:f7:9b:db:9b:b3:5b:94:66:0e:7e:46:eb:17:
18:c8:60:0c:09:91:79:9d:37:07:96:3e:bd:c9:25:86:a7:75:
ed:7f:96:34:f9:b5:a8:b2:53:1e:9c:38:78:49:f7:54:30:f5:
11:e4:df:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:23 2026 by rpki-client