
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft
File: 637A957BABD264BD486DB1ED9AD344531E09DAA9.mft (raw, json)
Hash identifier: 76QffLVLz0xFAZUVNxzlYPSbxb1Oh1evHpg/5YfB7K0=
Subject key identifier: 2B:8D:48:F7:01:E0:06:FA:BA:22:70:58:E2:D5:10:15:F2:70:4D:85
Authority key identifier: 63:7A:95:7B:AB:D2:64:BD:48:6D:B1:ED:9A:D3:44:53:1E:09:DA:A9
Certificate issuer: /CN=637A957BABD264BD486DB1ED9AD344531E09DAA9
Certificate serial: 2E1DBCD1CAE0BEA2CD925E31190A6DD22F35E175
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft
Manifest number: C2
Signing time: Fri 25 Sep 2026 07:09:34 +0000
Manifest this update: Fri 25 Sep 2026 07:04:34 +0000
Manifest next update: Sat 26 Sep 2026 11:07:34 +0000
Files and hashes: 1: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: pBvBGLopvQdoZtJVsgZWZ9wA+Pu9rrcY8EO/1TZFlpo=)
2: 637A957BABD264BD486DB1ED9AD344531E09DAA9.crl (hash: UjV2XqI2PyPbpTwyQn0jspO6adEHTerPLJ6Xg7exnlQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.crl
rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 11:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:1d:bc:d1:ca:e0:be:a2:cd:92:5e:31:19:0a:6d:d2:2f:35:e1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637A957BABD264BD486DB1ED9AD344531E09DAA9
Validity
Not Before: Sep 25 07:04:34 2026 GMT
Not After : Sep 26 11:07:34 2026 GMT
Subject: CN=2B8D48F701E006FABA227058E2D51015F2704D85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:ca:80:c8:89:e5:03:40:5b:c6:10:42:31:
07:9e:3d:bd:c5:fe:20:f0:07:3a:e5:74:af:fe:b5:
18:91:f5:c8:2f:01:e5:71:41:8b:c3:18:76:ac:86:
e0:cc:a9:20:92:6d:23:60:53:63:24:5f:27:c1:b8:
2d:5d:3a:b4:7d:77:43:59:9a:3b:7b:aa:cc:b2:99:
9c:ed:c6:a2:fb:91:58:9c:cc:e8:14:7e:df:f3:9e:
1c:b5:cc:64:d0:9a:62:34:68:0e:45:90:9a:6c:25:
6c:3b:eb:aa:9e:57:75:6e:1d:16:62:ef:70:54:86:
c7:0f:2d:31:6c:06:24:2f:2a:41:ee:c7:33:9e:44:
ea:dd:4d:1e:36:0f:dc:d4:ba:7d:e3:c1:a6:12:39:
a9:a0:67:81:04:36:40:42:a2:74:2b:0f:aa:0c:5b:
dd:15:cb:e0:20:b7:95:35:14:1a:20:9c:84:21:a2:
89:42:fe:34:74:30:b6:66:32:82:29:af:09:34:c8:
17:04:7b:54:2c:1a:cf:65:3e:9c:2a:6b:ce:71:b7:
ad:63:14:16:79:47:a8:e3:6d:59:c5:39:7c:a8:51:
e2:ca:f6:af:00:01:cb:50:2f:ab:ae:6d:7b:c8:03:
02:86:c1:52:69:e8:f1:dd:59:61:bb:56:dd:24:e1:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8D:48:F7:01:E0:06:FA:BA:22:70:58:E2:D5:10:15:F2:70:4D:85
X509v3 Authority Key Identifier:
keyid:63:7A:95:7B:AB:D2:64:BD:48:6D:B1:ED:9A:D3:44:53:1E:09:DA:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ba:db:f4:ff:38:da:9e:16:ce:e6:a9:ad:0c:de:24:92:0e:
a4:8c:dc:aa:7e:75:28:dd:cc:26:6a:87:6d:75:48:3e:4c:fb:
0b:9c:f6:27:df:58:67:44:e9:29:35:09:bf:f7:fd:52:38:f7:
06:27:bb:47:f2:f0:9d:13:f9:28:29:8e:7f:c0:8e:81:ff:cb:
60:1f:e5:dc:4d:6f:c4:13:b5:29:63:bc:bc:57:ae:17:e3:f8:
51:c1:bf:b8:98:f6:8a:52:9f:67:e2:1c:12:13:de:01:00:5c:
ee:60:7c:02:29:87:a6:c1:b8:36:00:59:ae:86:ec:5f:3f:11:
26:a0:bd:b6:8a:95:d2:f7:c3:03:ff:a5:f6:76:b8:c7:74:00:
a9:5a:1d:ab:06:df:80:93:5e:08:b9:2c:b7:ea:da:f4:a0:70:
53:40:ac:ea:59:5b:d1:27:32:63:73:45:b0:63:d0:3b:fa:99:
54:83:48:c2:e3:17:8c:bf:ac:49:d0:54:2c:e8:e1:bd:65:fd:
29:1c:0d:6c:c9:92:c7:57:b9:40:6d:9e:c4:6a:a8:e0:79:e2:
22:4f:d5:8a:2a:d8:4a:61:22:86:06:76:a3:86:4e:82:6a:db:
f1:05:a1:f9:54:66:b6:b1:60:45:1a:04:12:78:64:c4:cb:1a:
eb:2e:43:f0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULh280crgvqLNkl4xGQpt0i814XUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM3QTk1N0JBQkQyNjRCRDQ4NkRCMUVEOUFEMzQ0NTMx
RTA5REFBOTAeFw0yNjA5MjUwNzA0MzRaFw0yNjA5MjYxMTA3MzRaMDMxMTAvBgNV
BAMTKDJCOEQ0OEY3MDFFMDA2RkFCQTIyNzA1OEUyRDUxMDE1RjI3MDREODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNMqAyInlA0BbxhBCMQeePb3F
/iDwBzrldK/+tRiR9cgvAeVxQYvDGHashuDMqSCSbSNgU2MkXyfBuC1dOrR9d0NZ
mjt7qsyymZztxqL7kViczOgUft/znhy1zGTQmmI0aA5FkJpsJWw766qeV3VuHRZi
73BUhscPLTFsBiQvKkHuxzOeROrdTR42D9zUun3jwaYSOamgZ4EENkBConQrD6oM
W90Vy+Agt5U1FBognIQhoolC/jR0MLZmMoIprwk0yBcEe1QsGs9lPpwqa85xt61j
FBZ5R6jjbVnFOXyoUeLK9q8AActQL6uubXvIAwKGwVJp6PHdWWG7Vt0k4VLNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUK41I9wHgBvq6InBY4tUQFfJwTYUwHwYDVR0j
BBgwFoAUY3qVe6vSZL1IbbHtmtNEUx4J2qkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmZkYjE4ZWYtNjU5Zi00YjFlLWEyZTAtYjU4YWY2YjEyNzFmLzAvNjM3QTk1N0JB
QkQyNjRCRDQ4NkRCMUVEOUFEMzQ0NTMxRTA5REFBOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82MzdBOTU3QkFCRDI2NEJENDg2REIxRUQ5QUQzNDQ1MzFFMDlE
QUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy
ZTAtYjU4YWY2YjEyNzFmLzAvNjM3QTk1N0JBQkQyNjRCRDQ4NkRCMUVEOUFEMzQ0
NTMxRTA5REFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH+62/T/ONqeFs7mqa0M3iSSDqSM3Kp+dSjd
zCZqh211SD5M+wuc9iffWGdE6Sk1Cb/3/VI49wYnu0fy8J0T+Sgpjn/AjoH/y2Af
5dxNb8QTtSljvLxXrhfj+FHBv7iY9opSn2fiHBIT3gEAXO5gfAIph6bBuDYAWa6G
7F8/ESagvbaKldL3wwP/pfZ2uMd0AKlaHasG34CTXgi5LLfq2vSgcFNArOpZW9En
MmNzRbBj0Dv6mVSDSMLjF4y/rEnQVCzo4b1l/SkcDWzJksdXuUBtnsRqqOB54iJP
1Yoq2EphIoYGdqOGToJq2/EFoflUZraxYEUaBBJ4ZMTLGusuQ/A=
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:40:58 2026 by rpki-client